AsaanKhata Privacy Policy

1. Who we are

AsaanKhata (“App”, “we”, “our”, “us”) is a mobile application for small businesses and shopkeepers to manage khata (ledger), customers, suppliers, stock, sales, purchases, expenses, payments, reports, and related business records.

This Privacy Policy describes how we collect, use, store, share, and protect information when you install or use AsaanKhata on Android. By using the App, you agree to this policy. If you do not agree, please uninstall and stop using the App.

2. How the App works

• Offline-first: Your primary business data is stored on your device in a local database (SQLite).
• Optional cloud sync: When you are online, data may sync to our cloud backend so you can restore after reinstall or use another device.
• Multiple karobar: You may create more than one business profile on one device (subject to plan limits).
• No sale of data: We do not sell, rent, or trade your personal or business data to advertisers or data brokers.

3. Information we collect

3.1 Information you enter in the App

• Business profile: business name, phone number, business type/category, location (city or area as text), optional logo image, and profile preferences (e.g. display name, gender for profile card).
• Customers & suppliers: names, phone numbers, addresses, balances, and notes you add.
• Products & stock: product names, prices, quantities, barcodes, categories, and stock movements.
• Transactions: sales, sale items, purchases, purchase items, payments, ledger entries, expenses, and related amounts (stored in local currency units).
• Reports & exports: data included when you generate PDF reports or share receipts/invoices.
• Digital business card: information you choose to show on your in-app business card (name, type, address, phone) and card design preference.
• Subscription: Pro plan status, activation codes, or trial eligibility (if you use paid features).
• App lock: PIN or biometric unlock settings (stored and processed on your device).

3.2 Information collected automatically

• Device identifier: used only to manage one-time Pro trial per device and prevent abuse (e.g. Android device-related ID or an app-generated identifier).
• App preferences: language, active karobar ID, sync timestamps, cached admin configuration, and similar settings stored locally.
• Network status: to know when sync or cloud features can run (we do not track your browsing history).

3.3 Device permissions (only when you use a feature)

Permissions are requested at runtime. You may deny them; related features may not work.

4. How we use your information

• Provide and operate App features (khata, stock, sales, purchases, expenses, due lists, reports).
• Store data on your device and, when online, sync or back up to the cloud.
• Generate PDFs, receipts, business cards, and share content through apps you select (WhatsApp, email, etc.).
• Manage Pro subscriptions, trials, and plan limits.
• Deliver admin-controlled settings (help video links, optional ads configuration, optional AI-related settings if enabled).
• Improve stability, security, and customer support.
• Comply with applicable law and protect users, our systems, and the public.

5. Legal bases (where applicable)

If you are in the European Economic Area, United Kingdom, or similar regions, we process data based on: (a) contract — to provide the App you requested; (b) legitimate interests — security, fraud prevention, and service improvement; (c) consent — where required for optional permissions or features; (d) legal obligation — when the law requires it.

6. Data storage & retention

• On device: SQLite database and app preferences are the main copy of your data.
• Cloud (optional): when sync runs, a copy may be stored on Supabase-hosted infrastructure.
• Retention: data remains until you delete it in the App, delete a karobar or account (where available), uninstall the App, or contact us to request deletion of cloud copies we control.
• Backups you create: JSON backup files you export are under your control on your device or wherever you save them.

7. Third-party services

We use trusted providers to operate the App. Their privacy policies also apply:

7.1 Supabase (cloud database & sync)

Used for optional cloud backup, multi-device restore, and remote app configuration (e.g. help links). Data is transmitted over encrypted connections (HTTPS/TLS).
Supabase Privacy Policy

7.2 Google Play

The App is distributed through Google Play. Google processes information related to downloads, updates, and in-app purchases (if you buy Pro through Play) under its own policies.
Google Privacy Policy

7.3 YouTube / external links (optional help)

If you tap a help or tutorial button, the App may open a YouTube or web link in your browser or the YouTube app. We do not embed YouTube players inside the App. YouTube/Google may collect data according to their policies.
Google / YouTube Privacy

7.4 Sharing apps you choose

When you share a PDF, image, business card, or message via WhatsApp, email, or other apps, that third-party app’s privacy policy applies. We do not control what those apps do with shared content.

8. Data sharing & disclosure

We may share information only in these situations:

• With service providers listed above, strictly to operate the App;
• When you direct us to share (export, share sheet, WhatsApp, etc.);
• With your consent;
• If required by law, court order, or government request;
• To protect rights, safety, and security of users, us, or others.

We do not sell your data.

9. Security

We use reasonable technical and organizational measures, including local storage on your device, encrypted transport (HTTPS/TLS) for cloud communication, and access controls on our backend. You can enable app lock (PIN/biometric) for additional protection on your device.

No method of transmission or storage is 100% secure. You are responsible for securing your device, PIN, and any backup files you create.

10. Children’s privacy

AsaanKhata is intended for business users and is not directed at children under 13 years (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will take steps to delete it.

11. Your rights & choices

• Access & update: view and edit your business data inside the App.
• Delete: remove records, karobar, or account data using in-app options where available.
• Permissions: revoke camera, location, contacts, etc. in Android Settings.
• Opt out of cloud: use the App offline; avoid sync if you do not want cloud backup (local data remains on device until you delete it).
• Contact us: request access, correction, export, or deletion of cloud data we control (see Section 13).

Depending on your location (e.g. EU/UK GDPR, Pakistan, or other laws), you may have additional rights. We will respond to verified requests within a reasonable time (typically within 30 days).

12. International data transfers

Our service providers may process data on servers located outside your country (for example in the United States, European Union, or other regions where Supabase or hosting partners operate). Where required by law, we rely on appropriate safeguards for such transfers. By using the App, you understand that your data may be processed in these locations when cloud sync is used.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change. Material changes may be communicated in the App or on this page. Continued use after the effective date means you accept the updated policy.

14. Contact us

For privacy questions, data requests, account deletion help, or support:

Email: asankhataapp@gmail.com

App name: AsaanKhata
Package name: com.asaankhata.app
Platform: Android (Google Play)

Please include your registered phone number (if any) and a description of your request so we can help you faster.