Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how WeSimplifAI Private Limited ("we", "our", "KiranaMitra") collects, uses, and protects information when you use the KiranaMitra mobile application (com.kiranamitra.app) on Android devices.

By downloading and using the KiranaMitra app, you agree to the data practices described in this policy. If you do not agree, please do not use the app.

This policy covers the KiranaMitra Android application only. It does not cover third-party services, payment apps, or websites linked from within the app, which have their own privacy policies.

2. Information We Collect

Voice Audio
The app uses your device microphone when you activate voice billing by tapping the voice button. Audio is processed transiently by Android's SpeechRecognizer service (on-device where supported, or via Google's speech API). KiranaMitra does not record, store, transmit, or retain any voice audio. Audio processing happens in real time and the audio is discarded immediately after transcription.

Voice Transcript (text only)
Voice recordings are never stored. The transcribed text generated from voice input may be stored locally on your device in the app's private database to improve recognition quality and transaction functionality. This text is not transmitted to KiranaMitra servers and is not shared externally.

Transaction Data
Items, quantities, amounts, dates, and payment methods for each billing transaction. This data is stored locally on your device using SQLite/Room database. It is not transmitted to any external server in this version of the app.

Merchant Profile
Your store name and UPI ID, entered during initial setup. Stored locally on your device only. Used exclusively for generating dynamic UPI QR codes on-device — not transmitted externally.

Customer Credit (Udhar) Records
Customer name, phone number, amount, and date for udhar transactions. Stored locally only. Never transmitted. Never shared.

Anonymous Device Identifier
A random anonymous identifier generated by Firebase Anonymous Authentication. Used as a stable merchant identity for operational infrastructure. Not linked to your name, phone, or any personal identifier. This identifier falls under the "Device or other IDs" category in Google Play's Data Safety framework and is shared with Firebase (Google LLC) for app functionality.

Usage Analytics
Anonymized data including app opens, session duration, and feature usage, collected via Firebase Analytics (Google LLC). Used to understand how merchants use the app and improve the product. Not linked to personal identity.

Crash Reports
Anonymized device model, Android version, and stack trace information when the app crashes. Collected via Firebase Crashlytics (Google LLC). Used for debugging and reliability. Contains no personal or transaction data.

App Behaviour Events
Anonymized in-app events such as session start, transaction completion, and voice match outcomes. Stored locally on your device. Used to improve voice recognition and product quality. Not linked to personal identity. Not transmitted externally.

3. Information We Do NOT Collect

• We do not store voice recordings or audio files of any kind
• We do not collect, access, or read your device contacts
• We do not access your location or GPS data
• We do not access your camera
• We do not read your SMS, call logs, or other communications
• We do not sell your data to any third party
• We do not share your data with advertisers
• We do not run ads within the application
• We do not access the microphone at any time except during explicit, user-initiated voice billing sessions

4. How We Use Information

• To operate core billing features: voice input, bill generation, payment collection, udhar recording
• To generate dynamic UPI QR codes (processed entirely on-device using ZXing)
• To provide transaction history and daily summaries
• To diagnose crashes and improve app reliability (Firebase Crashlytics)
• To understand usage patterns and improve product features (Firebase Analytics — anonymized only)
• To improve voice recognition quality using locally stored behaviour events

We do not use your information for advertising, profiling, or selling to third parties.

5. Data Storage & Security

Primary storage: All transaction data, merchant profile, item catalog, and udhar records are stored on your device in a SQLite database managed by Android Room. This database is not accessible to other apps on your device.

Cloud backup: Not active in v1.0.0. All transaction data remains on your device. Cloud sync via Firebase Firestore (asia-south1, Mumbai) is planned for a future version and will be opt-in. When introduced, data will be encrypted in transit (TLS) and at rest.

Firebase operational data: Crash reports and anonymized analytics are transmitted to Firebase (Google LLC) servers. These contain no personal or transaction data. Firebase Anonymous Auth generates a stable anonymous identifier stored by Firebase — not linked to your identity.

Device security: The app follows Android security best practices. The local database is protected by Android's app sandbox model.

6. Data Retention

Local device data: Retained indefinitely until you uninstall the app. Uninstalling deletes all local data.

Cloud data (transactions): Not active in v1.0.0. No transaction data is transmitted externally.

Analytics and crash data: Retained for up to 90 days in anonymized, aggregated form by Firebase. No personal or transaction data is retained in these systems.

7. Third-Party Services

Each third-party service is governed by its own privacy policy. KiranaMitra does not control how these services handle data processed by them. We encourage you to review Google's Privacy Policy and the privacy policies of any UPI payment apps you use.

Planned for future versions: Transaction cloud backup and cross-device synchronisation via Firebase Firestore will be introduced in a future release. Room database remains the source of truth; Firestore will serve as replication only. This policy will be updated before such collection begins.

8. App Permissions Explained

RECORD_AUDIO (Microphone)
Required for the voice billing feature. The microphone is activated only when you tap the voice button to start a voice billing session. The app does not access the microphone in the background, on startup, or at any other time. Voice audio is not stored, recorded, or transmitted by KiranaMitra. Audio is processed ephemerally by Android's SpeechRecognizer — it is not collected or retained. In Google Play's Data Safety framework, this is classified as ephemeral processing, not data collection.

INTERNET
Required for Firebase Anonymous Auth, Analytics, and Crashlytics. The app operates fully offline for all merchant-facing functions — voice billing, QR payment, and udhar recording work without internet. Internet is used only for operational infrastructure (crash reporting, analytics) when connectivity is available.

ACCESS_NETWORK_STATE
Used to check whether internet connectivity is available before scheduling background operations. Does not collect location or network identity information.

9. Children's Privacy

KiranaMitra is designed for adult business operators and merchants. We do not knowingly collect personal information from users under the age of 18. If you believe a user under 18 is using the app, please contact us at support@kiranamitra.in and we will take appropriate action.

10. Your Rights

You have the right to:

• Access your data: Request a copy of data we hold about you
• Delete your data: Request deletion of your account and all associated cloud data
• Opt out of analytics: Contact us to disable usage analytics collection
• Data portability: Request an export of your transaction data

To exercise any of these rights, contact us at support@kiranamitra.in. We will respond within 30 days.

Local data stored on your device is always under your direct control. Uninstalling the app deletes all local data immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification before the changes take effect. The "Last updated" date at the top of this policy reflects the most recent revision.

Continued use of the app after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related queries, data requests, or concerns:

WeSimplifAI Private Limited
Email: support@kiranamitra.in
Website: kiranamitra.in