Security

1. On your phone

1. 1.1 Your records are kept in the app’s own storage, which the Android system keeps separate from other apps.
2. 1.2 The app works with no account. In that mode nothing leaves the phone.
3. 1.3 A phone that is unlocked and handed to somebody is outside our control. Keep a screen lock on it.

2. In your online copy

1. 2.1 Records are separated by row-level security, so one account cannot read another account’s rows.
2. 2.2 Photographs and documents are kept in a private store, reached only through a signed link that expires.
3. 2.3 Traffic is encrypted in transit.
4. 2.4 Access inside a shop is controlled by four roles: owner, co-owner, manager and worker.

3. Inside our team

1. 3.1 Access to production systems is limited to the people who keep them running.
2. 3.2 We keep the number of people with such access small, because that is the measure that matters most at our size.

4. What we do not claim

1. 4.1 We do not describe our security with words like bank-grade or military-grade. Those words mean nothing and are quoted back after any incident.
2. 4.2 No system can be promised to be perfectly secure. What we can do is name the measures above and keep them.
3. 4.3 If a breach affects you, we will tell you and the authorities as the law requires.

Questions about this page

Write to [email protected], or call +91 70644 54262. We answer between 10am–7pm IST, Mon–Sat.

This page is one of the documents listed on our legal page. Older versions of it are kept in the archive.