Security and your data
What protects your records in KinMol, in plain words. Everything on this page is how KinMol works today.
Where KinMol runs
The KinMol app runs on Google Cloud. Your records are kept in a managed PostgreSQL database from Supabase, which also handles sign-in. Every page is served over HTTPS.
One business, one set of records
Row-level security in the database checks every read and write against your business and your role. One business can never read another’s records. This is enforced by the database itself, not by hiding buttons.
Each person sees their part
Give each person a role, with permissions per person and per branch. A cashier cannot open the books and a kitchen screen cannot see the money. Some actions wait for a manager’s approval, and the activity log shows who did what.
Signing in
Passwords are stored only as hashes, never as the password itself. Turn on two-step sign-in for your account, or sign in with Google.
Keys you give KinMol
Payment gateway keys, courier and SMS account details, and the tokens for your connected Facebook and WhatsApp accounts are encrypted with AES-256-GCM before they are stored. A stored value that was changed fails to decrypt, rather than decrypting to something wrong.
The money path
Prices are set by the server, so nothing is sold at a number the screen made up. Bill numbers are allocated under a lock, so two tills never take the same one. A payment reported twice is recorded once, and a bill cannot settle unless its journal entry balances.
Your money stays yours
Online payments go straight into your own merchant account with Fonepay, eSewa, Khalti or your bank. KinMol never holds the money and takes no percentage.
Photos and documents
Files such as bill photos, documents and generated PDFs are kept in access-controlled storage and opened through short-lived signed links.
Your data is yours to take
Download your records from the console whenever you like. Owners, admins and accountants can download the books.
Closing your account? Read how it works first. Account deletion
- Sales, customers and products as CSV
- The day book, purchases, expenses and suppliers as CSV or Excel
- Stock value
- IRD’s VAT sales and purchase books, as Excel or PDF
- The whole fiscal year as one ZIP file, for your accountant or auditor
Tax invoices and IRD
Tax invoices are switched off for every shop until IRD approves KinMol’s e-Billing software. Until then every sale prints a numbered payment receipt. We will say so on the What’s live page the day it changes.
Questions, or found a problem?
Write to us about how your data is handled, or about anything on this page that looks wrong. The legal detail is in the Privacy Policy and the Data Processing terms.