KhataShri

KhataShri Privacy Policy

Version 1.0

Last updated: 29 October 2026

Effective from: 29 October 2026

This policy explains what personal data Inwebbo Private Limited collects through the KhataShri app and the website khatashri.com, why, who it is shared with, how long it is kept, and the choices and rights you have. Whenever the app asks for your consent, it first shows a short notice of its own that lists the data and the purpose; that notice and this policy say the same thing.

This policy is a notice to you. It is not a contract. The Terms of Use are a separate agreement.

The app today

The current version of KhataShri has no account, no internet connection, no ads and no statistics. It collects nothing: your books stay on your phone, and nothing about you or them reaches us. Section 4.1 describes it.

The rest of section 4, and sections 7 to 9, describe features planned for later versions. They apply only when your version of the app has the feature and you use it. The app tells you before any of them starts.

In short

1. Who we are

KhataShri is made by Inwebbo Private Limited ("Inwebbo", "we", "us"), a company incorporated in India. For the personal data we collect about you as a user (section 4), we are the Data Fiduciary.

The person who can answer questions about your personal data on our behalf is our Grievance Officer (section 15).

2. Scope

This policy covers:

It does not cover apps, websites or services run by others, even when KhataShri opens them for you, such as WhatsApp or another app you share a PDF with, Google Play, or your UPI app. Their own policies apply.

3. Words used in this policy

4. What KhataShri collects, feature by feature

4.1 The app on your phone, without an account

Everything you enter is stored only on your phone, in storage private to the app, and works without an internet connection. Other apps cannot read it, and Inwebbo cannot see it.

Data leaves the app on your phone only when you act:

If you have chosen in your phone's settings to share usage and diagnostics with Google, Google may send us reports when the app crashes or stops responding. That is Google's processing, under your Google settings. These reports describe the fault; the app is built so that they never contain Book Data.

4.2 Core online features (when available)

These are the features that make an account work. Before you sign in, the app's notice lists them; signing in after reading it is your consent to them. We process only the data each one needs.

4.3 Statistics about use (when available)

To understand how KhataShri is used across all its users (which features are used, where people struggle, what to improve, and what makes the app fail), a later version of the app may send us statistics about its use and reports of its crashes. The app tells you before it first sends them.

Each of these is off until you turn it on, after a notice that explains it. Turning one off is as easy as turning it on, in Settings.

4.5 Other things we may process

We may combine data within your account, for example to show your devices on the account page. We never combine Device and Usage Data with Book Data, and we never link statistics to your account, name or email.

We keep a record of the notices we show you, the consents you give and withdraw, and the version of the terms you accepted, so that we can show what you agreed to.

4.6 New features and new purposes

If we add a feature that uses personal data in a way this policy does not describe, or want to use data for a new purpose, we will update this policy and, where consent is needed, ask for it in the app before we start. Nothing changes for you until then.

5. Your Book Data, and the people in it

5.1 Our commitment

Book Data is used only to:

  1. store, sync, back up, restore and share it, when and as you ask;
  2. keep the service secure, including detecting and preventing abuse;
  3. answer a support request you make, where you ask us to look at a specific record;
  4. comply with the law, a court order or a lawful request from a government authority.

We do not use Book Data for analytics, profiling, advertising or marketing. We do not sell it, rent it, use it to decide anything about the people in it, share it with partners, or use it to train AI or machine-learning models. We do not make aggregate or "anonymised" statistics from it either.

Our systems keep simple facts about your books that are not their content: identifiers, the number and size of records, and when they changed. We use these only to run the service (capacity, sync, plan limits) and to keep it secure. They are not used for statistics or analytics.

Synced Book Data is encrypted in transit and at rest. It is not end-to-end encrypted: our servers can read it so that sync and sharing work. Staff access is limited to the four purposes above, and is logged.

5.2 Who is responsible for data about the people in your books

The people you record in your books (your customers, suppliers, borrowers and others) have not signed up with us. When you keep their details in KhataShri:

5.3 What you share is in your hands

When you share a ledger or a book, the people you share it with can see it, and those with write access can change it. When you send a PDF, backup or link, whoever receives it can read it and pass it on. We cannot recall what has been shared outside KhataShri.

6. Why we process personal data, and on what basis

Consent is always given by a clear action, such as a tap on a button that says what it does. It is never assumed from using the app, and never hidden in the terms. Refusing or withdrawing consent, or turning statistics off, never stops you from using the app, and is never punished.

We may publish or share statistics that cannot reasonably identify anyone, such as the number of active installations or the share of users on each Android version. They are never made from Book Data.

Until the DPDP Act's main duties take effect, we also comply with section 43A of the Information Technology Act, 2000 and the rules on reasonable security practices and sensitive personal data made under it.

7. Advertising

The free plan may show ads in later versions. This section applies only when it does.

Ads are labelled as ads, never look like part of the app, and never block its features. We do not show ads to children or target them.

8. Who we share personal data with

We share personal data only as this policy describes:

  1. Service providers who process data for us under contract and only on our instructions: cloud hosting and storage, databases, email and message delivery, customer support tools, crash reporting and statistics tools, and security services. These may include Google (Firebase, Cloud Messaging, Crashlytics, Analytics) and the companies that host our servers. Some, such as Google Analytics, also apply their own terms to the data they receive. We list our service providers by category on our website, and tell you their names on request.
  2. Google, when you use Google services through KhataShri: Sign in with Google, Google Play (downloads, purchases, subscriptions, reviews) and, where used, Google's advertising and Firebase services. Google's own privacy policy also applies.
  3. Advertising partners, as section 7 describes.
  4. People you share with, as section 5.3 describes.
  5. Authorities, where the law requires it: courts, regulators, CERT-In, the Data Protection Board, law enforcement and other government agencies, when we are lawfully required to, including under the Information Technology Act, 2000 and the DPDP Act; and where needed to prevent or investigate an offence, to protect the rights, safety or property of our users, the public or Inwebbo, or to establish, exercise or defend legal claims.
  6. Professional advisers, such as lawyers, auditors and insurers, under confidentiality.
  7. A successor business. If Inwebbo or the KhataShri business is merged, amalgamated, reorganised, acquired or sold, in whole or in part, personal data may pass to the successor as part of that transaction. We will tell you before it does, and you may then withdraw your consent, save a backup of your books, or delete your account. The successor may use the data only as this policy allows, unless you agree to something else.
  8. Anyone else, with your consent.

We do not sell personal data. We share data with service providers only as their work needs, under contracts that require them to keep it secure and confidential.

9. Where data is stored

Data you sync, and data our services collect, may be stored and processed in India and in other countries where we or our service providers operate. We transfer personal data outside India only as the law permits, and never to a country or territory the Government of India restricts. Wherever data is processed, this policy and our security safeguards apply to it.

10. How long we keep data, and what deleting cannot erase

10.1 How long we keep data

We keep personal data for as long as it is needed for the purpose it was collected for, and then delete it. The periods below are for that use.

Separately, where the law requires data to be kept for a minimum period, we keep a restricted copy, only for the purposes the law names, for that period, and then delete it. The DPDP Rules, for example, require personal data, traffic data and logs of processing to be kept for at least one year from the processing, for purposes of the State that the Rules list; and the Information Technology rules require some records to be kept for 180 days after an account is closed.

10.2 What deleting cannot erase

When you delete an entry, a party or a book, the app removes it from its storage on your phone; only its identifier is kept, so that it does not come back. On a book that is not synced, no copy remains. On a synced book, the deletion goes to our servers, which delete what they hold, and to your other signed-in phones and the people the book is shared with; until the deletion has reached our servers and the next sync has cleared it, a copy the servers had sent may remain in the app's own storage on your phone.

A delete cannot remove:

Synced books on other phones: a synced book follows the changes and deletions made on any phone signed in to the account, and a shared book follows those made by its owner and members. If your account is deleted while another of your phones is still signed in, that phone may lose its copy; to keep it, sign out in the app on that phone first.

If our servers fail: if we ever have to restore our servers from a backup, changes made shortly before the failure (up to about an hour) may be lost, and records deleted in that time may come back. If that happens, we will tell you.

Your phone's own backup does not include KhataShri's data. If you remove the app, its books are removed with it, unless they are synced; save a backup first if you want to keep them.

11. Security

We protect personal data with reasonable security safeguards, including:

On your phone, KhataShri keeps its data in storage private to the app and encrypts its database with a key that is itself protected by Android's Keystore. It asks keyboards not to learn what you type, removes deleted data from its storage as section 10.2 describes, and keeps names and amounts out of its logs.

No system is perfectly secure. Keep your phone locked and your Google account secure, and keep backup files private.

If a breach happens: if a personal data breach affects you, we will tell you without delay, in the app or by email, what happened and when, the likely consequences, what we are doing about it, what you can do to protect yourself, and who to contact. We will report it to the Data Protection Board of India and to CERT-In as the law requires.

12. Your choices and rights

12.1 Choices in the app

Withdrawing consent is as easy as giving it. It stops that processing from then on, and does not affect what was done before. If you withdraw consent that a feature needs, that feature stops, and the rest of the app keeps working. Where the law allows, you may also give, manage or withdraw consent through a consent manager registered with the Data Protection Board.

12.2 Your rights under the law

You have the right to:

  1. access: a summary of the personal data we process about you and what we do with it, and the identities of the other Data Fiduciaries and Data Processors we have shared it with, with a description of what was shared;
  2. correction and erasure: have inaccurate or incomplete data corrected, completed or updated, and have data erased when it is no longer needed for its purpose or you withdraw consent, unless the law requires us to keep it;
  3. grievance redressal: complain to us and get a response;
  4. nomination: nominate another person to exercise your rights if you die or become unable to (section 24.2 of the Terms of Use says how);
  5. complain to the Data Protection Board of India, after first using our grievance process.

To exercise these rights, use the controls in the app where they exist, or write to the Grievance Officer (section 15). Tell us the email address of your Google account and, if your request is about a device, which one, so that we can find your data. We may ask for more information to confirm it is you. We will respond within 30 days, and never later than the law allows. Some rights are limited by law, for example where we must keep data to comply with a legal obligation.

For data about you in someone else's books, please contact that person first: they decide what is recorded (section 5.2).

You also have duties under the DPDP Act: to give authentic information, not to impersonate anyone, not to suppress material information, and not to file false or frivolous complaints. The law can penalise a breach of these duties.

13. Deleting your account

When accounts are available, you can delete your KhataShri account in the app, under Settings, Account, or on our website at khatashri.com/delete-account, without reinstalling the app.

Deleting your account deletes your Account Data and your synced books from our live systems, as section 10 describes, and keeps only what the law requires. It does not delete the books on the phone you delete it from (section 10.2 says what happens on your other phones), and it does not cancel a KhataShri Pro subscription: cancel that in Google Play.

14. Children

KhataShri is for people aged 18 or over who run a business or keep their own accounts. It is not directed at children. The app asks you to confirm that you are 18 or over when you first open it, and again before you create an account. We do not knowingly collect personal data from anyone under 18, and we never track, monitor the behaviour of, or target ads at children. If we learn that an account belongs to someone under 18, we will delete it. If you believe a child has given us personal data, contact the Grievance Officer.

15. Grievance Officer and contact

For a question, complaint or request about your personal data, this policy, or content shared through KhataShri, contact our Grievance Officer, who can answer on our behalf:

We acknowledge every complaint within 24 hours, with a reference number and a copy of your complaint as we recorded it. Where the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 apply to our online services, we resolve a complaint about them within 7 days, a request to remove content that is unlawful under those rules within 36 hours, and a complaint about intimate or morphed images within 2 hours. We resolve other complaints, including requests about your personal data, within 30 days. We may ask for information to confirm that a complaint is genuine, as the law allows.

If you are not satisfied, you may complain to the Data Protection Board of India by the means the Board provides for complaints. For complaints about content, you may also appeal to the Grievance Appellate Committee within 30 days of our decision.

16. Changes to this policy

We may update this policy, for example when we add a feature, change a service provider, or the law changes. The date at the top shows when it last changed, and the current version is always on our website and in the app. Once you use online features, we remind you of this policy as often as the law requires.

If we make a material change, we will tell you before it takes effect: in the app, when you next open it or in the update that brings the change, and by email where we have your address. If a change needs your consent, for example a new purpose for your data, we will ask for it, and nothing changes for you until you give it.

17. Language

This policy is published in English. The notices in the app that ask for your consent are shown in English and Hindi. If this policy is ever published in another language and the versions differ, the English version applies, to the extent the law allows.

Inwebbo Private Limited, Jalgaon, Maharashtra, India