Privacy Policy

Welcome to Udhar Book (also known as "Khata Book"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

1.1 Personal Information

We collect the following types of personal information:

• Account Information: Email address, name, phone number, and profile picture when you create an account
• Authentication Data: Login credentials, Google Sign-In information, and biometric authentication data (stored locally on your device)
• Contact Information: Access to your device contacts (only when you grant permission) to help you add borrowers/lenders quickly
• Transaction Data: Financial records including amounts, descriptions, dates, and notes related to your khata entries
• Communication Data: Messages sent through the in-app chat feature

1.2 Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App features used, time spent on app, interaction patterns
• Log Data: IP address, app crashes, system activity, and diagnostic information
• Location Data: We do not collect precise location data

1.3 Information from Third Parties

• Google Sign-In: Basic profile information (name, email, profile picture) when you use Google authentication
• Firebase Services: Analytics and crash reporting data processed through Firebase

We use the collected information for the following purposes:

• Account Management: Create and manage your user account
• Core Functionality: Enable khata management, transaction tracking, and financial record-keeping
• Communication: Send push notifications about transactions, reminders, and app updates
• Security: Protect against unauthorized access using biometric authentication and PIN protection
• Synchronization: Sync your data across devices using Firebase Cloud Firestore
• Analytics: Understand app usage patterns to improve user experience
• Customer Support: Respond to your inquiries and provide technical assistance
• Legal Compliance: Comply with applicable laws and regulations
• Advertising: Display relevant advertisements through Google Mobile Ads

3.1 Where We Store Your Data

Your data is stored using the following services:

• Firebase Cloud Firestore: Stores your khata records, transactions, and user profile
• Firebase Storage: Stores profile pictures and other uploaded images
• Local Device Storage: Offline data cache, biometric credentials, and app preferences
• Encrypted Storage: Sensitive data is encrypted using industry-standard encryption (AES-256)

3.2 Security Measures

We implement the following security measures:

• End-to-end encryption for sensitive financial data
• Secure HTTPS connections for all data transmission
• Biometric authentication (fingerprint/face recognition) and PIN protection
• Firebase Authentication for secure user login
• Regular security audits and updates
• Secure local storage using Flutter Secure Storage

4.1 We Do NOT Sell Your Data

We do not sell, trade, or rent your personal information to third parties.

4.2 When We Share Information

We may share your information in the following limited circumstances:

• With Your Consent: When you explicitly share khata links with other users
• Service Providers: Third-party services that help us operate the app:
  • Google Firebase (hosting, authentication, database, analytics)
  • Google Mobile Ads (advertising services)
  • Google Cloud Platform (infrastructure)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In case of merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, privacy, safety, or property

4.3 Public Khata Feature

When you share a khata link, the recipient can view:

• Transaction history for that specific khata
• Borrower/lender name and phone number
• Total amounts (given/received)

Important: Only share khata links with trusted individuals.

Our app integrates with the following third-party services:

5.1 Google Services

• Firebase: Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging, Analytics
• Google Sign-In: OAuth authentication
• Google Mobile Ads: Advertisement display

These services have their own privacy policies:

• Google Privacy Policy
• Firebase Privacy Policy

5.2 Other Third-Party Libraries

We use various open-source libraries for app functionality. These libraries do not collect personal data independently.

You have the following rights regarding your personal information:

6.1 Access and Portability

• Request a copy of your personal data
• Export your khata records and transactions
• Download your data in PDF format

6.2 Correction and Update

• Update your profile information at any time
• Correct inaccurate transaction records
• Modify khata details

6.3 Deletion

• Delete individual transactions or khatas
• Request complete account deletion
• Remove your data from our servers

6.4 Opt-Out Rights

• Disable push notifications in app settings
• Revoke contact access permissions
• Opt-out of personalized advertisements
• Disable biometric authentication

6.5 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

Udhar Book is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

We retain your personal information for as long as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will:

• Permanently delete your personal information within 30 days
• Remove all transaction records and khata data
• Retain only anonymized analytics data for improvement purposes

Your information may be transferred to and maintained on servers located outside your country of residence. By using Udhar Book, you consent to the transfer of your information to countries that may have different data protection laws than your country.

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

We use the following tracking technologies:

• Local Storage: To store app preferences and offline data
• Firebase Analytics: To understand app usage patterns
• Advertising IDs: For personalized ad delivery (can be reset in device settings)

You can control tracking through your device settings.

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending a push notification for significant changes

Your continued use of the app after changes constitutes acceptance of the updated policy.

Udhar Book requests the following permissions:

• Internet Access: Required for data synchronization and authentication
• Contacts: Optional - to quickly add borrowers from your contact list
• Camera: Optional - to scan QR codes and take profile pictures
• Storage: To save PDF reports and images
• Notifications: To send transaction reminders and updates
• Biometric: Optional - for secure app lock feature

You can manage these permissions in your device settings at any time.

By using Udhar Book, you consent to:

• The collection and use of information as described in this Privacy Policy
• The processing of your data by Firebase and Google services
• The display of advertisements through Google Mobile Ads
• The transfer of your data to servers located globally