🛡️ Our Core Commitment: Agent Khata is engineered with an Offline-First philosophy. All your customer ledgers, daily balances, Cash-In/Out history, and shop records are stored exclusively on your device in an encrypted SQLite database. We do NOT automatically upload, synchronize, or transmit your accounting records to our servers. Your financial data belongs exclusively to you.
Agent Khata collects only the minimum information necessary to execute local bookkeeping, secure your device, and provide system updates.
| Data Type | Specific Details | Stored Locally | Sent to Server |
|---|---|---|---|
| Transaction Records | Amounts, dates, notes, category tags, counter balances | ✓ Yes (Encrypted) | ✗ No |
| Customer Khata Data | Customer name, mobile number, CNIC, ledger balance | ✓ Yes (Encrypted) | ✗ No |
| Business Profile | Shop name, owner name, shop contact number, address | ✓ Yes (Device) | ✗ No |
| Device Identifier | Hashed device ID (for license binding & fraud prevention) | ✓ Yes | ✓ Yes (Firebase) |
| Crash Reports | Anonymous error stack traces, OS version, device model | ✗ No | ✓ Yes (Crashlytics) |
| Usage Analytics | Aggregated screen views, feature interactions (no PII) | ✗ No | ✓ Yes (Firebase) |
| FCM Push Token | Unique token to deliver update alerts and system messages | ✓ Yes | ✓ Yes (Firebase) |
| Receipt Photos | Camera/gallery captures attached to transaction vouchers | ✓ Yes (Internal) | ✗ No |
⚠️ No Sale of Data: We do not sell, rent, monetize, or broker your personal or business accounting data to advertisers, data brokers, or any third parties.
Local Encryption: Your transactional ledger data is encrypted on your local Android device using modern cryptographic standards within the SQLite engine.
Transit & Rest Security: Any communications with Firebase services (Crashlytics, FCM, Firestore) are encrypted in transit via Transport Layer Security (TLS 1.3).
Access Control: In-app access is gated by your chosen 6-digit Master PIN or 4-digit Staff PIN, alongside native Android biometric sensors (Fingerprint/Face Unlock). All PINs are hashed using irreversible SHA-256 before verification.
We request Android runtime permissions strictly when needed to support features you explicitly invoke:
| Permission | Why It Is Needed | Requirement |
|---|---|---|
| Camera | Scanning utility bill barcodes and capturing paper receipt photos | Optional |
| Storage / Media Photos | Saving generated PDF reports, transaction images, and backup files | Optional |
| Bluetooth / Nearby Devices | Connecting to portable wireless ESC/POS thermal printers | Optional |
| Contacts | Conveniently picking customer names and phone numbers from your phonebook | Optional |
| Internet & Network State | Connecting to Firebase for license checks, push updates, and crash reports | Required |
| Notifications | Delivering system updates, backup reminders, and critical announcements | Optional |
🔒 Zero Server Ledger Storage: Your customer debt figures, cash drawer counts, and counter balances are never synced to Agent Khata servers unless you explicitly configure an external personal cloud drive backup (e.g., Google Drive).
CNIC Numbers & Personal Identifiers: CNIC numbers entered for customer verification are kept strictly inside the on-device encrypted database and are never accessible to the Developer or third parties.
Banking & Telco Privacy: We do not ask for or collect bank account passwords, ATM PINs, OTP codes, or retailer MPINs. You must never share your telecom or banking secret credentials with anyone.
Agent Khata integrates with select industry-standard third-party providers:
| Provider | Service | Privacy Information |
|---|---|---|
| Google LLC | Firebase Analytics, Crashlytics, Cloud Messaging | Firebase Privacy Policy |
| Google LLC | Google Play Billing (In-App Subscriptions) | Google Privacy Policy |
| Groq Inc. | Opt-In AI Assistant (anonymized aggregates only) | Groq Privacy Policy |
We do not share your private business data except in the following rare circumstances:
Agent Khata is a dedicated commercial accounting application for adults. It is not intended for or directed toward children under 13 years of age (or under 16 in certain jurisdictions). We do not knowingly collect personal information from minors.
🗑️ Complete Data Wiping: Because data is stored locally, uninstalling the app permanently purges all local databases. You can also wipe data anytime from Settings → Data Management → Clear All Data.
If you have registered an account or device token on our server and wish to request complete deletion of your associated server records (FCM token, device hash, support messages), email us at alidev690@gmail.com with the subject "Data Deletion Request". We will process and permanently remove your server identifiers within 7 business days.
This Privacy Policy is designed to comply with Google Play's User Data Policy, Financial Services Policy, and Trader Status Requirements. We regularly review our disclosures to ensure complete accuracy with app releases.
Questions or requests regarding this Privacy Policy?
Package Name: com.agentkhata.app • Response Time: Within 24–48 Business Hours
Operating Address: Punjab, Pakistan