- Your ledger, inventory, orders and personal-finance data stay on your own device by default — your business records leave your phone only if you turn on Cloud Backup, Team Mode, or Business Directory yourself.
- Anonymous usage and crash data is sent automatically so we can fix bugs. It never includes your ledger entries or amounts.
- Cloud Backup saves a copy to your own Google Drive — a private folder only All Khata can see, not your regular Drive files.
- We never sell your data, and we don't show ads.
- Business Directory listings are the only thing made public — and only if you tap "Publish" yourself.
- You can delete your account and all associated data any time by contacting us — see Contact Us.
01 Overview
All Khata is an all-in-one business ledger, inventory, point-of-sale, table billing, and personal-finance app, developed and published by OneStep Solutions ("we", "us", "our"). This policy explains what information All Khata collects, why, and the choices you have — written to actually be read, not just filed away.
By using All Khata, you agree to the practices described here. If you don't agree, please don't use the app, or use it without enabling the optional cloud features described below (the app works fully offline without them).
02 Data We Collect
Most of All Khata's features work entirely offline, storing data only in a local database on your device. The table below covers everything that can leave your device, and only when the related feature is actually used.
| Data | When | Where it goes |
|---|---|---|
| Name, email, profile photo | You sign in with Google optional | Firebase Authentication — identifies your account for Cloud Backup / Team Mode |
| Ledger, inventory, orders, customers, table-billing sessions, personal-finance entries | You use the app | stored locally on your device by default |
| Same business data, shared with your team | You turn on Team Mode optional | Supabase — synced only between your Owner and Employee accounts on that one business |
| A full backup of your local database | Cloud Backup runs (manual or daily auto-backup for Premium) optional | Your own Google Drive, in a private app-data folder only All Khata can access — not visible in your regular Drive |
| Business name, category, phone, address, and the shop's precise location (GPS pin) | You tap "Publish" in Business Directory optional | Firestore — shown publicly to other All Khata users searching nearby businesses. The location is taken once, when you publish; it is not tracked afterwards |
| Photos you add (products, receipts, profile, business) | You use the camera or gallery picker | stored locally on your device only — photos are never uploaded to our servers or to Business Directory |
| Device identifier and device name | You use Premium | Supabase — used only to enforce the two-device limit on a Premium subscription |
| Push notification token | Notifications are enabled | Firebase Cloud Messaging — delivers reminders and Team Mode alerts to your device |
| App usage events and crash reports | Always (anonymized) | Firebase Analytics, Firebase Crashlytics, PostHog — helps us find bugs and understand which features are actually used |
| Subscription/purchase status | You buy All Khata Premium | Supabase — a subscription record with your plan and expiry date. When paid through Google Play, billing is handled by Google Play (via RevenueCat) — we see your subscription status only, never your card details |
| Messages you send us | You use in-app Help & Support chat optional | Supabase — stored so we can read and reply to your question |
03 Device Permissions
All Khata asks for a device permission only right before a feature that needs it, and only that feature stops working if you decline — nothing else is affected.
- Camera — scanning barcodes, photographing receipts/products, or setting a profile photo.
- Photos/Storage — picking an existing image instead of taking a new one.
- Location — used only at the moment you publish a Business Directory listing, to attach your shop's precise location so nearby customers can find you. It is read once, never tracked, and never accessed in the background. Business Search measures distance on your phone — your own location is not sent anywhere.
- Microphone — optional voice input for faster data entry, using your device's own built-in speech recognition (governed by your phone's OS, not stored by All Khata).
- Biometric/Screen Lock — the optional App Lock (PIN/fingerprint) is verified entirely on-device by your phone's own OS; All Khata never sees or stores your fingerprint or PIN.
- Notifications — reminders (udhaar follow-ups, low stock, backups) and Team Mode alerts.
04 How We Use Data
- To run the core features you open the app for — ledger, inventory, billing, reports.
- To sync a business's data across an Owner's and Employees' devices, if Team Mode is on.
- To restore your data if you reinstall or switch devices, if Cloud Backup is on.
- To show your business to nearby customers, only if you've published it to Business Directory.
- To respond to support questions you send us.
- To find and fix bugs, and understand which features are actually useful, from anonymized usage/crash data.
- To process your Premium subscription through Google Play.
We do not use your business or ledger data to train any AI/ML model, and we do not sell it to data brokers or advertisers.
05 Sharing With Third Parties
We never sell your personal or business data. Data is shared only with the service providers that actually run the features above, each under their own security practices:
- Google Firebase (Authentication, Firestore, Cloud Messaging, Analytics, Crashlytics)
- Google Drive — only your own account's private app-data folder, for Cloud Backup
- Supabase — Team Mode sync and Help & Support chat storage
- PostHog — anonymized product-usage analytics
- RevenueCat — subscription status, layered over Google Play Billing
The one deliberately public exception is Business Directory: once you tap "Publish," that listing's business name, category, contact details and shop location are visible to any All Khata user searching nearby — because that's the whole point of the feature. Nothing else in the app is ever made public.
06 Storage & Security
Your business data lives in a local SQLite database on your device by default. Anything that syncs to the cloud (Team Mode, Cloud Backup, Business Directory) travels over an encrypted (HTTPS/TLS) connection and is stored behind the access controls of Firebase/Google and Supabase. Team Mode data is scoped strictly to the Owner and Employee accounts on that one business — never visible to any other All Khata user.
No system is 100% immune to risk, but we don't take shortcuts that put your data at unnecessary risk, and we don't store anything we don't need to.
07 Your Choices & Rights
- Team Mode, Cloud Backup, Business Directory, notifications and biometric App Lock are all optional — the app is fully usable offline without any of them.
- You can unpublish a Business Directory listing at any time.
- You can turn off Cloud Backup, which stops any further uploads (existing backups stay in your Drive until you delete them yourself).
- You can request a copy of, or the deletion of, all data we hold about you by contacting us — see Contact Us. We'll act on a deletion request within a reasonable time, except where we're required to retain something by law.
08 Data Retention
Cloud-synced data (Team Mode, Cloud Backup, Business Directory, support chat) is kept for as long as your account is active, or until you request deletion. Anonymized analytics/crash data is retained only long enough to be useful for improving the app, per each provider's own retention settings.
09 Children's Privacy
All Khata is a business tool, not directed at children, and we don't knowingly collect data from anyone under 13. If you believe a child has provided us data, contact us and we'll remove it.
10 Changes to This Policy
If this policy changes in a meaningful way, we'll update the "Effective" date at the top of this page and, where appropriate, notify you inside the app.
11 Contact Us
Questions about this policy, or a data access/deletion request — the fastest way to reach us is the app's own Help & Support chat (Profile → Help & Support), or: