Privacy policy
The short version. Your ledger — customers, suppliers, amounts, notes, phone numbers — is stored only on your phone. Bakiyo has no account system and no server of its own. We cannot see your ledger, and we do not sell or share it with anyone.
What stays on your phone
Everything you enter: party names and phone numbers, entries with their amounts, notes and dates, your business profile (shop name, phone, UPI ID), your app-lock PIN (kept only as a salted hash) and your settings. All of it lives in the app's private storage on the device.
What we collect
| Data | Why | Can you turn it off? |
|---|---|---|
| Crash reports (Firebase Crashlytics) | To find and fix crashes | Yes — Settings › Diagnostics |
| Basic usage events (Firebase Analytics) | To see which screens are used and where people get stuck | Yes — Settings › Diagnostics |
| Your ledger | Never collected | — |
Diagnostics are on by default, and the app says so on first run. Turning the switch off stops collection on that device. Settings › Diagnostics › Delete my diagnostics identity deletes the anonymous installation identifier, which is the only identifier that exists.
Crash and usage data is processed by Google as part of Firebase. It contains device and app information such as the model, Android version, app version and the crash or event itself. It does not contain your ledger.
Things you share yourself
- Statement PDFs are made on the phone and leave it only when you tap share, to the app you choose.
- Payment reminders open your own WhatsApp or SMS app with the message ready. Bakiyo does not send messages for you.
- Backup files are written wherever you choose, such as Google Drive or the phone's storage. A backup is not encrypted, so treat it like a paper ledger: anyone who opens the file can read the names, numbers and amounts in it.
- UPI links and QR codes are built from the UPI ID you enter. Payments go straight to you; Bakiyo never handles money.
Permissions
- Contacts: Bakiyo never asks for contacts permission. Adding a customer from your contacts opens Android's own picker, which hands back only the one contact you choose.
- Storage: no storage permission. Backups and statements go through Android's file picker and share sheet.
- Fingerprint: used only to unlock the app, and only if you turn app lock on. The fingerprint stays with Android; Bakiyo never sees it.
- Internet: used only to send diagnostics, while you leave them switched on.
Children
Bakiyo is a tool for running a business and is not directed at children under 13.
Your choices
- Turn diagnostics off at any time in Settings.
- Delete your diagnostics identity in Settings.
- Uninstalling the app removes the ledger from the phone. Backup files you saved elsewhere stay where you put them, and you can delete them yourself.
- Write to yogirana5557@gmail.com with any request about your data.
Changes
If this policy changes, the date at the top changes with it, and anything material is noted in the app's release notes.
Contact
Bakiyo is built by an independent developer in India. Questions: yogirana5557@gmail.com.