VyaparAI
Privacy Policy.
VyaparAI — GST Billing & Invoice App
Updated: July 01, 2026
This Privacy Policy describes how VyaparAI ("we", "our", or "us") handles information in the VyaparAI — GST Billing & Invoice App mobile application (the "App") available on the Google Play Store.
1. Zero Network Footprint (Offline-First Architecture)
We take your business privacy seriously.
No Internet Access
The App does not request or declare the `INTERNET` permission in its Android Manifest.
Zero Data Transmission
No data, reports, databases, metadata, or metrics ever leave your physical device. All invoice generation, reporting, calculations, and database queries are processed 100% locally.
No Cloud Backups
We do not run any cloud synchronization servers. Your database backup files are generated locally as secure, encrypted ZIP packages that you control and store offline.
2. Information We Collect and How We Use It
Since the App is entirely offline-only, we do not collect, store, upload, or share any personal or business data on external servers.
All information input by you is stored strictly in the App's local database on your device, including:
Company Profiles
Business name, owner name, phone, address, GSTIN, and PAN details.
Customer Records
Contact name, shipping/billing address, phone, email, and GST details.
Product Inventory
Name, price, description, SKU, barcode, unit, stock count, and HSN codes.
Invoice Logs
Transaction history, totals, taxes (CGST, SGST, IGST), payment statuses, and line items.
3. Device Permissions
To deliver core offline functionality, the App requires specific system permissions:
Camera (android.permission.CAMERA)
Used solely for scanning barcodes and QR codes to quickly add items to invoices or bind SKUs to products.
Data Handling: Image feeds are processed in real-time, locally, on your device's memory. Camera data is never recorded, saved, or sent over a network.
Notifications (android.permission.POST_NOTIFICATIONS)
Used on Android 13+ to show invoice generation progress alerts and local CRM task reminders.
Data Handling: Processed locally using Android system notifications.
Vibration (android.permission.VIBRATE)
Provides physical haptic feedback when a barcode scan succeeds or when input validations fail.
Data Handling: No tracking details are captured.
4. Data Security
Database Encryption
All customer, product, and invoice records are stored in a local SQLite database hardened with AES-256-GCM encryption (via SQLCipher).
Access Control
You can optionally configure a 4-digit PIN lock and Biometric Authentication (fingerprint unlock) inside the App. This ensures your local business records are protected if your device is lost or stolen.
Storage Location
The database files reside in the App’s private, sandbox storage area (/data/data/com.VyaparAI.app/databases/), which is protected by the Android operating system and is inaccessible to other apps.
5. Third-Party Libraries and SDKs
- No Advertising SDKs: The App is free of commercial ads and tracking libraries.
- No Analytics SDKs: We do not include third-party trackers (like Google Analytics, Firebase, or Mixpanel) that monitor user behavior.
- Local Services Only: Libraries used for barcode recognition (e.g., Google Play Services Barcode Scanning API) perform decoding entirely on-device.
6. Compliance with Global Regulations
Because the App keeps 100% of data localized on your own hardware, you maintain sole ownership and custody of all personal information.
GDPR (General Data Protection Regulation)
You have complete sovereignty over your data. To exercise your "right to be forgotten" or "right of access", you can inspect, modify, export, or delete records directly inside the App, or uninstall the App (which permanently wipes the local database).
CCPA (California Consumer Privacy Act)
We do not sell, rent, or trade your personal or business data, nor do we possess the means to collect it.
COPPA (Children’s Online Privacy Protection Act)
The App is intended for business use by invoicing professionals and does not knowingly interact with or collect data from children under 13.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected by the "Last Updated" date at the top. Since the App operates offline, we encourage you to review the policy on our store listing page periodically.