Privacy Policy — Munshi by DIGIT

The short version: Munshi stores the ledger, cash book, bank, and expense records you create for your own business, secured to your account. We use Firebase (Google Cloud) to run the app. The free app shows ads from Google AdMob — your khata (names, phone numbers, amounts, notes) is never shared with advertisers, and we never sell your data to anyone (see Advertising). We also use Google's Firebase Analytics, Crashlytics and Performance Monitoring to see how the app is used, to find and fix crashes and to keep it fast — see Usage & diagnostics.

Because Munshi is a bookkeeping tool, some of the information you enter — like a customer's name and phone number in your khata — is personal information about other people that you, the business owner, choose to record. You're responsible for having a legitimate business reason to keep that information.

01 Information we collect

Account information

Your phone number, used to sign you in via a one-time SMS code (Firebase Phone Authentication). We also read a device signature automatically so the SMS code can autofill — this doesn't require reading your other messages. We also store an internal account ID.

Your welcome-screen answers

The choices you tap on the welcome screens before signing in (which problems you have had with other apps and where you kept your accounts before) are kept on your account as a short survey, with the app version and the language you used, so we can understand what our users need. They are fixed choices, never anything you type, and they are deleted with your account.

Business information

Business name, type, category, currency, address, city, and an optional business photo — everything you enter while setting up or editing each of your businesses.

Ledger, cash book, bank & expense records

The core of the app: customer and supplier names and phone numbers, transaction amounts, dates, notes, bill references, and any photos or voice notes you attach to an entry. Bank records (bank name, account title, account number) are figures you type in for your own bookkeeping — Munshi does not connect to real bank accounts, move money, or process payments.

Data	Where it lives	Why we ask for it
Ledger entries, cash book, bank & expense records	Firestore (Google Cloud)	The bookkeeping feature itself
Bill/receipt photos, voice notes	Firebase Storage	Attach evidence to an entry, on your request
Face ID / fingerprint	Your device only	Optional app-lock — never sent to us (see below)
Local backup file	Your device's storage	A daily backup file you can keep or share
Google Drive backup	Your own Google Drive	Optional off-device backup copy

Camera, photo library & microphone

Used only when you actively choose to add a profile photo, attach a bill photo to an entry, or record a voice note. Munshi never accesses the camera or microphone in the background.

Contacts

● Stays on your device When you tap the contacts button while adding a customer, Munshi asks your phone for permission to open your contacts. You then pick one person, and Munshi uses only that person's name and number to fill in the form. Munshi does not read, store or upload the rest of your contacts, and never accesses them in the background.

Biometric data

● Stays on your device If you enable Face ID or fingerprint unlock, your device's operating system handles the biometric match directly — Munshi only ever receives a yes/no answer. We never see, receive, or store your biometric data.

Backup data

Local backup A rotating local backup is saved automatically to your device's own storage.
Google Drive backup — optional If you choose to connect Google Drive, Munshi requests the narrowest permission Google offers (drive.file) — it can only see and manage the specific backup files it creates itself, never your other files, folders, or photos in Drive.

Usage & diagnostics

To keep the app reliable and to understand which features are useful, Munshi uses Firebase Analytics, Firebase Crashlytics and Firebase Performance Monitoring (Google). They collect: which screens you open and a small set of events such as signing in, using a feature (for example "archived an account" or "opened Reports", by name only) or requesting account deletion (including the optional reason you pick); the choices you tap on the welcome screens (which problems you have had with other apps and where you kept your accounts before, sent once as fixed categories, never anything you type); crash and error reports, including problems the app recovered from (what went wrong, app version and build, device model, operating-system version, and a rough size of the phone's memory); how long a few actions take, such as starting the app or building a report; and an app-installation identifier together with your internal account ID, so reports can be grouped per user. They do not include the contents of your ledger — customer names, phone numbers, notes or amounts — and we remove phone numbers and e-mail addresses from error text before it is sent. Analytics doesn't read your device's advertising ID and this data isn't used for advertising — ads are covered separately in Advertising. Analytics data is kept for no longer than 14 months.

To make sure requests to our servers come from the real Munshi app, release builds use Firebase App Check. It asks Google Play (Android) or Apple (iPhone) to confirm that the app is genuine and unmodified, and sends us only that confirmation, not information about you or your other apps.

If you tap "Copy technical details" or write to us from the app, the e-mail or copied text contains the app version, your phone model and system version — nothing else — and you choose whether to send it.

What we don't do: we don't share your ledger records with advertisers, we don't sell your data, and we don't collect precise location data. The only analytics are the first-party usage, performance and crash diagnostics described above; the only advertising is Google AdMob, described in Advertising. If that changes in a future version, we'll update this policy first.

02 How we use your information

To run the core bookkeeping features — ledgers, cash book, bank book, and expense tracking.
To sign you in and keep your data scoped to your account.
To help you send a payment reminder: when you tap "Send reminder", Munshi opens WhatsApp on your own phone with a pre-written message (the customer's name, your business name, and the amount) for you to review and send yourself. Munshi doesn't send the message, and it doesn't pass through our servers.
To run a nightly automated check that your account balances stay mathematically consistent, and to flag any drift to you.
To back up your data.
To measure how the app is used and to find and fix crashes (see Usage & diagnostics).
To show ads in the free app, which pay for running Munshi (see Advertising).
To respond if you contact us for support.

03 Advertising

Munshi is free for everyone. Ads from Google AdMob pay for the servers and for building, updating and supporting the app, so features other khata apps charge for (offline use, more than one phone, Google Drive backup, reports) stay free. The app shows: small cards marked "Ad" in lists such as your accounts, Cash Book, bank and expense lists, Home and Reports; an occasional full-screen ad when you leave Reports; and a short video ad you choose to watch before some exports. Ads never appear while you add or edit an entry, sign in, unlock the app or send a reminder.

What AdMob collects. To choose, show and count ads and to prevent fraud, Google's Mobile Ads SDK collects: your device's advertising ID (on Android), device and app information (model, operating-system version, app version, language), an approximate location derived from your IP address, and how you interact with ads (views and taps). Google processes this as described in How Google uses information from sites or apps that use its services.

What advertisers never get. Your khata — customer and supplier names, phone numbers, amounts, notes, photos, voice notes, bank or expense records — is never sent to Google AdMob or to any advertiser.

Your choices.

In the EEA, the UK and Switzerland, Munshi asks for your consent through Google's consent message before ads use your data, and you can change your choice at any time in Settings → Privacy choices.
On Android you can reset or delete your advertising ID, or opt out of personalised ads, in your phone's Settings → Google → Ads (or Settings → Privacy → Ads).
On iPhone, Munshi doesn't ask to track you across other companies' apps and websites, so ads there are not based on your activity elsewhere.
Ads are set to be suitable for a general audience, and we block categories that don't belong next to your accounts, such as loans, gambling and crypto trading.

05 Retention & deletion

Deleted ledger entries sit in a Recycle Bin for 14 days, then are permanently and automatically purged.
Analytics and crash data are kept by Firebase for no longer than 14 months and are tied to your internal account ID.
If you delete your account from Settings, your businesses, ledger, and every associated record are permanently deleted within 30 days. Until then your account is disabled — you're signed out everywhere and it appears deleted — but your data isn't erased. Sign in again with your phone number and confirm the one-time code within that window and your account is restored automatically.

06 Data security

Server-side security rules restrict every record to the account that owns it — no other user or business can read or write your data.
Your app-lock PIN and biometric flag are held in your device's own encrypted secure storage.
Data cached on your device for offline use is protected by your device's own OS-level storage protections.

07 Your rights & choices

Access & export — export any ledger, cash book, or bank account to PDF or Excel at any time. A PDF of this month or last month is free; longer date ranges and Excel files open after a short ad.
Ad choices — see Advertising.
Correct or delete — edit or delete any entry directly in the app.
Disconnect Google Drive — at any time, from Settings → Backup.
Delete your account — from Settings → Danger zone.
Reminders — Munshi never sends a reminder itself; a message goes out only if you press Send in WhatsApp, so there's nothing to "opt out" of.

For anything this page doesn't cover, contact us — see Contact us.

08 Children's privacy

Munshi is built for business owners and is not directed at children. We do not knowingly collect information from children under 13 (or the minimum age in your jurisdiction), and we don't show ads to them knowingly. If you believe a child has provided us information, contact us and we'll remove it.

09 International data transfers

Our infrastructure provider, Google Cloud/Firebase, may process and store data on servers located outside Pakistan. By using Munshi, you understand your information may be transferred to and processed in other countries, under Google's own security and contractual safeguards.

10 Changes to this policy

We may update this policy as the app changes. We'll update the effective date at the top of this page, and, for material changes, notify you inside the app. Continued use of Munshi after an update means you accept the revised policy.

11 Governing law

This policy is governed by the laws of Pakistan, without regard to conflict-of-law principles.