Effective Date: September 28, 2026
Application Name: Bahi Khata – Account Manager (“Khata Bahi”, “App”, “We”, “Us”, or “Our”)
Developer / Publisher: Studio 4By9 (“Publisher”)

1. INTRODUCTION & SCOPE

We respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how Bahi Khata – Account Manager collects, uses, stores, discloses, and protects your information when you download, install, or use our mobile application.

This policy has been designed in strict compliance with:

  • Google Play Developer Program Policies
  • Information Technology Act, 2000 & Digital Personal Data Protection (DPDP) Act, 2023 (India)
  • General Data Protection Regulation (GDPR) (EU/EEA)
  • California Consumer Privacy Act (CCPA)

2. CORE PRIVACY PRINCIPLE: 100% OFFLINE FINANCIAL DATA PRIVACY

WE DO NOT COLLECT, ACCESS, MONITOR, STORE, SHARE, OR SELL YOUR FINANCIAL RECORDS.

  • All ledger entries, debit/credit transactions, party/customer names, contact details, bill amounts, notes, and payment histories entered into Khata Bahi are stored strictly on your physical device’s internal SQLite database.
  • Our servers do NOT receive, host, or process your transactional bookkeeping data.
  • When you utilize Google Drive Cloud Backup, your encrypted backup files are transferred directly between your device and your personal Google Drive account without routing through any intermediary servers owned by us.

3. INFORMATION WE COLLECT

While your financial ledgers remain private on your device, limited information is processed to provide core authentication, analytics, and advertising services:

A. Information You Provide Directly

  • Account Information: When you sign in using Google Sign-In, we receive your basic profile information (such as your name, email address, and profile picture) via Firebase Authentication to authenticate your identity and link your Google Drive backup.

B. Automatically Collected Technical Information

  • Device & Usage Analytics (via Google Firebase Analytics): Non-personally identifiable diagnostic information including device model, operating system version, app launch timestamps, session duration, and feature engagement metrics to troubleshoot stability and improve performance.
  • Advertising Identifiers (via Google Mobile Ads / AdMob): For non-subscribed (free) users, Google AdMob may process your device’s Google Advertising ID (GAID) and coarse network data to display relevant advertisements in accordance with Google’s advertising policies. Subscribed (Ad-Free) users do not receive third-party advertisements.

4. DEVICE PERMISSIONS & PURPOSE

The App requests only permissions strictly necessary for its functionality:

  • POST_NOTIFICATIONS (Android 13+): To deliver payment due reminders and daily bookkeeping reminders that you configure.
  • SCHEDULE_EXACT_ALARM: To ensure payment reminders ring at the exact minute scheduled by you.
  • INTERNET & ACCESS_NETWORK_STATE: Required for Google Sign-In authentication, Google Drive cloud backup/restore, and Google AdMob ad delivery.
  • VIBRATE & WAKE_LOCK: To alert you with sound/vibration when a reminder alarm is triggered.

Note: The App explicitly removes broad media gallery permissions (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO) to safeguard your personal media library.

5. THIRD-PARTY SDKs & SERVICES

We partner with established third-party services that process data in accordance with their independent privacy policies:

6. DATA RETENTION & ACCOUNT DELETION

6.1. Local Data Retention: All transactional data remains on your device until you choose to delete individual transactions, delete a ledger, or uninstall the App.
6.2. Cloud Data Retention: Backup files saved to your Google Drive remain in your Google account until you delete them directly or restore/overwrite them.
6.3. In-App Account & Data Deletion: You can permanently delete your authenticated account profile at any time by navigating to:
Settings > Account Settings > Delete Account.
Upon account deletion, all authentication tokens are revoked and associated Firebase Auth identifiers are permanently purged.

7. DATA SECURITY

We implement rigorous administrative, technical, and physical safeguards:

  • Android App Sandbox: Databases reside in protected internal storage (/data/data/com.khata.manager/), inaccessible to other apps.
  • Disabled Cleartext Traffic: All outbound network communications are strictly enforced over TLS 1.3 / HTTPS. Cleartext HTTP is blocked.
  • Disabled ADB Backup: System backups via USB debugging are explicitly disabled (allowBackup="false") to prevent unauthorized offline extraction.
  • Binary Code Obfuscation: The application code is minified and obfuscated via R8 ProGuard to protect against reverse engineering.

8. CHILDREN’S PRIVACY (COPPA COMPLIANCE)

Our App is designed for commercial bookkeeping and adult financial management. We do not knowingly solicit, collect, or process personal data from children under thirteen (13) years of age (or the minimum legal age in your jurisdiction). If we become aware that a child has provided us with personal data, we will promptly delete it.

9. YOUR LEGAL RIGHTS

Under applicable privacy regulations (including India’s DPDP Act, GDPR, and CCPA), you have the right to:

  • Access, review, and export your financial records (available via in-app PDF and Excel export features);
  • Rectify or modify any inaccurate information stored within your account;
  • Withdraw consent and unlink your Google account at any time;
  • Request total erasure of your authentication data.

10. GRIEVANCE OFFICER & CONTACT INFORMATION

In accordance with the Information Technology Act, 2000 and Digital Personal Data Protection Act, 2023, the details of our Grievance Officer and contact channel are provided below:

  • Attn / Grievance Officer: STUDIO 4BY9 Legal & Privacy Compliance
  • Email: help@studio4by9.com
  • Website: https://studio4by9.com
  • Address: Madhy Pradesh, India

We will acknowledge and investigate any complaint, inquiry, or concern within thirty (30) business days.

11. CHANGES TO THIS PRIVACY POLICY

We reserve the right to amend or update this Privacy Policy periodically. Any changes will be posted at this URL and reflected within the App’s settings screen. Your continued use of the App following any updates signifies your agreement to the revised Privacy Policy.