Last updated: 7 August 2026
1. Who we are
HisabKitab is a digital ledger (khata) app for small businesses to track customers, suppliers, credit, bills, and stock. Contact: supports@codemez.in · +91 91551 82576.
2. Information we collect
- Account data: phone number, name, optional password hash, OTP verification data, and account settings (for example biometric unlock preference).
- Business data you enter: business profile (name, phone, email, address, logo), contacts (customers/suppliers), ledger transactions, bills, stock items, and related notes or attachments you choose to upload.
- Device & security data: app lock / biometric flags on device, authentication tokens, and standard server logs (IP address, timestamps, device/user-agent) for security and abuse prevention.
- Permissions (when you allow them): contacts (to pick phone numbers), camera / photos (business logo), notifications (due reminders), and biometric hardware for app lock. We do not upload your full device contact book unless you select a number to save in HisabKitab.
3. How we use information
- Create and authenticate your account (OTP SMS and/or password).
- Provide ledger, billing, stock, reminders, and multi-business features.
- Sync data you create across your signed-in devices.
- Secure the service, prevent fraud, and troubleshoot issues.
- Respond to support requests you send us.
We do not sell your personal data. We do not use your ledger data for advertising.
4. SMS / OTP
To verify your phone number we send one-time passwords via an SMS provider (MSG91). Your phone number is shared with that provider only to deliver the OTP.
5. Sharing
We share data only with:
- Infrastructure providers hosting the API and database (under contract / hosting terms).
- SMS gateway for OTP delivery.
- Authorities when required by law.
If you share statements via WhatsApp, SMS, or other apps, that sharing happens through those apps under their policies.
6. Storage & retention
Account and business data are stored on our servers while your account remains active. Device-side caches and offline queues may exist on your phone until synced or cleared. After account deletion (see below), we delete or anonymize personal account data within a reasonable period, except where we must retain records for legal, security, or dispute reasons.
7. Security
We use HTTPS, password hashing, JWT-based sessions, rate limiting, and related safeguards. No method of transmission or storage is 100% secure; please protect your phone and OTP codes.
8. Children’s privacy
HisabKitab is intended for business users. We do not knowingly collect data from children under 13 (or the minimum age required in your region).
9. Your choices
- Update business and contact data inside the app.
- Revoke device permissions in Android settings.
- Request account and data deletion via Delete account or email supports@codemez.in.
10. International users
Servers may be located in India or other regions used by our hosting providers. By using the app you understand your data may be processed in those locations.
11. Changes
We may update this Policy. The “Last updated” date will change when we do. Continued use of the app after changes means you accept the updated Policy.
12. Contact
Privacy questions: supports@codemez.in
Mobile: +91 91551 82576
Website: https://hisab.codemez.in/