Privacy policy

1. Who is responsible for what

This is the most important part of this policy, and the rest follows from it.

1. 1.1 For your own account details — your name, your phone number, your email, your shop’s details — we decide how they are used. In the language of the Digital Personal Data Protection Act 2023, we are the Data Fiduciary for that.
2. 1.2 For the records you keep about your workers — attendance, wages, advances, photographs, identity documents, contact details — you decide, and we only process them on your instructions. You are the Data Fiduciary and we are a Data Processor.
3. 1.3 That means you are responsible for what you collect about your workers, for having the right to hold it, and for telling them about it.
4. 1.4 Our page on staff records says the same thing in one page, in plain words, for somebody who is not a lawyer.

2. What we collect, and why

This table is written to match the data safety form on our Play listing.

1. 2.1 Account details — your name, phone number and email, where you give them. Why: to create your account, to keep your online copy separate from everybody else’s, and to contact you about the service.
2. 2.2 Shop details — your shop name and settings. Why: so payslips and records carry your shop’s name.
3. 2.3 Staff records you enter — names, work, wages, attendance, payments, advances. Why: this is the register itself. It is the thing the app exists to hold.
4. 2.4 Photographs and documents you choose to upload. Why: because you chose to attach them to a worker’s record. Nothing requires you to.
5. 2.5 Device and diagnostic information — app version, device model, crash information. Why: to find out why the app failed, and to fix it.
6. 2.6 We do not collect anything else.

3. What we never collect

1. 3.1 Your location.
2. 3.2 Your contacts.
3. 3.3 Your SMS messages or call logs.
4. 3.4 Your browsing outside our app and site.
5. 3.5 Your bank credentials, card details or UPI PIN. We never handle a payment.
6. 3.6 Advertising identifiers. We do not advertise.

4. Where your records live

1. 4.1 The record on your phone is the main copy. The app works with no account at all, and in that mode nothing you enter leaves your phone.
2. 4.2 If you make an account, a copy is kept with our hosting provider, Supabase, and photographs are kept in a private store reached only through a signed link that expires.
3. 4.3 Our website is served by Cloudflare.
4. 4.4 Some of these providers process data outside India. By using an account you agree to that transfer, which is done under the terms we have with them.

5. What we do not do with it

1. 5.1 We do not sell personal data to anybody.
2. 5.2 We do not show advertisements and we do not share data with advertisers.
3. 5.3 We do not profile you, score you, or use your records to assess anyone for credit.
4. 5.4 We do not lend money, and we will not build anything that does.
5. 5.5 We disclose data only to the providers listed above, and where the law compels us to.

6. How long we keep it

1. 6.1 Your records are kept while your account exists, because the register is the product.
2. 6.2 If you delete your account, the online copy is deleted. Our data deletion page sets out what is deleted and how long it takes.
3. 6.3 Deleting the app from your phone does not delete the online copy, and deleting your online copy does not delete what is on your phone. These are two separate things and we say so because it is the misunderstanding people have most often.
4. 6.4 A deleted record may remain in an encrypted backup for up to 30 days before the backup ages out.
5. 6.5 Where a law requires us to keep something for longer, we keep it for that period and no longer.

7. How it is protected

1. 7.1 Records in your account are separated by row-level security, so one shop’s rows cannot be read from another shop’s account.
2. 7.2 Photographs and documents sit in a private store and are opened only through a signed link that expires.
3. 7.3 Traffic between the app, the site and our providers is encrypted in transit.
4. 7.4 Access inside the shop is controlled by four roles: owner, co-owner, manager and worker.
5. 7.5 Access by us is limited to the people who keep the systems running.
6. 7.6 These are reasonable safeguards. No system anywhere can be promised to be perfectly secure, and we will not make that promise.
7. 7.7 If a breach happens that affects you, we will notify you and the authorities as the law requires.

8. Your rights

1. 8.1 You can ask for a copy of the personal data we hold about you.
2. 8.2 You can ask us to correct it.
3. 8.3 You can ask us to delete your account and your records.
4. 8.4 You can withdraw a consent you gave, which may mean parts of the service stop working for you.
5. 8.5 You can complain to our Grievance Officer, whose name and address are on our grievance page, and then to the authority the law provides.
6. 8.6 A worker asking about their own attendance or wage record should ask their employer first, because the employer holds that record and decides it. If you cannot get an answer, write to us and we will help as far as our role allows.
7. 8.7 Write to [email protected]. We acknowledge within 24 hours and resolve within 15 days.

9. Children

1. 9.1 The service is not for anyone under 18.
2. 9.2 The service must not be used to keep records of unlawful employment, including the employment of children.

10. Changes to this policy

1. 10.1 The version and date of this policy are at the top of this page.
2. 10.2 Past versions are kept and listed on our changes page.
3. 10.3 Material changes are notified in the app, by email where we have one, and on the site.

Questions about this page

Write to [email protected], or call +91 70644 54262. We answer between 10am–7pm IST, Mon–Sat.

This page is one of the documents listed on our legal page. Older versions of it are kept in the archive.