Who we are
HisabKarlo is a business ledger for shopkeepers, wholesalers, and small businesses. It is published by HisabKarlo, a product of AntiGravity Labs. In this policy, “we”, “us”, and “our” mean that operator. “You” means the person who creates an account or uses the app or website.
The public privacy contact is support@hisabkarlo.com. The website is https://hisabkarlo.com/.
Use of HisabKarlo is also covered by our Terms of Use.
Information we collect
We collect information you give us, information created while you use the app, and a small amount of technical information needed to run sign-in and sync. We do not buy personal information from data brokers.
Account and business profile
| Data | Why it is needed |
|---|---|
| Mobile phone number | Creates and identifies your account, and receives the one-time sign-in code. |
| One-time verification code | Confirms the phone number. The code expires after a few minutes. |
| Business name, business type, contact number, and address | Shown on your profile and on receipts you print or share. |
| Sign-in session | Keeps you signed in. Stored on the device as an access token and a refresh token. |
Records you enter
The app is a place to keep your own business books. Depending on what you use, that includes:
- Customers, suppliers, and other parties: name, phone number, opening balance, and credit limit.
- Khata (udhaar) entries and balances.
- Cashbook entries.
- Stock categories, items, and point-of-sale sales.
- Photos you choose from your gallery for a product, party, or similar record.
These records exist because you typed or selected them. HisabKarlo does not read your phone’s contact book, SMS inbox, or photo library in the background.
Device and technical data
- A random device identifier created on the device, sent with sign-in and sync so we can tell installations apart.
- App version and platform (for example Android), sent with requests so the service can stay compatible.
- Standard server logs, which may include IP address, date and time, and the request path. We use logs to keep the service secure and to fix faults. We do not use them to build an advertising profile.
The name and Bluetooth address of a receipt printer you pair are saved on the device so the app can print again. They are not used to locate you.
Information we do not collect
- GPS location, location history, or precise location.
- Contacts stored in your phone address book.
- The contents of your SMS or call log.
- Payment card numbers, bank account numbers, or government identity numbers. HisabKarlo is not a bank and does not process card payments.
- Advertising IDs. The app does not include a third-party ads or analytics SDK.
How we use information
We use personal information to:
- Create and protect your account, including sending and checking the one-time code.
- Store the business profile and the books you keep in the app.
- Sync those books between your device and our servers when a connection is available.
- Show the business name and contact details on receipts you choose to print or share.
- Show in-app notices that we operate, such as a banner inside Khata, sales, or account screens.
- Answer support emails and act on deletion requests.
- Detect abuse, keep the service reliable, and meet a legal duty.
We do not use your khata, customer list, or cashbook to advertise to your customers, and we do not sell that information.
Where data is stored
HisabKarlo is offline-first. Books are saved in the app’s private storage on the device, which other apps cannot read. While you are online, the app uploads and downloads changes for parties, ledger entries, cashbook entries, and point-of-sale categories and items, together with the business profile (name, type, phone, and address).
That server copy is what lets a new sign-in recover synced records. Records that have not synced yet exist only on the device. If the phone is lost or the app is removed before a sync, those unsynced records are not on our servers.
Data is sent to our servers over HTTPS.
When data is shared
We do not sell personal information. We do not share khata, customer lists, or cashbook entries with advertisers or data brokers.
Data leaves HisabKarlo in these cases:
- At your request. If you share or print a receipt, or send it through WhatsApp or another app, that content goes to the app you pick. That app’s own terms and privacy policy then apply.
- Service providers. Companies that host our servers process data only so we can run HisabKarlo. They are not allowed to use it for their own marketing.
- Merchant directory. HisabKarlo has a separate directory of listed businesses. A listing can show business name, owner name, phone, email, address, photo, and map location when that information was provided for the listing. Opening a HisabKarlo account does not by itself publish your khata. Customer balances and cashbook entries are not part of the directory.
- Legal and safety reasons. We may disclose information if the law, a court, or a competent authority requires it, or when it is reasonably necessary to investigate abuse or protect users and the service.
- Business transfer. If HisabKarlo is sold or merged, the information needed to keep the service running may transfer with it. This policy, or a successor policy we notify you about, would continue to cover it.
App permissions
Android shows permission prompts based on the features you use. Hisab Karlo requests only the permissions below.
| Permission | When it is used |
|---|---|
| Internet | Sign-in, sync, and loading in-app notices. The books still open without a connection. |
| Bluetooth / nearby devices | Find and connect to a thermal receipt printer you choose. Bluetooth scanning is declared as not used for location. |
| Location, Android 11 and earlier only | Older Android versions require location permission before an app can scan for Bluetooth printers. The app does not read, store, or upload GPS coordinates. Android 12 and later do not get this permission. |
| Photos | Only after you tap to choose an image. The system photo picker opens. We do not scan the gallery in the background. |
In-app notices
Some screens show a banner that HisabKarlo serves from its own service. A tap may open a link in the browser. We do not attach your customer list or ledger to that tap, and we do not pass your account to an advertising network. If we ever add a third-party advertising or analytics SDK, we will update this policy first and describe the new collection in the Google Play Data safety section.
How long we keep data
- Account, profile, and synced books are kept while the account is open.
- One-time codes expire within minutes and are not kept as a contact list.
- Server logs are kept only as long as needed for security and troubleshooting, then deleted or stripped of identifiers.
- After you ask us to delete the account, we delete the account, phone number, business profile, and synced books from active systems within 30 days. Backup copies are removed on the normal backup cycle after that.
- We may keep a minimal record if the law requires it, or for a limited time to prevent fraud and abuse, such as a note that a phone number was deleted. That record is not used to rebuild your khata.
Delete your account and data
You can ask us to delete your HisabKarlo account without opening the app. This is the web request page for account and data deletion.
- Email support@hisabkarlo.com with the subject “Delete my HisabKarlo account”.
- Include the phone number registered in the app, and an email address where we can confirm the deletion. Sending the email from an address you control helps us confirm the request.
- We delete the account and the data listed below from our servers within 30 days, then confirm to you.
What deletion removes
- Your account and phone number.
- Business profile (name, type, contact number, and address) stored on our servers.
- Synced parties, khata entries, cashbook entries, and point-of-sale categories and items.
- Sign-in tokens for that account.
What stays on the phone until you remove it
Signing out ends the session on that device. It does not delete the account. Uninstalling the app, or clearing the app’s storage in Android settings, removes the copy stored on that device, including records that never synced. Deleting the server account does not automatically wipe a phone that still has the app installed.
You can also delete individual customers, entries, or items inside the app. Removing the last entry of a party removes that empty party. Those edits sync when the device is online.
Security
We protect the service with HTTPS for data in transit, access tokens for signed-in requests, and private app storage on the device. No method of storage or transmission is perfectly secure. Use a screen lock on the phone, and do not share the one-time code.
If you believe your account has been accessed without permission, email support@hisabkarlo.com from the registered number’s context and include the phone number.
Children
HisabKarlo is a business tool. It is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, email support@hisabkarlo.com and we will delete it.
Changes
If we change this policy, we will post the new version on this page and change the effective date. If a change materially expands how we use personal information, we will provide a clearer notice in the app or by the contact details on the account when we have them. Continuing to use HisabKarlo after the new date means the updated policy applies.
Contact
Privacy questions, access requests, correction requests, and deletion requests:
Email: support@hisabkarlo.com
Website: https://hisabkarlo.com/
App: Hisab Karlo, Android package com.hisabkarlo.app
Please include your registered phone number so we can find the right account. We may ask for enough detail to confirm the request belongs to that account.