Encrypted
The app always connects over HTTPS, and stored data is encrypted by Google Cloud.
Data Security
Your Store Data Is Safe and Stays Yours
Where your data lives, who can open it, and the safeguards already running in Kelola.
Updated 28 October 2026
Read the Privacy PolicyStored on Google Cloud
All store data is kept in the Singapore region (asia-southeast1), Google's closest data center to Indonesia.
Database
Singapore
Sales, stock, customers, and reports
Photos and documents
Singapore
Product photos, attendance selfies, and uploads
App servers
Singapore
Checkout, reports, and automated WhatsApp
Storage
Kept in several zones
Data is copied automatically to several data centers in the Singapore region, so it survives if one of them has a problem.
Backed up every day
The database is backed up automatically every day and kept for 14 days, plus recovery to any point in time within the last 7 days.
Monitored around the clock
The app, servers, and WhatsApp are checked automatically every 15 minutes, and the Kelola team is alerted right away when something is wrong.
Safe when the internet drops
Sales are kept on the cashier device and sent automatically once the connection is back.
Who can open your data
Every store is isolated
The server checks every request, so an account can only read and change its own store's data. These rules are tested automatically on every update.
Access by role
Cashiers focus on selling without seeing costs or profit. Managers run operations. Financial reports, payroll, and deleting data are owner only.
Branch Access
In multi branch businesses, staff can only pick the branches assigned to them.
Staff leave, access ends
Deactivated staff are rejected by the server right away, even if the app is still open on their phone.
Control at the counter
Approval PIN
Voids, refunds, and discounts over the limit need an owner or manager PIN. The 6 digit PIN is stored hashed and locks for 10 minutes after 5 wrong tries.
Enterprise
Activity Log
Who changed what and when is recorded: products, prices, stock, sales, staff, and settings. Exportable to Excel and PDF.
Accounts
Verified sign up
Sign up is protected by reCAPTCHA, and the owner's email must be verified.
Codes for important changes
Changing the password or WhatsApp number needs a code sent by email or WhatsApp.
Sign out everywhere
One button in My Account signs you out of every phone and computer.
Your data stays yours
Never sold
Your store data and your customers' data are never sold to anyone.
Exportable
Products, recipes, ingredients, customers, sales, and financial reports can be downloaded to Excel or PDF.
No card details
Subscription payments are processed by iPaymu. Kelola only receives whether they succeeded.
Kelola Capital data consent
Your business summary is only shared with financing partners after you consent. Consent is fully recorded under Indonesia's PDP Law, can be withdrawn any time, and customer personal data is never included.
Permanent deletion
When you ask for your store to be deleted, all of its data goes with it, including photos and documents.
Questions about your store data?
Contact us to ask about, download, or delete your store data.
