Privacy Policy

Last updated: July 2026

1. Who We Are

Vyapar Khata is a mobile accounting application for small Indian businesses. The app is developed and maintained as an independent project. For any privacy-related questions, you can contact us at the email address listed at the bottom of this page.

2. What Data We Collect

We collect only what is necessary to make the app work for you.

Information from Google Sign-In:

• Your name
• Your email address
• Your Google profile photo
• A unique Google user ID (used to separate your data from other users on the same device)

Business data you enter:

• Firm/business names and details (GST number, address, bank info)
• Customer and party names, phone numbers, GSTIN
• Products, inventory, and stock levels
• Journal entries and transactions (amounts, dates, notes)
• Bill photos you attach to entries

Device information:

• A randomly generated device ID (used to detect and manage multi-device logins safely)
• Network connectivity status (to decide whether to sync or work offline)

3. How We Use Your Data

• To let you log in securely using your Google account
• To store and display your business records within the app
• To back up your data to your own Google Drive (only if you are signed in)
• To detect if the same account is used on a second device, so we can protect your data from being overwritten silently
• To verify your premium subscription status via Google Play

4. Where Your Data Is Stored

On your device: All your business data (customers, products, transactions, firms) is stored locally using AsyncStorage on your device. This data never leaves your device unless you have Google backup enabled.

Google Drive: If you are signed in with Google, the app creates a single backup file in your Google Drive's private appDataFolder. This folder is only accessible by Vyapar Khata — not visible to you in Google Drive's normal file view, and not accessible by us or anyone else.

Firebase: We use Firebase Authentication to verify your Google sign-in. We also use Firebase Realtime Database to store a small session record (your device ID and sign-in timestamp) per account. This is used only for multi-device conflict detection. No business data is ever stored in Firebase.

5. Data We Do NOT Collect

• We do not collect or store your business data on any server we own
• We do not run advertisements in the app
• We do not sell, rent, or share your data with any third party for marketing
• We do not track your location
• We do not read your contacts, SMS, or call logs

6. Third-Party Services

The app uses the following third-party services, each with their own privacy policies:

• Google Sign-In — for authentication. Google Privacy Policy
• Google Drive API — for cloud backup to your own Drive. Google Privacy Policy
• Firebase (Google) — for authentication and session tracking. Firebase Privacy Policy
• Google Play Billing — for premium subscription purchases. Google Privacy Policy
• Firebase Crashlytics — for anonymous crash reporting to help us fix bugs. Does not collect personal or business data. Firebase Privacy Policy
• Firebase Analytics — for anonymous usage analytics (e.g. how many users open the app). Does not collect your business records. Firebase Privacy Policy

7. Permissions the App Requests

• Internet access — for Google Sign-In, Drive backup, and Firebase session tracking
• Camera — only if you choose to attach a bill photo to a transaction. We do not access the camera at any other time.
• Storage / Media — only if you choose to pick a photo from your gallery for a bill attachment or firm logo

8. Data Retention

Your data stays on your device until you uninstall the app or delete it manually. Your Google Drive backup is retained until you delete it from Drive or uninstall the app. The Firebase session record (device ID only) is deleted when you sign out of the app.

If you delete your Google account, your Drive backup and Firebase auth record are automatically removed by Google.

9. Children's Privacy

Vyapar Khata is designed for business owners and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Security

Your business data is stored locally on your device and is protected by your device's own security (screen lock, encryption). Cloud backups go to your personal Google Drive using OAuth2, which means we never see or store your Google credentials. Firebase connections use HTTPS encryption.

11. Your Rights

You can at any time:

• Delete your local data — by uninstalling the app or using the app's sign-out and data reset options
• Delete your cloud backup — by going to Google Drive → Settings → Manage apps → Vyapar Khata → Delete data
• Revoke app access to Google Drive — at myaccount.google.com/permissions
• Request data deletion — by contacting us at the email below

12. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes means you accept the updated policy.

13. Contact Us

If you have any questions or concerns about this privacy policy or how your data is handled, please contact us: