Applies to the Android application and to the web application, package com.hikashop.app. Last updated on the 29th of August 2026.
The HikaShop application is published by Hikari Software. It is a client for a shop you already run: it talks to your own HikaShop installation, on your own server, and to nothing else.
Nothing. The application has no account, no analytics, no advertising, no crash reporting and no third party service of any kind. Hikari Software receives no data from it and operates no server it talks to.
The address of each shop you connect, and one key per shop, which is what lets the application speak to that shop. On Android the key is held in the system's encrypted storage. The application also keeps your own preferences, such as the language and the filters you last used, and a copy of what it last read from your shop so it can be displayed again quickly.
All of it stays on the device. Uninstalling the application removes it. You can also revoke a device from your shop's backend, under System > App Devices, which makes its key useless immediately.
Requests go to the address of the shop you connected, over HTTPS, carrying that shop's key. They contain what you asked for: the orders you are reading, the product you are saving, and so on. They go to your server and to no one else. What your shop then does with that data is governed by your own shop's privacy policy.
The application is a tool for merchants and is not directed at children.
If this policy changes, the new version appears at this address with a new date. The source of the application, including this page, is public at github.com/hikashop-nicolas/hikashop-mobile.
Questions about this policy: the Hikari Software contact form. Bugs and ideas are better placed in the issues of the repository.