Privacy policy

01 — The short version

Your books stay on your phone. The server holds a copy only if you ask it to.

KVN Billing works offline. Invoices are written to the phone's own storage, not to somebody else's server, and the app is fully usable with no network at all. Data reaches our server in two situations only: when you sign in, and when cloud backup or sync is switched on. There is no advertising in the app, no analytics SDK, no tracking of what you tap, and nothing is sold or shared for marketing.

02 — What we collect

Collected on our server

Account details

Username, display name, and a one-way hash of your password — we never store the password itself and cannot recover it. Email address and mobile number where you have given them; these are also the credentials that Google Sign-In and OTP sign-in match against, which is why the app asks for them.

Business details

Company name, GSTIN, address and state code. These appear on the invoices the app produces and are needed to calculate CGST/SGST versus IGST correctly.

Accounting records

Invoices, quotations, delivery challans, credit and debit notes, customer and supplier records, item masters, stock and ledger entries. These reach the server only when sync or cloud backup is switched on. With both off, they never leave the phone.

Device information

A device identifier, the app version installed, when the device last checked in, whether cloud backup is switched on, and a Firebase push token so the app can receive notifications. Used to run your licence, to sign devices out when you ask, and to tell you an update exists.

Technical records

Your IP address and timestamps, kept in server logs and used to limit repeated failed sign-in attempts and to keep an audit trail of administrative actions on your account.

Handled on your phone and never sent to us

Camera — bill scanning

Photographs of supplier bills are read by an on-device text recogniser. The image and the text stay on the phone; neither is uploaded to us or to any other service. The permission is requested the first time you open the scanner, never at launch.

Camera — barcode scanning

Barcodes are decoded on the phone. Only the resulting code is used, to look up an item in your own list.

Biometrics

If you switch on the fingerprint lock, the check is performed by Android. Your fingerprint never leaves the device and is never visible to this app.

Not collected at all: location, contacts, calendar, SMS, call logs, installed-app lists, or an advertising identifier. The app contains no advertising or analytics SDK.

03 — Who else sees it

Third parties, and exactly what each one receives

Google Firebase Authentication

Used for Google Sign-In and mobile OTP sign-in. Google receives your email address or mobile number in order to verify it. Only used if you choose one of those sign-in methods; password sign-in does not involve Google.

Firebase Cloud Messaging

Delivers notifications about updates and backup reminders. Google receives a push token identifying the app installation. Notification content is limited to the message shown; no accounting data is sent through it.

Google reCAPTCHA

Protects the contact form and sign-in against automated abuse. Subject to Google's own privacy policy and terms.

GSTIN verification service

When you use Validate & auto-fill on a GSTIN, that GSTIN is sent to a third-party lookup service to retrieve the publicly registered business name and address. Only the GSTIN is sent, and only when you press the button. Nothing else about you or your customers goes with it.

Hosting

Our server and database are hosted on infrastructure operated by our hosting provider. Data is held in that provider's data centre.

We do not sell personal data, and we do not share it for advertising or marketing by anyone. Data is disclosed otherwise only where the law requires it.

04 — How long it is kept

Retention

Cloud backups

The most recent backups for each company are retained and older ones are removed automatically as new ones arrive. Backup files are encrypted.

Sign-in sessions

A signed-in device stays signed in for a limited period before it must sign in again. Changing your password, or signing devices out, ends every session immediately.

Accounting records

Kept for as long as your account is active. Indian tax law requires business records supporting a GST return to be preserved for a number of years, and where that applies we retain the minimum needed to meet it — see the deletion section below.

05 — Deleting your account

You can delete your account, from inside the app or from this website.

In the app: Settings › Account › Delete my account. From a browser, including after you have uninstalled the app: billing.kvngroups.in/delete-account.

Deletion runs on a 30-day hold. Sign-in stops working immediately and every device is signed out. For the next 30 days the request can be cancelled by contacting us, which exists so that an accidental tap does not destroy a business's records. After 30 days the account, its sign-in credentials, contact details, device records and cloud backups are permanently erased.

Invoices already stored on your own phone are not touched by this and remain yours. Where tax law obliges us to preserve records of issued invoices, we retain only what the law requires and delete it once that period ends.

06 — Your rights

Access, correction and complaints

You can ask us for a copy of the personal data we hold about you, ask for it to be corrected, or withdraw consent for cloud backup and sync at any time by switching them off in the app. Write to support@kvngroups.in and we will respond within 30 days.

The app is intended for businesses and is not directed at children. We do not knowingly collect data from anyone under 18.

If this policy changes we will update the date at the top of this page, and material changes will be announced in the app.