Privacy policy
Last updated: 3 October 2026
Hisab Card is a shop ledger app. This page explains what we collect, why we collect it, who it is shared with, and how you can have it deleted.
Who is responsible for your data
Hisab Card is operated by the developer of the Hisab Card Android app ("we", "us"). For your own account details and your own shop records, we are the data controller.
One important distinction: when a shop owner enters their customers' details and balances, the shop owner decides what is recorded and for how long. In that situation the shop owner is responsible for that data, and we hold it on their behalf strictly to run the service for them.
What we collect
| What | Why |
|---|---|
| Mobile number and/or email address | To sign you in. We send a one-time code by SMS or voice call, or you sign in with Google; there is no password. |
| Owner and shop details — name, shop name, address, contact number, email | To set up the shop, identify it to customers, and print it on statements. |
| Customer records — name, mobile number, email, address, notes | Entered by the shop owner, so that the right customer's ledger is kept and so that customer can sign in to see their own bill. |
| Ledger entries — purchases, payments, advance (jama), amounts, dates | This is the service: it is the shop's own account book. |
| Generated statements (PDF) | Created so the owner can share a bill with a customer. |
| Device and technical data | Collected by Google Firebase — for example device and app identifiers, IP address and app version — to run authentication, keep the service secure and diagnose faults. We also use App Check to confirm requests come from a genuine copy of the app. |
| Advertising identifier | Customer accounts see ads. An owner may also choose to watch a rewarded video in exchange for extra ledger entries. Google AdMob may use your advertising identifier to select and measure those ads. |
| Subscription status (owners only) | Purchases are handled by Google Play. We receive whether a subscription is active — never your card details. |
We do not ask for your contacts, your photos, your location, or any special category of personal data.
Who we share it with
We do not sell your data. We share it only with companies that provide the service:
- Google Firebase and Google Cloud — authentication, database, file storage and server functions.
- Google AdMob — advertising shown to customer accounts, and the optional rewarded video an owner may watch.
- Google Play — subscription payments and app distribution.
- 2Factor — an Indian messaging provider that delivers sign-in codes to a mobile number by SMS or voice call. Your number is shared with them for that purpose only.
We may also disclose data where the law requires it, or to protect the rights and safety of users.
Where your data is stored
Data is stored on Google Cloud servers, currently in the us-central1 (United States) region. If you are in India, this means your data is transferred outside India. We keep it on Google's infrastructure because that is where the service runs, and we choose the region to keep the service reliable.
How it is protected
- Sign-in requires a one-time code sent to a number you control, or a Google account you control.
- Access is enforced on the server. A shop owner can only ever reach their own shop's records, and a customer can only ever read the ledger their own verified number or email is linked to.
- Data is encrypted in transit and at rest by Google Cloud.
No service can promise perfect security, but we do not store passwords, and we do not store your one-time codes in readable form.
How long we keep it
Account and shop data is kept for as long as the account exists. Ledger records are kept for as long as the shop owner keeps them, because they are the shop's own business records. When you ask us to delete your account, we delete your data as described on the delete-account page.
Your choices
- Access and correction — shop owners can view and edit their records in the app. Customers can see their own bill and ask the shop to correct their details.
- Deletion — you can ask us to delete your account and the data associated with it. See how to request deletion.
- Ads — you can reset or limit your advertising identifier in Android's settings. The rewarded video an owner may watch is always optional: nothing is watched on their behalf, and declining it never blocks reading the ledger.
Children
Hisab Card is a tool for running a shop. It is not intended for use by children, and we do not knowingly collect data from them.
Changes to this policy
If this policy changes, we will update the date at the top of this page. Material changes will be made clear in the app.
Contact
For any question about this policy, or to exercise any of the choices above, write to rakshitg57@gmail.com.