Privacy Policy

DinHisab ("DinHisab", "we", "us", or "our") is a billing, invoicing, and digital ledger (khata) application for Indian small businesses, published by Sahil Middya. This Privacy Policy explains what information the DinHisab mobile app and website collect, how we use it, and the choices you have.

This policy applies to the DinHisab mobile app (package in.app.dinhisab) and this website.

Account information: when you register, we collect your name, email address, password, business name, and an optional phone number.

Business data you create: invoices, products and services, customers and vendors ("parties"), employees, payments, and reports that you enter while using the app. This data belongs to you and is stored so the app can function and sync across your devices.

Push notification token: if you enable notifications, we register your device with Firebase Cloud Messaging (FCM) so we can deliver alerts about invoices, payments, parties, and your subscription.

Payment information: when you purchase a subscription, checkout is handled by Razorpay. We receive only the order ID, amount, and payment verification status — DinHisab never receives or stores your card, UPI, or bank details.

Locally exported files: when you generate or share an invoice PDF, it is created and stored temporarily on your device using your device’s storage so you can save, print, or share it.

We do not access your camera, contacts, or location, and we do not use any advertising or third-party analytics SDKs in the app.

To provide, operate, and maintain the billing and invoicing service, including creating invoices, tracking payments, and managing parties, products, and employees.

To send you service notifications (e.g. payment reminders, invoice updates) via Firebase Cloud Messaging.

To process subscription payments and manage your billing plan via Razorpay.

To respond to support requests and communicate important updates about your account.

Razorpay: to process subscription payments securely. Razorpay has its own privacy policy governing the payment data it handles.

Firebase (Google): to deliver push notifications to your device.

We do not sell your personal data or your business data to any third party, and we do not share it for advertising purposes.

Your data is transmitted over encrypted (HTTPS) connections to our servers. Authentication tokens are stored on your device using secure, OS-level encrypted storage (Expo SecureStore) rather than plain text.

We take reasonable technical and organizational measures to protect your information, but no method of transmission or storage is 100% secure.

We retain your account and business data for as long as your account remains active so that the service can function correctly.

You may request deletion of your account and associated data at any time by contacting us at support@dinhisab.com. We will process such requests within a reasonable time, except where we are required to retain certain records by law.

Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to access, correct, and request erasure of your personal data, and to withdraw consent for its processing. To exercise any of these rights, contact us at support@dinhisab.com.

DinHisab is a business tool intended for use by adults operating or managing a business. It is not directed at, and we do not knowingly collect personal information from, children under the age of 18.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will update the effective date below when changes are made, and continued use of the app after changes take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or how your data is handled, please reach out to us at support@dinhisab.com or visit our Contact page.