🛡️ Our Commitment: Agent Khata is built on an Offline-First philosophy. Your offline ledger transactions, customer khata, and business data are stored locally on your device in an encrypted database. We do not upload your ledger or transaction data to our servers without your explicit action.
Agent Khata collects only the minimum data necessary to provide and improve our services.
| Data Type | What We Collect | Stored Locally | Sent to Server |
|---|---|---|---|
| Transaction Records | Cash In/Out amounts, dates, account names, reference numbers | ✓ Yes | ✗ No |
| Customer Data | Customer name, mobile, CNIC, ledger balance, notes | ✓ Yes | ✗ No |
| Business Profile | Shop name, owner name, mobile, address | ✓ Yes | ✗ No |
| Device Identifier | Hashed device ID (for account binding and security) | ✓ Yes | ✓ Yes (Firebase) |
| Crash Reports | Anonymous crash logs, error stack traces | ✗ No | ✓ Yes (Crashlytics) |
| Usage Analytics | Screen views, feature usage (aggregated, no personal data) | ✗ No | ✓ Yes (Firebase) |
| FCM Token | Push notification token for your device | ✓ Yes | ✓ Yes (Firebase FCM) |
| Receipt Images | Photos attached to Cash Out transactions | ✓ Yes (device) | ✗ No |
⚠️ We do not use your data for advertising targeting, sell it to third parties, or share personally identifiable information for marketing purposes.
Local Storage: All your business data is stored in an encrypted SQLite database on your device using AES encryption. This database is not accessible to other apps.
Firebase Cloud: Limited data sent to Firebase is protected with encryption in transit (TLS 1.3) and at rest.
PIN & Security: App access is protected by a 6-digit Admin PIN or 4-digit Staff PIN. PINs are stored as SHA-256 hashes — we never store your raw PIN. The app auto-locks after a configurable inactivity timeout.
Admin Panel: Protected by Firebase Authentication with an additional admin-role verification layer in Firestore.
| Permission | Why We Need It | Required? |
|---|---|---|
| Camera | Scan barcodes on utility bills; capture receipt photos | Optional |
| Gallery / Storage | Attach receipt images and customer profile photos | Optional |
| Microphone | Voice-to-text input for narration fields | Optional |
| Bluetooth | Connect to Bluetooth thermal printers for receipts | Optional |
| Contacts | Select customer mobile numbers from your contacts | Optional |
| Internet | Firebase services, AI insights, push notifications | Required |
| Notifications | Payment reminders and system alerts | Optional |
🔒 Your offline ledger data never leaves your device unless you explicitly export it (PDF reports, WhatsApp sharing) or use the manual backup feature.
CNIC Numbers: CNIC data entered for customer records is stored only locally on your device. We do not transmit CNIC data to our servers.
Ledger Account Numbers: Any account numbers entered in your personal offline ledger are stored locally and never transmitted to Agent Khata servers.
WhatsApp Integration: When you send reminders via WhatsApp, the message is sent through your own WhatsApp installation. We do not have access to your WhatsApp account or messages.
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase Analytics | Google LLC | Anonymous usage statistics | View |
| Firebase Crashlytics | Google LLC | Crash reporting | View |
| Firebase Cloud Messaging | Google LLC | Push notifications | View |
| Cloud Firestore | Google LLC | Admin panel, remote config | View |
| Groq AI | Groq Inc. | AI business insights (opt-in) | View |
| Google AdMob | Google LLC | In-app advertisements (free tier) | View |
We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:
Agent Khata is a business tool for adults. Our app is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. Our target audience is individuals aged 18 and above who operate as retail shopkeepers, mobile load retailers, or small business owners in Pakistan.
Local Data: Retained until you delete it manually or uninstall the app.
Firebase Data: Device identifiers and FCM tokens retained while the app is installed. Crash reports retained for 90 days. Analytics data retained up to 14 months per Google's policy.
After Deletion: All local data is removed when you delete your account or uninstall the app.
We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last Updated" date and notify you through an in-app notification. Continued use of Agent Khata after changes constitutes acceptance of the updated policy.
Pakistan's Smart Offline Ledger & Bookkeeping App
Response time: Within 48 business hours
Package: com.agentkhata.app