Khata Simple is a mobile accounting application published by Acconix Consultancy Services, a consultancy practice based in Ajra, Maharashtra, India. In this policy, "we", "us" and "our" mean Acconix Consultancy Services, and "you" means the person using the app.
For the purposes of the Digital Personal Data Protection Act, 2023, we act as the Data Fiduciary in respect of the personal data described below.
Contact for any privacy question, request or complaint: contact@acconix.in
Your books are encrypted on your device before anything is sent anywhere. What reaches our servers or your Google Drive is ciphertext that we cannot read.
We do not sell your data, we do not use it for advertising, and we do not use it to train machine-learning models.
The rest of this document sets out exactly what is collected, why, where it goes and how long it stays — including the specific disclosures Google requires of applications that request access to Google Drive.
| Data | Why we hold it |
|---|---|
| Mobile number | To create and sign in to your account, and to send a one-time verification code. |
| Email address | Alternative sign-in method, and to send a verification code. Optional if you sign in by mobile number. |
| Password (hashed) | Stored only as a PBKDF2 hash with a per-user salt. We never hold your password in a readable form. |
| Session tokens | To keep you signed in across app sessions. |
This is the content of your books. It includes the names and contact details of your customers and suppliers, their PAN and GSTIN where you record them, invoices and their line items, payments, stock items and rates, and any notes you add.
Where your customers and suppliers are individuals, this business data contains their personal data. In respect of that data you are the Data Fiduciary and we process it only on your instructions, as a Data Processor.
| Permission | Used for |
|---|---|
| Contacts | Only when you choose to add a party from your phone contacts. The contact you pick is copied into your ledger. We do not read, upload or index your contact list otherwise. |
| Camera | Only when you scan a purchase bill or a QR code. Images are processed to extract line items and are not retained by us after processing. |
| Storage / files | Only when you export a PDF, import a file or take a manual backup. |
| Notifications | Reminders you set yourself, such as payment follow-ups. Generated on your device. |
| Biometric | Optional app lock. Handled entirely by Android; we never receive your fingerprint or face data. |
Our servers record an audit log of authorisation decisions — which account requested access to which business record, and whether it was allowed or refused. This exists so that a security incident can be investigated honestly. It contains identifiers and timestamps, not the contents of your books.
Khata Simple can back up your encrypted books to Google Drive. To do this it requests one Google API scope:
https://www.googleapis.com/auth/drive.file
This scope permits an application to see and manage only the files it has itself created in your Drive. It gives us no visibility of any other file, folder or document in your Google account. We request no broader Drive scope, and we do not read your Gmail, Calendar, Photos or Contacts through any Google API.
Khata Simple's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google user data for advertising, we do not sell it, we do not allow humans to read it (and could not, as it is encrypted), and we do not use it to develop, improve or train generalised artificial intelligence or machine-learning models.
You can withdraw this access at any time from your Google account permissions page, or by disconnecting Drive in Settings → Sync & storage in the app.
No system is perfect, and we do not claim otherwise. If a breach affecting your personal data occurs, we will notify you and the Data Protection Board of India as required under the Digital Personal Data Protection Act, 2023.
We use a small number of service providers, each for a defined purpose. None of them receives readable ledger data.
| Provider | Purpose |
|---|---|
| Google Firebase | Mobile number verification by OTP, and app integrity attestation. |
| Google Drive | Storage of encrypted backup files, in your Drive or in ours depending on the tier you choose. |
| Cloudflare | Hosts our authentication service, account database and encrypted secrets. |
| Resend | Delivery of verification code emails. Receives your email address and the code, nothing else. |
We do not sell personal data, and we do not disclose it to third parties for their own marketing. We may disclose data where we are compelled to by a valid legal order, and will tell you where we are lawfully able to.
Some of these providers operate infrastructure outside India. Where personal data is transferred abroad it is done in accordance with applicable Indian law.
On account closure we delete your account record and the wrapped data key. Once that key is destroyed, any remaining backup ciphertext is permanently unreadable by anyone, including us.
Data held only on your device is removed when you uninstall the app. Please take a backup first if you want to keep it.
Under the Digital Personal Data Protection Act, 2023 you have the right to:
Write to contact@acconix.in to exercise any of these. We will respond within the period prescribed by law. Much of this you can also do yourself inside the app.
Khata Simple is a business tool and is not directed at children. We do not knowingly create accounts for anyone under 18. If you believe a child's personal data has reached us, write to us and we will delete it.
If we change this policy we will update the effective date above and, where the change is material, tell you in the app before it takes effect. Continuing to use Khata Simple after a change means you accept the updated policy.