Privacy Policy

Last updated: 4 October 2026.

This Privacy Policy explains what information Ok Hisab ("we", "the app", package in.okhisab.app on Google Play) collects, how it is used, and the choices you have. The policy for the Play listing is published at https://www.okhisab.in/privacy. By using Ok Hisab, you agree to the practices described below.

1. Information you provide

• Phone number used to sign in to the app.
• Display name and optional profile photo. You can change the photo from Settings. You can change the name until a referral withdrawal is paid. After that payment, the name is locked. Only Ok Hisab admin can change a locked name if you ask.
• Customer records you create: customer name, optional phone number, optional profile photo and optional opening balance.
• Transaction records you create: amount, type (Given/Received), date, optional description, optional bill/receipt photos.
• A required 4-digit security PIN you set at registration, stored only as a salted one-way hash and never in plain text.
• Subscription plan information (Basic / Gold / Diamond) and the date your current paid plan expires.
• Your unique referral code, and (only if entered at registration) the referral code you joined with and the referrer/referred link used for Refer & Earn.
• Bank details you submit for a referral withdrawal: account holder name, account number, IFSC and bank name. The last details you saved are shown again. You can edit them before you send. They are used only to pay a withdrawal you request. After a withdrawal is marked paid, the account holder name is locked to your registered mobile number.
• If you pick a customer's mobile number from your phone contacts, only the number you select is saved on that customer. The contact's name is filled in only when the name box is still empty. Your contact book is not uploaded.
• An app-generated install identifier created on your phone. It is a random id stored by the app, not your advertising ID and not your device serial number. It is used to recognise a phone that has already signed in. A different phone must verify an OTP sent to your registered mobile before it can open the account. After that OTP, PIN login can work on that phone. The id is not used for advertising. Reinstalling the app creates a new id.
• Device brand and device model sent when you open the app while signed in, or when you register or log in. This shows which phone is using the account. It is not your advertising ID and it is not used for ads.

2. Information collected automatically

Ok Hisab does not sell data and does not include third-party advertising SDKs or analytics SDKs that track you across other apps. The app does not read your calendar, location, microphone, or SMS inbox.

Sign-in uses a one-time SMS code sent by MSG91 to the mobile number you enter. The app package includes the Firebase phone-authentication library, but the sign-in screen you use does not upload your ledger to Firebase, and we do not turn on Firebase Analytics or ads.

Contacts permission is asked only when you choose to pick a customer number from your phone. You can type the number yourself and decline contacts access. The contact list stays on your phone.

Camera permission is asked only when you choose to take a photo. On Android 13 and newer, choosing an existing photo opens the system photo picker and does not require broad photo-library or storage permission. On older Android versions, storage permission is requested only if that system picker is not available. Photos you save are compressed and stored in your Ok Hisab account on Google Cloud so they can sync. You can use the app without adding any photo.

The app counts how many transactions you create each calendar day in India (Asia/Kolkata) to enforce the Basic (free) daily limit. That count resets at midnight IST and is not used for advertising.

3. How your information is used

• To let you sign in and identify your account on the app.
• To save, display and synchronise your customer ledger and transactions.
• To generate PDF statements and CSV exports that you initiate.
• To verify your PIN when you start editing or delete records. Saving after unlock does not ask for PIN again.
• To determine your current subscription tier (Basic / Gold / Diamond) and enforce the Basic plan daily transaction limit.
• To operate Refer & Earn: credit ₹10 to the referrer only when an OTP-verified new customer registers with their code, credit or reverse the 25% bonus after that customer's first confirmed Gold or Diamond payment, show the wallet, and review withdrawal requests.
• To decide whether this phone may open the account with the PIN, or must first verify an OTP sent to the registered mobile number.

4. Phone OTP & reminders

Phone OTP verification is performed using MSG91, which sends a one-time SMS code to the mobile number you enter. In the current release, payment reminder buttons (SMS / WhatsApp) record the intent in your account only — no real message is delivered to the customer.

5. Payments

Gold and Diamond are paid plans. Checkout is processed by Razorpay. Ok Hisab does not collect or store card or UPI details. Referral withdrawals are paid by bank transfer using the account details you provide with the request.

6. Sharing of information

We do not sell your personal information. We do not share it with advertisers. We share it only when required by law, to protect rights and safety, or with service providers needed to run the app: MSG91 (OTP SMS), Razorpay (Gold and Diamond checkout; we do not receive your full card or UPI details), and Google Cloud (app hosting, database, and the photos you choose to upload). Encrypted backups of your ledger are stored in your Ok Hisab account when you take a backup.

7. Data retention

Your account data is retained while your account is active. You can delete individual customers or transactions inside the app. You can delete the whole account from Settings → Delete account. Deletion asks for a one-time code sent to your registered mobile number and, if you have set one, your 4-digit PIN. That removes your profile, customers, transactions, photos, reminders, backups, referral links, referral rewards and withdrawal requests from our servers. The public deletion page is https://www.okhisab.in/delete-account.

8. Children

Ok Hisab is intended for users 18 years of age or older. It is not directed to children.

9. Your choices

• You can log out from Settings at any time.
• You can delete individual customers or transactions, which also deletes their associated photos and records.
• You can cancel your Gold or Diamond subscription anytime from Settings → Manage Subscription. Cancellation immediately returns you to the Basic tier.
• You can delete your entire account from Settings → Delete account after confirming the OTP sent to your registered mobile number and your PIN. You may also email us at okhisab2026@gmail.com. The same steps are published at https://www.okhisab.in/delete-account.

10. Changes to this policy

We may update this Privacy Policy from time to time. Continued use of the app after a change means you accept the revised policy.

11. Contact us

For privacy questions or account-deletion requests, please email us at okhisab2026@gmail.com. We aim to respond within 7 business days.