Privacy Policy

Developer

Orvexa Co ("we", "us")

Package

com.orvexaco.digitalkhata

Contact

muhammadsuleman30000@gmail.com

This policy covers the Android app Digital Khata: Udhar & Stock ("Digital Khata", the "app"), package com.orvexaco.digitalkhata, distributed through Google Play. Digital Khata is an offline-first shop accounting app for stock, sales, purchases, expenses, customer and supplier khata, and invoices. It does not contain advertising and does not include analytics or tracking software. By default, all of your business data stays on your phone. It leaves your phone only if you choose an optional feature: Google sign-in, the Premium purchase, Premium Google Drive sync to your own Drive, or sharing a business with a partner.

The Terms of Use for the app are published alongside this policy. To delete your account or data, see Delete your account.

1. Summary

2. Information stored on your device

Everything you enter is kept on your phone, in the app's private storage:

• Business details: shop name, address, phone, email, currency, logo and invoice settings, for each business you create.
• Records: products and stock, sales, purchases, expenses, and the customers, suppliers, payments and partners you add, including names and phone numbers you type in; cash book and bank book entries; and the staff book (staff names, attendance, salary and advances).
• Images: product photos and the shop logo you choose.
• Settings: your preferences in the app.

Unless you share a business with a partner (section 4), none of this is sent to us or to anyone else. If you set a PIN or fingerprint app lock, the PIN is stored on your device and fingerprint checks are handled by Android; your fingerprint is never available to the app.

3. Google sign-in (optional)

You can use the app without signing in. If you choose Continue with Google, the app signs you in with Firebase Authentication (a Google service we use). This creates an account that holds your name, email address and Google account ID, plus a Firebase user ID. We use it only to identify you for partner sharing (section 4) and to link your Premium purchase to your account (section 7). Signing in by itself does not upload your business data.

4. Sharing a business with partners (optional)

Partner sharing is off unless you turn it on, and it requires Google sign-in. When you, as the owner, choose to share a business and invite a partner by email:

• What is uploaded: that business's records — products, sales, purchases, expenses, customers and suppliers, payments, staff, and cash and bank book entries — are stored in Google Cloud Firestore (Firebase), in the asia-south1 (Mumbai, India) region, so they stay in sync between your phone and your partners' phones. Only the business you choose to share is uploaded; your other businesses stay on your phone.
• Not uploaded: product photos and the shop logo stay on each phone.
• Member list: the business's member list stores the owner's and each invited partner's email address and name, so the app can show who has access.
• Who can read it: access rules allow only the owner and the partners the owner invited to read or change the shared business. Anyone you invite can see all of that business's shared records, so invite only people you trust. We do not sell this data or use it for advertising or any other purpose.
• Stopping sharing: when the owner stops sharing, the cloud copy of the business is deleted; the records stay on the owner's phone. When a partner leaves (or is removed), their access ends. Records already synced to a partner's phone stay on that phone until the partner deletes the business or the app.
• Deleted records: when a record is deleted in a shared business, a small deletion marker (an ID and time, no record contents) may remain in the cloud so other phones know to remove it. These markers are removed when sharing is stopped.

5. Camera, photos, WhatsApp, phone and sharing

• Camera and photos are used only when you choose to add a product photo or a shop logo. The image you pick or take is saved in the app on your device and is not uploaded anywhere, including for shared businesses.
• WhatsApp, SMS, the phone dialer and the Android share sheet are opened only when you tap a button such as "Send reminder", "Call" or "Share invoice". The app prepares the message, invoice, report or file and hands it to the app you choose; what you then send is handled by that app under its own privacy policy.

6. Backups

• Auto-backup on the phone: the app keeps a backup file of your data in its storage on your device.
• Android Auto Backup: if device backup is turned on, Android may include the app's data in your own Google account backup. That backup belongs to your Google account, is handled by Google, and is governed by Google's privacy policy. We have no access to it.
• Backup and restore file: when you tap "Back up now" you choose where the backup file goes (for example Google Drive, WhatsApp or a folder). You can restore from a backup file you pick. The service you share it with handles the file under its own privacy policy. We never receive these files.
• Google Drive backup & sync (Premium, optional): if you connect your Google account, backups are stored in the hidden app-data folder (appDataFolder) of your own Google Drive, using the limited drive.appdata scope. With this scope the app can only see the files it created in that hidden folder; it cannot see any other files in your Drive. The backups go directly from your phone to your Google account. We, the developer, cannot access them. You can disconnect at any time in the app's Settings, and you can remove the app's access and its hidden data in your Google account (Google Drive → Settings → Manage apps). Google's handling of your Drive data is governed by the Google Privacy Policy.

7. Purchases (Google Play and RevenueCat)

The app is a free download with an optional one-time in-app purchase, Premium Lifetime (US$9.99, or the local price shown in Google Play). Payment is processed entirely by Google Play Billing; we never see your payment details. Google's handling of your purchase is described in the Google Play Terms of Service and the Google Privacy Policy.

Purchases are managed with RevenueCat (RevenueCat, Inc.), a purchase-management service. When the app checks or restores your purchase, RevenueCat receives:

• an app user ID: if you are signed in, your account ID, so your purchase history is linked to your account and can be restored on another phone; if you are not signed in, an anonymous ID generated on your device;
• the purchase receipts and transaction data from Google Play (purchase token, product and purchase date) so the purchase can be verified with Google;
• basic technical information sent with each request, such as app version, device type and your IP address as part of the network connection.

No business data (products, sales, customers, suppliers, payments, photos or anything else you enter) is sent to RevenueCat or Google Play. RevenueCat acts as our service provider and does not sell this data. Its privacy policy is at revenuecat.com/privacy.

8. Data safety summary

This summarises what we declare in the Data safety section of the app's Google Play listing.

9. Children

The app is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has signed in to the app, contact us at muhammadsuleman30000@gmail.com and we will delete the account.

10. Your choices and data deletion

• Delete your account: follow the steps at Delete your account page. Deleting your account removes your sign-in account, the cloud copy of any shared business you own, your membership in businesses shared with you, and the RevenueCat record linked to your account ID.
• Stop sharing or leave: in the app, open Settings → Share business. If you own the business, stopping sharing deletes its cloud copy. If you are a partner, leaving removes your access.
• Delete one business: delete it in the app's Settings. Its records are removed from your device.
• Delete everything on the phone: uninstall the app, or clear its data in Android Settings → Apps → Digital Khata → Storage → Clear storage. This permanently deletes all data held by the app on that phone. It does not delete your account or a shared business's cloud copy; use the options above for those.
• Backup files: files you shared or saved stay where you put them until you delete them. An Android device backup in your Google account is managed in your Google account settings.
• Google Drive backups: disconnect Google Drive in the app's Settings to stop syncing. To delete the backups already stored, remove the app's hidden data in Google Drive → Settings → Manage apps → Digital Khata → Options → Delete hidden app data.
• Purchase records: Google Play keeps the record of your purchase under your Google account. To ask for the record held by RevenueCat to be deleted, email muhammadsuleman30000@gmail.com.

11. Security

Data on your device is stored in the app's private storage, which other apps cannot read on an unmodified phone. Sign-in, partner sharing, purchase verification and Google Drive sync use encrypted connections. Shared businesses are protected by Firebase access rules that limit them to the owner and invited partners. Google Drive backups are protected by your Google account's security. Backup files are ordinary files: anyone with access to the place you saved or sent them can read them, so keep them somewhere you trust.

12. Changes to this policy

If the app's data practices change, this policy will be updated and the "last updated" date changed. Material changes will be mentioned in the app's release notes on Google Play.

13. Contact

Orvexa Co
muhammadsuleman30000@gmail.com