# 0008. Telemetry is opt-in

- Status: Accepted
- Date: 2026-10-27

## Context

Usage data could help improve OpenKedai, but shops handle customer and sales data covered by Malaysia's Personal Data Protection Act (PDPA), and unexpected data collection destroys trust in open-source software.

## Decision

Telemetry is off by default and only ever enabled by the owner. No data leaves a device or server unless the owner has switched that feature on.

## Consequences

- Features that send data elsewhere (telemetry, update checks, cloud backups) each need an explicit, owner-controlled setting.
- None of them may sit on the order path (see [ADR 0002](https://docs.openkedai.com/adr/0002-offline-first/)).