Privacy Policy
Last updated: 22 July 2026
This Privacy Policy describes what information Smart Hisab (“the App,” “we,” “us”) collects, why, and how it is used, based strictly on functionality implemented in the app and its backend.
This Privacy Policy is published by OMKAR TRADERS (Registered MSME (Micro Enterprise), Udyam Registration No. UDYAM-MH-35-0035140), the business that develops and operates Smart Hisab, registered at Main Road, Near Post Office, Shirpur Jain, Washim, Maharashtra – 444504, India.
1. Information We Collect
| Category | What we collect | Why |
|---|---|---|
| Account identity | Your mobile phone number (Indian numbers only) | To create your account and log you in via a one-time WhatsApp code |
| Profile | Your name (if you provide one) | Displayed on your profile and statements |
| Contacts | Name and phone number of customers you choose to add | To organize your ledger by customer |
| Transaction records | Amounts, notes, dates, and direction (given/received) of entries you record | Core ledger functionality |
| Bill photos | Photos you choose to attach to a transaction | Proof-of-transaction, stored at your discretion |
| Reminders | Due dates and notes you set for a customer | To notify you of upcoming payments |
| Device identifier | A generated identifier for your device | To ensure only one device is logged into your account at a time, and to let you remotely log out a lost device |
| Push notification token | A token issued by Google Firebase Cloud Messaging | To deliver transaction, reminder, and announcement notifications to your device |
| Security PIN | A 4-digit PIN you set | We store only a one-way cryptographic hash of your PIN — never the PIN itself |
| Diagnostic/crash data | Technical crash and error logs, tagged with a one-way hashed (not reversible) version of your phone number | To identify and fix bugs; we cannot use this hash to look up your phone number |
| App version, last-login device info | Standard technical metadata | App support and compatibility |
We do not collect: your precise location/GPS, your GST or tax identification number, a physical address, or any payment/bank-card information — Smart Hisab does not process payments and has no such fields.
2. How We Use Your Contacts
If you grant contacts permission, the app reads your phone's contact list only to let you pick a customer without typing their number manually. We do not upload your entire contact list — only the specific contact(s) you choose to add as a customer are saved.
3. How Your Data Is Stored
- On your device:your ledger, contacts, and reminders are stored in an encrypted local database (SQLCipher), protected by a key held in your device's secure hardware storage (Android Keystore / iOS Keychain), inaccessible without unlocking your device.
- On our servers: the same data is synchronized to our servers (hosted on MongoDB) whenever your device has an internet connection, so your records are not lost if your device is lost, damaged, or replaced.
- Bill photos: stored on Amazon Web Services (AWS) cloud storage.
- Push notifications and crash reports: processed by Google Firebase.
4. Third Parties We Share Data With
We do not sell your personal data. We use the following service providers strictly to operate the app:
| Provider | What they receive | Purpose |
|---|---|---|
| Meta (WhatsApp Business Platform) | Your phone number, to deliver the one-time login code | Login authentication |
| Google Firebase | A push-notification token; a hashed (non-reversible) identifier and crash/error diagnostics | Notifications and crash reporting |
| Amazon Web Services (AWS) | Bill photos you choose to attach to a transaction | Cloud file storage |
We do not use any advertising network, analytics vendor, or location/mapping service — none is integrated into the app.
5. Your Security PIN and Biometric Unlock
Your 4-digit PIN is never stored in readable form on our servers — only a one-way cryptographic hash. Biometric unlock (fingerprint/Face ID) is handled entirely by your device's operating system; Smart Hisab never receives or stores your fingerprint or facial-recognition data.
6. Data Retention
Your account data is retained for as long as your account remains active. [NEEDS INPUT: define retention period after account deletion/inactivity. Account deletion itself is not currently a self-service feature; see the Delete Account Policy for the current process.]
7. Your Rights
You may:
- Update your display name at any time from your Profile screen.
- Remove a saved customer contact at any time (this does not delete the transaction history associated with that phone number).
- Log out, which ends your session on that device.
- Request deletion of your account and associated data — see our Delete Account Policy for the current process, as this is handled as a manual request rather than an in-app self-service action at this time.
8. Children's Privacy
Smart Hisab is intended for business use by adults and is not directed at children. [NEEDS INPUT: confirm minimum age policy — not encoded in the app.]
9. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected with an updated “Last updated” date.
10. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact OMKAR TRADERS at ambhore.prakash3332@gmail.com or +91 9860099844. Registered address: Main Road, Near Post Office, Shirpur Jain, Washim, Maharashtra – 444504, India.