Swarnkar KhataBook

Introduction

Welcome to Swarnkar KhataBook ("App"), a complete Jewellery Shop ERP and bookkeeping solution developed by BLK Infotech ("we", "us", or "our"). We are committed to protecting the privacy of your shop and customer transactions. This Privacy Policy is designed to provide transparent information on how we treat sensitive user and device data when you use Swarnkar KhataBook.

By downloading, installing, or using this App, you agree to the collection and use of information in accordance with this policy. The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, unless otherwise defined.

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this privacy policy.

Device Permissions & Hardware Access

To deliver specific features, Swarnkar KhataBook requests access to specific device capabilities. Below is a detailed breakdown of how and why these permissions are used:

• Biometrics / Fingerprint Authentication: Used via the local_auth framework to lock and unlock the app. This prevents unauthorized personnel from accessing your sensitive business ledgers.
• Camera Access: Requested dynamically when you utilize the barcode/QR code scanner (via the mobile_scanner package) to locate inventory items or process client cards. The App does not record video or capture photos unless initiated by you to upload a shop logo or customer profile.
• Storage Read/Write: Required to generate and save invoice PDFs, export inventory and ledger details into Microsoft Excel (XLSX) spreadsheets, and write database backups to your local downloads/documents folder.
• Internet Access & Network State: Necessary to sync local transactions with the Cloud Firestore backup, process subscription payments, and authorize user accounts.

Third-Party Services

The App uses third-party services that may collect information used to identify you or provide auxiliary services. Here are the links to the privacy policies of the third-party service providers used by the App:

• Google Play Services
• Firebase Authentication & Cloud Firestore
• AdMob (Google Mobile Ads)
• Razorpay Payments

Data Security

We value your trust in providing us your business ledger data, which is why we employ robust security protocols to guard it:

• Encryption: Core application files and local database assets are secured using industry-standard AES-256 encryption.
• Secure Communications: All data transmitted between the App and Firebase/Razorpay servers is protected with Secure Socket Layer (SSL/TLS) encryption.
• Offline Protections: Security rules dictate that offline operations remain fully encrypted on-device.

However, please remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Biometric Data Policy

Runtime Security and Device Integrity

To protect sensitive financial databases and gold/silver credit logs from cyber threats, the App includes active integrity protection via the freeRASP software suite. This service monitors the runtime environment to detect:

• Root status (superuser privileges)
• Emulators or simulated environments
• Active debuggers or hooking tools (e.g., Frida)
• Application code tampering or repackaging

This scanning is done locally on the device. When a threat is detected, the app is halted to prevent theft or manipulation of accounting records. No personal data is gathered or transmitted during this security verification.

Data Retention and Account Deletion

Your shop ledger data is retained as long as your account is active in our system. Because we respect your privacy, you have full control over your data. You may request the deletion of your account and all associated cloud-synced customer records and profile details at any time.

To request data deletion, please contact our support desk via the details in the Contact section. Upon verification of ownership, your data will be permanently purged from our Firebase databases within 15 business days.

Children's Privacy

These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to perform the necessary actions.

Contact Us

If you have any questions or suggestions about our Privacy Policy, or if you need to request the deletion of your shop account and transaction data, do not hesitate to contact us at: