Privacy Policy
Last updated 30 September 2026
Two kinds of information
It matters which is which. The first is information about you, the shopkeeper: your name, phone number, email address if you give one, your shop's name and location, and a PIN which is stored only in encrypted form and can never be read back.
The second is your shop's own business records: your customers' names and phone numbers, what they owe you, your products, your prices and your purchase lists. That information belongs to your shop. We hold and process it on your behalf, and we do not use it for our own purposes.
Why we hold it
To provide the service you signed up for: to show your prices, keep your ledger, remind you about visits and festivals, and let you print or share your own records.
We also use limited technical information — error reports and login times — to keep the service working and to see whether a shop is still using it.
Who else can see it
Our hosting provider, which stores the database and runs the application. The servers are located in Hyderabad, India.
A second storage provider, in the United States, which keeps a copy of our backups so the service can be restored even if our hosting provider fails. The copies are encrypted on our server before they leave it, and that provider cannot read them.
An error-monitoring service, which receives technical details when something goes wrong. It is configured not to receive your customers' names, phone numbers or amounts.
A push-notification service, if you enable notifications on your device, which handles the delivery of the alert: Google Firebase Cloud Messaging for the Android app, and your browser's own push service on the web. Alerts about a customer's account are not shown on a locked phone's screen.
Meta's WhatsApp Business service, which delivers sign-in codes to your phone and, only if you agree to them, messages about your own account, such as when your free period ends or when we record your payment. It receives your phone number and those messages. Nothing about your customers is sent to it, with one exception you control: if you switch on automatic WhatsApp updates for a customer who has agreed to them, that customer's name, phone number and each change to their balance are sent to them through it.
Razorpay, which processes the payment when you pay your plan online on our website. It receives what you type into its payment window — your UPI ID, card or bank details — and we never see or keep them. We receive only whether the payment went through, its amount and its reference.
Google's Gemini service, which helps the voice assistant understand a spoken command that the app cannot work out by itself. It receives only the words of that command, which may include a customer's or a product's name and an amount. Nothing else from your records is sent to it, and this happens only when you use the voice assistant. We use Gemini's paid service, under which Google does not use what we send to improve its products.
Nobody else. We do not sell your information, we do not share it for advertising, and there is no advertising or third-party analytics in this application.
Your customers' information
When you record a customer's name, phone number or debt, you are responsible for having a proper reason to do so and for what you tell them about it.
If one of your customers asks you to remove their details, you can delete them yourself in the app, or ask us and we will help.
How it is protected
Traffic between your phone and the service is encrypted. PINs and passwords are stored as one-way hashes and cannot be recovered, only reset.
Each shop's records are isolated from every other shop's.
How long it is kept
Your records are kept for as long as your shop uses the service, and for a reasonable period afterwards in case you return or need a copy.
When a shop is closed — by you in Settings, or by us at your request — it stops working immediately and nobody can sign in to it. Everything in it is then deleted for good 30 days later. During those days the closure can be undone: ask us and the shop comes back exactly as it was.
After that the shop and everything in it is removed from the live system, and we keep no copy of it outside our backups. Backups are kept on a reducing schedule: every backup for a week, then daily for about a fortnight, weekly for two months, and monthly copies for longer. Copies of deleted data disappear as those backups age out.
What you can ask for
A copy of your data, correction of anything wrong, or deletion of your shop and its records. Contact us and we will act on it. A deletion takes effect at once and becomes permanent after 30 days.
If you are not satisfied with how we have handled a request, you may complain to the relevant data protection authority.
Deleting your account
The shop's owner can delete the shop from inside the application: open Settings, tap "Close this shop" and type the shop code to confirm. It stops working at once and everyone is signed out. After 30 days the shop is deleted for good with everything in it — products, prices, customers, the ledger, suppliers and bills — together with the account of everyone who belongs to no other shop.
The owner can remove a member of staff from the list of people in Settings. To have any account or other personal details deleted, ask us directly using the contact details below. We will confirm the request and act on it; you do not need to give a reason.
A record of any payment a shop made to us is kept, with the shop's name and code, because our own accounts have to show it. Copies held in backups disappear as those backups age out, as described above.
Changes
If this policy changes materially we will tell you in the application before the change takes effect. The date at the top shows the current version.
Contact
SUDHA SOFTWARE
3/306, Kesavan Maligai, Near Periyamariamman Temple, Chinnasiragapadi, Salem, Tamil Nadu 636308