Privacy Policy

1. Information We Collect

We collect the following information:

• Account Information - When you sign in with Google, we collect your name and email address to identify your account and enable cloud sync. Guest users remain fully anonymous.
• Business Data - Customer names, phone numbers, and transaction amounts you enter are stored locally on your device using SQLite and, for Google Sign-In users, backed up to Firebase Firestore.
• Device Token - When you grant notification permission, we collect a Firebase Cloud Messaging (FCM) device token to deliver in-app push notifications. This token is not linked to your personal identity.
• In-App Announcements - We may deliver announcements, tips, or update notices via Firebase Firestore. No personal data is collected through this feature.

2. How We Use Your Information

Your data is used exclusively to:

• Display your ledger and transaction history within the app
• Sync and back up your data to Firebase (Google Sign-In users only)
• Identify your account across devices
• Send push notifications relevant to the app (e.g. reminders)
• Deliver in-app announcements and update notices

We do not sell, rent, share, or monetise your personal information in any way.

3. Data Storage & Security

Local data is stored securely on your device via SQLite. Cloud data is stored in Google Firebase Firestore, protected by Google's security infrastructure and access rules that restrict data strictly to your account.

We do not store payment card information or financial credentials of any kind.

4. Cross-Border Data Transfer

By using Firebase services, your data (for Google Sign-In users) may be transferred to and stored on servers located outside Nepal, including in the United States, where Google LLC operates its infrastructure.

This transfer is necessary to provide cloud sync and backup functionality. Google's data handling is governed by its own Privacy Policy and complies with international data protection standards.

5. Third-Party Services

We use the following third-party services:

• Google Sign-In - for authentication
• Firebase Firestore - for cloud data storage (Google users only)
• Firebase Cloud Messaging (FCM) - for push notifications

These services are governed by Google LLC's Privacy Policy. We are not responsible for their data handling practices.

6. Your Rights

Under Nepal's Individual Privacy Act, 2075, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Withdraw consent at any time

To exercise any of these rights, contact us at the email below.

7. Data Retention

Local data on your device is retained until you uninstall the app. Cloud data in Firebase Firestore is retained until you submit a deletion request. Upon a verified deletion request, your Firestore data will be permanently removed within 30 days.

Note: Uninstalling the app removes local data only. Firebase cloud data requires a separate deletion request.

8. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify you through the app or via email within a reasonable timeframe, and take immediate steps to contain and mitigate the breach.

9. Children's Privacy

Hamro Khataa is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app or applicable laws. We will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes your acceptance of the updated policy.

11. Contact Us

For questions, data requests, or concerns about this Privacy Policy:

We aim to respond to all privacy-related requests within 14 days.