Privacy Policy
This Privacy Policy describes how Udhar Master (“we”, “us”, or “the App”) collects, uses, stores, and shares information when you use our mobile application on Android (and related services). By using Udhar Master, you agree to the practices described in this policy.
1. Who we are
Udhar Master is a digital ledger (khata) application that helps businesses and individuals
record customer and creditor accounts, bills, payments, and related business information.
The App syncs data with our backend service at
udharmaster.vteamslabs.com.
2. Information we collect
We collect information that you provide, information created through App use, and limited device information needed for core features.
2.1 Account and profile information
- Full name
- Email address
- Mobile phone number
- Password (stored securely on our servers; may also be saved on-device if you enable biometric login)
- Address and city
- National identity number (NIC / CNIC), if you choose to provide it
- Profile photo, if you upload one
- Business name, business type, business address, and business city
- User role (for example, owner or manager) for multi-user businesses
2.2 Customer and creditor information you enter
When you manage ledgers, you may enter data about your customers and creditors, including:
- Name, nickname, mobile number
- Address and city
- CNIC / identity number (optional)
- Profile or customer photo
- Alert / reminder preferences (for example, alert days)
- Whether the contact is marked as a creditor
You are responsible for having a lawful basis to record personal data about your customers and creditors in the App.
2.3 Financial and transaction data
- Bills and bill amounts, dates, and promised payment dates
- Payment history (amounts, dates, who recorded the entry)
- Bill photos / receipts you attach
- Reports, ledgers, and exported summaries you generate
2.4 Authentication and security data
- One-time passwords (OTPs) sent for email or phone verification
- Session tokens and refresh tokens
- Biometric unlock on your device (Face ID / fingerprint / device biometrics) used only to unlock saved login credentials on that device — biometric templates stay on the device and are not sent to our servers
2.5 Voice input data
If you use voice-assisted bill entry, the App requests microphone access to convert speech to
text on your device. The resulting text (not a permanent recording of your voice audio, under
normal operation) may be sent to our servers to parse the prompt into bill details
(ai/parse-prompt).
2.6 Photos and media
You may select images from your device gallery for profile pictures, customer photos, and bill attachments. Selected images may be compressed and uploaded to our servers. The App does not require continuous access to your full photo library; on modern Android versions, the system photo picker is used.
2.7 Device and technical information
- Network connectivity status (to enable offline use and sync when online)
- App version and basic device information necessary to operate the App
- Local app database and preferences stored on your device
2.8 Information we do not collect
- Precise location / GPS
- Device contacts list
- SMS content
- Advertising identifiers for ads (we do not show third-party ads)
- Analytics or crash-reporting SDKs beyond what is required to provide the service itself
3. How we use your information
We use the information above to:
- Create and manage your account and business profile
- Authenticate you (email/password, OTP, biometric unlock of saved credentials)
- Store and sync your khata / ledger data across devices when you are online
- Support offline use with local storage and later synchronization
- Enable multi-user access for your business (owner/manager)
- Process voice prompts into structured bill data
- Generate and share PDFs, CSV exports, and WhatsApp/share links you initiate
- Open phone dialer or WhatsApp when you choose to contact a customer
- Provide customer support and respond to privacy or account requests
- Maintain security, prevent abuse, and improve reliability of the service
- Comply with legal obligations
4. Permissions and device features
Depending on your device and how you use the App, Udhar Master may request the following:
| Permission / feature | Purpose |
|---|---|
| Internet / network access | Sign-in, OTP, cloud sync, image upload, AI parse, and API communication |
| Network state | Detect online/offline status for sync |
| Microphone | Voice input for speech-to-text bill entry |
| Speech recognition | Convert spoken words to text (where provided by the OS) |
| Biometric / fingerprint / Face ID | Quick and secure unlock of saved login credentials on the device |
| Photos / media (via system picker) | Select profile, customer, and bill images |
| Phone / WhatsApp intents | Optional: place a call or open WhatsApp to a number you choose — we do not place calls in the background |
| Share / storage for exports | Create and share PDF/CSV reports you request |
5. Where data is stored
5.1 On your device
- Local SQLite database for users, customers, bills, payments, and related records
- App preferences (language, date/currency formats, alert settings)
- Optionally saved login email and password for biometric login
- Temporary export files (PDF/CSV) created when you share or print
5.2 On our servers
Account, business, customer, bill, payment, and image data are synced to our backend API at
https://udharmaster.vteamslabs.com/api/v3/ so you can restore and sync your ledger
when online.
6. Sharing of information
We do not sell your personal information. We may share data only as follows:
- Service operators / hosting: with infrastructure and backend providers that host and operate
udharmaster.vteamslabs.com, solely to provide the App - At your direction: when you export, print, or share reports via system share sheets, WhatsApp, or similar apps you choose
- Within your business account: staff/manager users you add may access business ledger data according to their role
- Legal requirements: if required by law, regulation, legal process, or to protect rights, safety, and security
We do not use third-party advertising networks in the App.
7. Data retention
- Account and ledger data are retained while your account remains active so the service can function.
- Local data remains on your device until you clear app data, uninstall the App, or delete your account.
- When you use Delete Account in the App, we process deletion of your account and associated data as described in the confirmation dialog. Some residual backups or logs may be retained for a limited period for security, fraud prevention, or legal compliance, then removed or anonymized.
- Exported files you save or share outside the App are under your control.
8. Your choices and rights
- Access and update profile and business information in the App
- Add, edit, or delete customer/creditor and transaction records you manage
- Disable microphone, biometric, or photo access in system settings (some features will stop working)
- Turn off biometric login and clear saved credentials
- Delete your account from the App drawer (Delete Account)
- Request access, correction, or deletion by contacting us at the email above
9. Children’s privacy
Udhar Master is intended for business and adult use. We do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction). If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.
10. Security
We use reasonable technical and organizational measures to protect information, including encrypted transport (HTTPS) for API communication, account authentication, and device-level biometric protection for optional saved login. No method of transmission or storage is 100% secure; please use a strong password and protect your device.
11. International users
Your information may be processed on servers located in countries other than your own
(including where our hosting for vteamslabs.com operates). By using the App, you
understand that your information may be transferred to and processed in those locations
subject to this policy and applicable law.
12. Third-party services and links
Features such as WhatsApp, the phone dialer, system share, printing, and on-device speech recognition are provided by your device OS or third-party apps. Their privacy practices are governed by their own policies. We are not responsible for third-party apps you open from Udhar Master.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after updates means you accept the revised policy. Material changes may also be communicated in the App or via email where appropriate.
14. Contact us
For privacy inquiries, data requests, or questions about this policy:
Email: udharmaster@nxb.com.pk
App: Udhar Master (co.appdev.udharmaster)
15. Google Play Data safety summary
For Google Play Console “Data safety” disclosures, the App typically involves:
- Collected: name, email, phone, address, government ID (if entered), photos, financial info, app activity related to ledger use, and voice-derived text for AI parsing
- Shared: with our backend/service operators as needed to provide the service; shared externally when you export or open WhatsApp/share yourself
- Purpose: app functionality, account management, and (if applicable) fraud prevention / security
- Not collected for advertising: no ads SDK; no sale of personal data
- User control: in-app account deletion available
This section is a helper for Play Console mapping. Always align the Data safety form with your actual backend practices, retention periods, and the contact email you publish.