AK
Apna Khata

Privacy Policy

Last updated 6 September 2026 · com.apnakhata.app

Your ledger stays on your phone. Everything you write in Apna Khata — customers, entries, your shop profile — is stored only on your own device. There is no account, no login and no server of ours that any of it is sent to.

The one exception is that the app shows advertisements, and the advertising partners behind them collect some technical information in order to do that. Section 3 below explains exactly what, and how to control it.

1. Who this policy is from

This policy explains how the Apna Khata mobile application ("the app", "we") handles information. It applies to the app distributed on Google Play under the package name com.apnakhata.app, developed and published by Kashif Ramzan, an independent developer.

Contact: kashiframzan2002@gmail.com

2. Information you enter, which stays on your device

The app is a ledger, so you enter business records into it. That information is written only to your phone's private app storage, which other apps cannot read. It includes:

None of this is transmitted anywhere by the app itself. We cannot see it, retrieve it, or recover it for you.

3. Information collected by advertising partners

Advertising keeps the app free. Three third-party components are involved, and it is worth being precise about what each one does:

Between them, these partners collect information automatically for advertising purposes, which may include:

This is used to select, deliver and measure advertisements, and to prevent fraud. Each partner handles it under its own privacy policy: Meta's Privacy Policy, Unity's Privacy Policy (covering LevelPlay and ironSource), and Google's Privacy Policy.

We do not receive, see, or store any of this information ourselves, and we never send your ledger — your customers, entries, shop profile or backups — to any advertising partner. Those never leave your device at all.

Your consent choices

If you are in the European Economic Area or the United Kingdom, the app asks for your consent before any personalised advertising takes place. This is handled by Google's User Messaging Platform, which shows a consent form the first time you open the app. Your answer is remembered and passed on to the advertising partners above, so it applies to every advertisement you see.

You can change or withdraw that consent at any time from Settings → Ad privacy options inside the app. Withdrawing consent does not disable the app or remove any of your data — advertising simply becomes non-personalised.

Outside the EEA and the UK no consent form is required, so none is shown. You can still limit ad personalisation through your device settings, as described in section 9.

4. Permissions the app asks for

PermissionWhy it is used
Internet, network stateDeclared for loading advertisements and for the optional "share backup to Drive" flow. The ledger itself never needs the network.
Advertising IDAdded by the advertising SDK for ad delivery, measurement and fraud prevention on Android 12+.
Camera and photosOnly if you choose to attach a photo to a customer, or scan a barcode in the optional POS screen. Images are processed on-device.
MicrophoneOnly while you hold the microphone button to dictate a note. No audio is recorded, stored or uploaded by the app.
NotificationsTo show the optional daily reminder you enable yourself.
Run at startupTo restore that reminder after your phone reboots. Nothing else runs in the background.
Fingerprint / biometricTo unlock the app if you turn that on. Biometric matching is performed by Android; the app never receives your fingerprint data.
BluetoothOnly to connect to a receipt printer you have already paired in your phone's own Bluetooth settings. The app never scans for or discovers new devices.

The app requests no location, no contacts, no SMS, no call log and no access to your general file storage.

5. When information leaves your phone

Other than the advertising described in section 3, the app never transmits anything on its own. Data leaves your device only in these situations, each of which you start deliberately:

WhatsApp reminders

Tapping the reminder button opens WhatsApp with a message already written for you. The app does not send it — you do. Once sent, the message is handled by WhatsApp under Meta's privacy policy.

PDF statements and backup files

When you share a statement or a backup, Android's share sheet lets you choose the destination — WhatsApp, email, Google Drive, or anything else installed. The file is then governed by the privacy policy of whichever service you selected. We are not a party to that transfer and receive no copy.

Voice dictation

Dictation uses the speech recognition service built into your Android device, which on most phones is provided by Google. Depending on your device and settings, that service may process the audio on Google's servers under Google's privacy policy, exactly as it does for any other app or for the keyboard's microphone button. The app receives only the recognised text, and stores it only if you save the entry. If you prefer not to use that service, type the note instead — the feature is entirely optional.

Google Play

Google Play collects installation and crash information about apps downloaded from it, under Google's own policies. That happens at the store level and is outside our control.

6. Security

Your records are stored in the app's private storage area, which the Android operating system isolates from other apps. You can add a PIN lock and biometric unlock in Settings for protection against casual access to your phone.

Please understand the limits honestly: an on-device PIN protects against someone picking up your phone, not against a determined forensic examination of an unlocked or unencrypted device. For real protection, keep a screen lock and device encryption enabled on the phone itself. And once you share a backup file or a statement with another app or person, its security is in their hands, not ours.

7. Children

Apna Khata is a business tool for shopkeepers and is not directed to children under 13. We do not knowingly collect personal information from anyone, of any age.

8. Data retention and deletion

Because we never receive your ledger, there is nothing for us to retain or delete on our side. You can delete any customer or entry inside the app at any time. To remove everything at once, uninstall the app — Android deletes its private storage, including backups written there.

Information collected by the advertising partners in section 3 is retained by them under their own policies. You can reset your Advertising ID at any time in your device settings.

9. Your rights in the EEA and the United Kingdom (GDPR)

If you are in the European Economic Area or the United Kingdom, data protection law gives you rights over personal data relating to you. Because your ledger never reaches us, these rights are relevant mainly to the advertising information described in section 3.

Legal basis. Where advertising involves personal data such as your Advertising ID, the basis is your consent, which you may withdraw at any time. Where advertising is limited to what is strictly necessary to deliver a non-personalised advertisement, the basis is our legitimate interest in keeping the app free of charge.

You have the right to: access the personal data held about you and receive a copy; have inaccurate data corrected; have data erased; restrict or object to processing, including objecting to profiling for advertising; data portability; withdraw consent at any time without affecting processing already carried out; and lodge a complaint with your national data protection authority.

To withdraw consent, open Settings → Ad privacy options in the app at any time; this reopens the same consent form you saw on first launch. You can also reset or delete your Advertising ID and opt out of ad personalisation in your device settings (Settings → Google → Ads), and you may contact Google directly using its privacy policy. For any data still on your device, you remain in direct control of it and can delete it as described in section 8.

International transfers. Our advertising partners may process advertising data outside your country, including in the United States, using the safeguards described in their own privacy policies.

10. Your rights in California (CCPA / CPRA)

We do not sell your personal information for money. However, sharing an advertising identifier with an advertising network for cross-context behavioural advertising may be treated as "sharing" under California law. California residents have the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of such sharing, without being discriminated against for exercising those rights.

To opt out: disable ad personalisation in your device settings (Settings → Google → Ads → Opt out of Ads Personalisation), or reset your Advertising ID. You may also contact us at the address below.

11. Changes to this policy

If the app ever changes how it handles information, this page will be updated and the "Last updated" date at the top revised. Material changes will also be noted in the app's release notes on Google Play.

12. Contact

Questions about this policy or about how the app works can be sent to kashiframzan2002@gmail.com. We aim to reply within a few working days.