Privacy Policy — Munshi (Khata App)
Last updated: August 26, 2026
This privacy policy describes how Munshi ("the app", "we") handles your information. Munshi is developed by Allah Rakha.
Summary
Munshi is a ledger/khata app for tracking money owed between you and your customers or suppliers. Your ledger data is stored on your own device by default. When you sign in (phone number + OTP, or Google), your data is additionally synced to your own private cloud account so you can access it if you reinstall the app or switch devices — no one else can see it.
Information we collect
| Data | When | Why |
|---|
| Phone number | When you sign up or log in with phone + OTP | Used as your account identifier, verified via a one-time SMS code from Firebase Authentication — not shared, not used for marketing |
| Google account email/name | If you sign in with Google | Provided by Google Sign-In to identify your account |
| Ledger data (party names, phone numbers, amounts, receipt photos, notes) | As you use the app | This is the core purpose of the app — tracking who owes you and who you owe |
| Crash and performance data | Automatically, if a crash occurs | Sent to Firebase Crashlytics to help us fix bugs. Does not include your ledger contents |
Where your data is stored
- On your device: All ledger data is stored locally in an encrypted database at all times.
- In the cloud: Once you sign in (phone + OTP or Google), your businesses, parties, and transactions are also mirrored to Cloud Firestore under your own private account. This data is protected by security rules that only allow you to read or write it — not other users, and not us.
- Optional Google Drive backup: If you choose to enable it in Settings, a backup copy of your data is stored in your own Google Drive, in a private app-only space that only Munshi can access — not your visible My Drive, and not accessible to any other app.
Data we do NOT do
- We do not sell your data.
- We do not show ads.
- We do not share your data with third parties for marketing.
- We do not read your ledger contents ourselves — Firestore's security rules restrict access to your own account only.
Third-party services
Munshi uses the following Google/Firebase services, each governed by Google's own privacy policy:
- Firebase Authentication — for phone + OTP verification and Google Sign-In.
- Cloud Firestore — for cloud sync of your ledger.
- Firebase Crashlytics — for crash reporting (technical crash data only, no ledger contents).
- Google Drive API — only if you enable Google Drive backup in Settings.
Google's privacy policy: https://policies.google.com/privacy
Permissions the app uses
- Camera — only when you choose to attach a receipt photo to an entry.
- Photos/Media (via the system photo picker) — only when you choose to attach a receipt from your gallery. The app does not have general access to your photo library.
- Biometric (fingerprint) — only if you enable App Lock with fingerprint in Settings, to unlock the app itself. Not sent anywhere.
- Phone/SMS (handled by Firebase, not read by the app) — used solely to verify your number via a one-time code during sign-in.
Your choices
- You can export or delete your local data at any time from Settings (Backup & Restore).
- To delete your account and cloud data entirely, contact us at Howtourduu@gmail.com and we will remove it.
Children's privacy
Munshi is a business/personal finance tool not directed at children, and we do not knowingly collect data from children under 13 (or the relevant age in your country).
Changes to this policy
If this policy changes, the "Last updated" date above will change, and significant changes will be noted in the app's release notes.
Contact
Questions about this policy: Howtourduu@gmail.com