Local-first security model
The App does not need a NabixSoft account or network connection for primary inventory work. Keeping the working database on the device reduces dependence on a central inventory service and limits routine transmission of business data.
On-device storage
Inventory records are stored in the App’s private local storage using SQLite. The database uses transactional operations, foreign-key relationships, indexes, and write-ahead logging to support consistency and reliable updates. Product images are maintained in app-managed local storage.
The App relies on standard operating-system application sandboxing and storage protections. No software can guarantee absolute security, so keeping your device and operating system up to date remains important.
Inventory integrity
- Stock adjustments are recorded as movements rather than silently replacing quantities.
- Stock removal is validated so an item cannot be reduced below zero through standard workflows.
- Location transfers update stock transactionally.
- Backup files are inspected before restoration and restoration requires confirmation.
- Restoring a backup clearly warns that current device inventory will be replaced.
Backup security
Backups are created only after you initiate an export. A portable backup can contain your full inventory, business records, movement history, and product photos. Treat backup files as sensitive business data.
On supported Apple devices, the App can use its private iCloud container. When you choose another Files or sharing destination, that destination’s security and privacy practices apply. Store backup files only in locations you trust and remove copies you no longer need.
Permission boundaries
Camera, photo, notification, iCloud, Files, and sharing access are requested only for their related features. You can review and revoke permissions through device settings. The App remains usable for unrelated local inventory tasks when an optional permission is denied.
What you can do
- Protect your device with a strong passcode.
- Install operating-system and App updates promptly.
- Export backups regularly and protect them like financial records.
- Verify the destination before sharing a report or backup.
- Remove business data before transferring or disposing of a device.
Responsible disclosure
If you believe you found a security issue, email security@nabixsoft.com with a clear description, reproduction steps, affected version, and potential impact. Please do not include real customer or inventory data. We ask that you avoid privacy violations, service disruption, social engineering, or destructive testing.