Privacy Policy
1. Introduction
Orbit Tech Lab ("we", "us", or "our") built the Udhaar Khata - Hisab Kitab mobile application as a free, offline bookkeeping utility. This Privacy Policy informs users of our policies regarding the collection, use, retention, and disclosure of information when you use our application.
2. Information Collection and Storage (100% Offline)
Udhaar Khata operates entirely offline:
- No User Account or Registration: You do not need an account, email, username, or phone number to use the app.
- No Cloud Servers: We do not operate remote databases or cloud servers for this app. We cannot see, access, or intercept any ledger entries, customer names, phone numbers, transaction amounts, notes, or dates entered.
- On-Device Local Database: All entries, customer lists, supplier records, and profile details are saved locally in an isolated SQLite database on your device's internal storage sandbox.
- No Sensitive Financial Data: The app does not collect bank account credentials, credit/debit card numbers, CVVs, or payment passwords. It is purely an offline record-keeping ledger.
3. Device Permissions and Usage
Udhaar Khata requests only minimal device permissions strictly necessary for user-initiated offline features. An in-app explanation is shown prior to any system permission request:
- Photos / Media Library (Optional): Used only if you choose to attach a business logo or profile avatar to your shop profile or exported PDF statements. The chosen image is stored only locally on your phone.
- Camera (Optional): Used only if you choose to capture a new photo for your business profile avatar. No photos are transmitted over any network.
- Biometrics / Fingerprint (Optional): Used exclusively to unlock the app locally via your device's secure enclave (Touch ID / Face ID / Fingerprint). Biometric data is managed by your phone's operating system and is never accessible to the app or developer.
- Storage / Document Picker (System SAF): Used when you explicitly choose to export a PDF statement or create/restore a local backup file (
.json). Files are read and written strictly to folders you specify. - Network / Internet: The app's Android configuration explicitly blocks the
android.permission.INTERNETpermission. The app has zero capability to transmit data across the internet.
4. Third-Party Services, SDKs, and Analytics
To guarantee complete confidentiality and compliance with the Google Play Developer Policy:
- No Advertising SDKs: There are no Google AdMob, Unity, AppLovin, or other advertisement SDKs.
- No Analytics or Tracking SDKs: We do not include Google Analytics, Firebase Analytics, Flurry, Sentry, Mixpanel, or Facebook SDKs.
- No Third-Party Cookies: No persistent identifiers or tracking cookies are utilized.
5. Data Retention and Deletion Policy
Because all information is stored exclusively on your personal device, you have 100% ownership and control over the retention and deletion of your data:
- In-App Data Purge: You can permanently erase all records, transactions, customers, settings, and cached avatars at any time by navigating to Settings > Delete All Data and confirming. This action immediately drops and rebuilds an empty local database. See our full Data Deletion Guide.
- OS Storage Clear: You can clear all data at the OS level via your Android device's Settings > Apps > Udhaar Khata > Storage > Clear Storage / Clear Data.
- Uninstallation: Uninstalling the application completely removes the sandboxed SQLite database and all local application files from your device.
- Backup Files: If you created an external backup file (
.json), you can delete that backup file anytime from your device's file manager or cloud drive.
6. Data Security
We take data security seriously:
- PIN Cryptography: If you enable PIN protection, your 4-digit PIN is salted and hashed using cryptographic SHA-256 via
expo-crypto. Plaintext PINs and secret salts are never stored in unencrypted format and are never exported in backup files. - Backup Protection:
android.allowBackupis set tofalseto prevent unauthorized extraction via ADB cloud backup utilities.
7. Children's Privacy
Our application is intended for adult business owners, merchants, shopkeepers, and freelancers (aged 18 and older). We do not knowingly collect any personally identifiable information from children under the age of 13.
8. Financial Features Declaration (Google Play Policy)
Udhaar Khata is a personal and merchant bookkeeping utility. It does not provide loan services, credit facilities, personal loans, banking accounts, or money transmission services. It does not calculate interest rates, late fees, or issue digital credit cards.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date. If any network-based feature or cloud storage is ever introduced, an explicit consent flow will be provided in the application prior to any release.
10. Contact Information
If you have any questions or suggestions regarding this Privacy Policy or data privacy in Udhaar Khata, please contact us:
- Developer: Orbit Tech Lab
- App Website: https://khata.orbittechlab.com
- Company Website: https://orbittechlab.com
- Support Email: support@orbittechlab.com