BillDost - privacy & policy

Effective date: 14 August 2026

Last updated: 14 August 2026

BillDost ("the app", "we", "us") is a GST billing, invoicing, and

inventory app for small businesses in India, published by United Tabs

("we", "us", "our"). This policy explains what data the app touches,

why, and what we do (and do not) do with it. It's written to match

exactly what the app's code actually does — not a generic template —

and covers every permission the app requests.

If you have questions, contact khushipatel7079@gmail.com

1. THE SHORT VERSION

- BillDost has no user accounts. There is no signup, login, or OTP.

- BillDost has no server. Every business, party, item, invoice, and

payment you create is stored only in a local database on your own

device.

- We do not collect, receive, transmit, or have access to any of

your business data, contacts, or files. There is nothing on our

end to breach, sell, or share, because nothing is sent to us.

- The app contains no analytics SDK, no advertising SDK, and no

crash-reporting SDK of any kind.

- The app makes no network requests to any server, ours or anyone

else's, under normal use.

The rest of this document explains this in full detail, permission by

permission, as required for our Google Play Store listing.

2. INFORMATION YOU ENTER INTO THE APP

When you use BillDost to record a business, party (customer/supplier),

item, invoice, quotation, payment, or any other business record, that

information (names, phone numbers, addresses, GSTIN/PAN if you choose

to enter them, amounts, item details, etc.) is written directly into a

local SQLite database that lives on your device's storage, inside the

app's own private storage area.

- This data never leaves your device automatically.

- We do not have a copy of it. We cannot see it, recover it for you,

or hand it over to anyone, because it was never sent to us in the

first place.

- It is deleted the moment you uninstall the app, or when you

explicitly delete a record inside the app.

3. PERMISSIONS THE APP REQUESTS, AND EXACTLY WHY

BillDost requests the minimum set of permissions it needs to function,

each requested only at the moment it's actually needed (not upfront at

launch), through your device's own permission prompt. Declining a

permission only disables the specific feature that needs it — the rest

of the app keeps working.

CAMERA

Used only when you tap the barcode-scan button while adding or

looking up an item, to read a barcode. The camera preview is shown

live on screen; no photo or video is ever saved, stored, or sent

anywhere. If you deny camera access, you can still type a barcode

number in manually.

CONTACTS (read-only)

Used only when you explicitly tap "Import from Contacts" while

adding a party, to read a chosen contact's name and phone number

and pre-fill the new party form with it. The app never reads your

contacts in the background, never uploads your contact list

anywhere, and never writes to or modifies your device's contacts —

the app cannot create, edit, or delete entries in your phone's

contacts, only read the one contact you pick.

BIOMETRIC / FINGERPRINT

Used only if you turn on the optional App Lock setting, to let you

unlock the app with your fingerprint/face instead of typing a PIN.

This is handled entirely by your device's own operating system —

the app never receives or stores your fingerprint or face data

itself; it only receives a yes/no "unlocked" result from the OS.

VIBRATE

Used for small haptic feedback (e.g. confirming a button press).

Carries no data.

INTERNET

Present in the app's installed package as a side effect of a

library the app uses for local file handling (expo-file-system),

which declares this permission defensively for a remote-download

feature the app does not use anywhere in its code. BillDost's own

code makes no network requests to any server. We're stating this

explicitly, not just as a blanket "we don't track you" claim,

because we'd rather over-explain a technical detail than leave it

unaddressed.

BillDost does NOT request, and cannot access: your precise or

approximate location, your microphone, your call log or SMS messages,

your photos/media library, your device's advertising ID, or background

access to any of the above. Two permissions some similar apps request

are deliberately excluded here, on purpose: BillDost never asks for

"write contacts" (it can import a contact into the app, but can never

modify your phone's own address book) and never asks for storage

access beyond its own private app folder (files you export or share

go through your device's normal share sheet, which needs no such

permission).

4. WHEN YOU SHARE OR EXPORT SOMETHING

BillDost can generate PDF invoices/receipts and share them, or export

a backup file, or export items as a spreadsheet. In every one of these

cases:

- You choose to trigger it (tapping Share, Print, Export, or

Backup) — nothing is sent automatically or in the background.

- The file is handed to your device's own share sheet, print

dialog, or a specific app you pick (for example, WhatsApp, Gmail,

Google Drive, or your phone's Files app) — the same mechanism any

app on your phone uses to share a file.

- We do not see, receive, or keep a copy of what you share. Once it

leaves BillDost through the share sheet, it's subject to the

example, WhatsApp's own privacy policy governs a message you send

through WhatsApp) — not this one.

5. BACKUP AND RESTORE

The "Export Backup" feature creates a real SQLite database file

containing your business data and saves or shares it wherever you

choose (your device's storage, Google Drive, email, etc., via the

share sheet described above) — you control where it ends up, and we

have no access to it. If you turn on Auto Backup, the app writes that

same backup file to a folder inside its own private app storage on

your device only; it is not uploaded anywhere by the app.

6. APP LOCK (PIN / BIOMETRIC)

If you enable App Lock, the PIN you set is stored using your device's

secure, encrypted local storage (Android Keystore-backed storage on

Android, Keychain on iOS — via the `expo-secure-store` library). It is

encrypted at rest by the operating system, never transmitted anywhere,

and never visible to us. This is a device-level lock for your own

privacy if someone else picks up your phone — it is not an account

password and is unrelated to any server-side authentication, because

BillDost has none.

7. DOES BILLDOST HAVE USER ACCOUNTS OR AUTHENTICATION?

No. There is no signup, login, username, password, or OTP anywhere in

this app. You do not create an "account" with us. The optional App

Lock PIN/biometric described above is a local device lock only, not an

account credential.

8. ANALYTICS, ADVERTISING, AND THIRD-PARTY SDKS

BillDost contains no analytics SDK, no advertising SDK, and no crash-

reporting SDK. We do not track how you use the app, how often you open

it, what screens you visit, or any other usage behavior. The only

third-party integration in the app is the ability to hand a message or

file to WhatsApp's own app via Android/iOS's standard share mechanism,

described in section 4 above — this is not an SDK embedded in the app

and involves no data exchange with us or with WhatsApp's servers

through our app.

9. DATA SECURITY

Because your business data is stored only locally and is never

transmitted by the app under normal use, there is no "data in transit"

to secure for the app's core functionality. Where the app does read or

write sensitive material — your App Lock PIN and biometric preference

— it uses your operating system's own secure, encrypted storage layer

(see section 6). Files you deliberately export or share leave the app

only through your device's own OS-level share sheet or print system,

the same secure mechanism every app on your phone uses.

10. DATA RETENTION AND DELETION

Your data stays on your device for as long as you keep it there. You

can delete individual records (a business, party, item, invoice, or

payment) at any time from within the app, which permanently removes

that record from the local database. Uninstalling the app deletes its

entire local database and everything in it, immediately and completely

— there is no copy on any server to separately delete, because none

was ever created.

11. CHILDREN'S PRIVACY

BillDost is a business tool intended for shop owners, retailers, and

small business operators, and is not directed at children. We do not

knowingly collect personal information from children under 13 (or the

relevant minimum age in your country). Because the app collects no

data on our end at all, this is inherent to how the app works, not

just a policy statement.

12. YOUR RIGHTS AND CHOICES

Because BillDost stores your data only on your own device and we never

receive a copy of it, the usual "request a copy of your data" or

"request deletion" process is redundant — you already have full,

direct, immediate access to your data at all times, and full control

over deleting it (section 10) or exporting it (section 5). If you ever

have a privacy question we haven't answered here, contact us using the

details in section 14.

13. INTERNATIONAL DATA TRANSFERS

Not applicable. BillDost does not transmit your data anywhere, so no

cross-border data transfer occurs through the app's own operation.

14. CONTACT US

Questions about this Privacy Policy, or about how BillDost handles

data, can be sent to: khushipatel7079@gmail.com

15. CHANGES TO THIS POLICY

If this policy changes, we'll update the "Last updated" date at the

top of this document and of the in-app copy (Settings → Help & Support

→ Privacy Policy). Material changes will be reflected there before

they take effect. Continuing to use the app after an update means you

accept the current version of this policy.