Privacy Policy — SahiBill
Last updated: 7 October 2026
- Your business records — your business profile, parties, items, bills, payments and photos — are stored only on your phone. We do not have a copy and cannot see them.
- The App creates an anonymous account (no name, email or phone number) and sends usage events and crash reports to Google Firebase and Mixpanel, so we can fix problems and improve SahiBill. These never include the names, phone numbers, GSTINs, addresses, amounts or document numbers in your records.
- SahiBill Pro is billed by Google Play. We never see your card, UPI or bank details.
- There are no ads. We do not sell your data, and you can ask us to delete the data linked to your install.
1. Who we are
SahiBill (the “App”, Android package com.auspo.invoice.maker, earlier called Invoice Maker) is published by Auspo Apps (“we”, “us”, “our”). This policy explains what information the App handles, why, and the choices you have. It applies to the App on Android. How the auspoapps.com website itself handles visits is described in our website privacy policy.
For the purposes of the Digital Personal Data Protection Act, 2023 (India), we are the Data Fiduciary for the personal data described in sections 2.2 to 2.4. The business records described in section 2.1 never reach us.
2. Information the App handles
2.1 Your business records — on your phone only
Everything you enter is stored in a database inside the App's private storage, which other apps on your phone cannot read:
- Business profile — business name, address, phone, email, GSTIN, state, bank details and UPI ID that you choose to print, and any logo or signature image.
- Parties — the names, phone numbers, email addresses, GSTINs, addresses, balances and groups of your customers and suppliers.
- Items — product and service names, codes, HSN/SAC codes, prices, tax rates, stock and any item photos.
- Transactions — invoices, bills, orders, estimates, challans, returns, payments, expenses, cheques and account adjustments, with their line items, amounts and any photos you attach.
- Settings — tax rates, numbering, print options, message templates, language, theme and, if you set one, the passcode lock.
- Temporary copies — when you share or print, the App writes a PDF, Excel or CSV file into its own cache so the receiving app can read it. Android clears this cache, and uninstalling removes it.
None of this is sent to us or to the providers in section 4. We cannot see it, recover it or delete it on your behalf.
2.2 Information collected automatically
- Identifiers: an anonymous Firebase user ID created on first launch (shown in Settings → About, so you can quote it to us), the Firebase installation ID and the Android advertising ID, which Google Analytics for Firebase reads. The App shows no ads.
- App activity: which screens and features you use, and events such as “invoice saved” or “language changed”. With them go counts and dates (how many parties, items and bills you have added, the days you billed, when you last billed), your business's state and type (for example “Retail”), the app language, theme and your phone's language, and yes/no flags such as whether your business profile has a GSTIN, logo or UPI ID — never the names, numbers, GSTINs, addresses or amounts themselves.
- Install source: the Google Play source or campaign that led to the install (for example “organic”).
- Diagnostics: crash reports and their logs, with the device model, Android version and app version.
- Notifications: a Firebase Cloud Messaging token and topics (app language, and whether you use the free period or SahiBill Pro), so we can send messages about the App.
- Purchases: whether you have SahiBill Pro, which plan and since when, and how much of the free period is left.
Our analytics providers may also work out an approximate location (country or city) from your IP address.
2.3 Information you send us
If you email us — for feedback, with a comment after rating the App, or to ask for a passcode recovery code — the App opens your email app with a draft that includes the app version, your phone model, Android version and your anonymous user ID. Nothing is sent until you send it. We then receive your email address and whatever you write.
2.4 What we do not collect
We do not collect your business records (section 2.1), contacts, SMS, call logs, files, precise location, or payment card, UPI PIN or bank details.
3. How we use information
| Purpose | Information used |
|---|---|
| Run the App: billing, stock, parties, reports, reminders and backups | Your business records, on your phone only |
| Provide SahiBill Pro and the free period | Purchase status from Google Play, the anonymous user ID |
| Understand how the App is used and improve it | App activity, identifiers, install source |
| Fix crashes and keep the App reliable | Diagnostics |
| Send messages about the App, such as updates and tips | Notification token and topics |
| Change App settings without an update, such as when to ask for a rating | Firebase installation ID |
| Answer your emails | What you send us |
We process personal data on the basis of your consent — given when you install the App and grant permissions — and for the legitimate uses permitted by law. You can withdraw consent at any time (see section 9).
4. Service providers and sharing
We do not sell or rent your personal data. We share it only with service providers who process it for us:
| Provider | What it does | Privacy policy |
|---|---|---|
| Google Firebase (Authentication, Analytics, Crashlytics, Cloud Messaging, Remote Config) | Anonymous sign-in, usage analytics, crash reports, notifications, remote settings | firebase.google.com/support/privacy |
| Mixpanel | Product analytics | mixpanel.com/legal/privacy-policy |
| Google Play (Billing, In-App Review, Install Referrer) | SahiBill Pro purchases, the in-app rating card, install source | policies.google.com/privacy |
We may also disclose information if required by law, to respond to lawful requests from authorities, or to protect our rights, users or the public.
Some providers may process data outside India. Where they do, it is protected by their contractual and security commitments.
5. Android permissions
| Permission | Why |
|---|---|
| Internet and network state | Analytics, crash reports, notifications, remote settings and SahiBill Pro purchases. Billing itself works without internet. |
| Notifications | Reminders, such as payments due and daily or weekly summaries, and messages from us. You can turn them off in Android Settings. |
| Run at startup | To set your reminders again after the phone restarts |
| Bluetooth (nearby devices) | Only to list your paired thermal printers and send a receipt to the one you pick |
| Camera | To scan barcodes and, if you choose, take photos of bills and items. The images stay on your phone. |
| Biometric | To unlock the App with your fingerprint if you turn the lock on. Android checks the fingerprint; the App never sees it. |
| Advertising ID | Read by Google Analytics for Firebase for analytics (see section 2.2). The App shows no ads. |
The App holds no contacts, storage or photos permission. “Pick from contacts”, and choosing a logo, a photo from your gallery, a CSV sheet or a backup, all use Android's own pickers, which hand the App only what you select. You can revoke any permission in Android Settings; only the feature that needs it stops working.
6. Sharing, printing and backups you start
These are the only ways your business records leave the phone, and each one is something you do:
- Share a PDF, Excel or CSV file — the App creates the file and opens Android's share sheet. You choose the destination app; that app's own privacy policy governs what happens next.
- WhatsApp and SMS — the App opens WhatsApp or your messages app with the party's number and a ready message. It is sent only if you send it.
- Print — through Android's print service or the Bluetooth thermal printer you pick.
- Backup and restore — to a file location you pick. If you choose a folder that belongs to a cloud service such as Google Drive, the backup is stored there under that provider's terms. The App never sees your cloud sign-in.
- UPI QR code — printed on bills when you enable it. It holds only your UPI ID, business name and the amount due, and is made on your phone.
- Imports — CSV sheets and backup files you pick are read on your phone.
Invoices, statements and reports you share contain information about you and about the party they concern. You are responsible for sending them only to people entitled to receive them.
7. How long we keep data
- Your business records stay on your phone until you delete them, clear the App's storage or uninstall it. Backups stay where you saved them and must be deleted there.
- Analytics and crash data are kept only as long as needed to improve the App, under the retention settings of the providers in section 4.
- Emails are kept as long as needed to answer you and follow up.
8. Security
Your records live in the App's private storage, and you can add a passcode or fingerprint lock in Settings. Data the App sends to the providers in section 4 is encrypted in transit (HTTPS/TLS). No method of transmission or storage is completely secure, but we take reasonable steps to protect your information. Protecting your phone with a screen lock, and keeping backups somewhere safe, is in your hands.
9. Your rights and choices
Your business records are under your control in the App: edit or delete any record, clear the App's storage, or uninstall it. For the data in sections 2.2 to 2.4, and subject to applicable law, you can:
- ask for a summary of the personal data we hold about you;
- ask us to correct or complete it;
- ask us to delete it — email auspoapps@gmail.com with the user ID from Settings → About;
- withdraw consent, by turning off notifications, uninstalling the App or writing to us;
- nominate another person to exercise these rights on your behalf;
- raise a grievance with our Grievance Officer (section 12) and, if unresolved, with the Data Protection Board of India.
You can reset the Android advertising ID or delete it in Android Settings → Privacy → Ads (on some phones, Settings → Google → Ads).
10. Children
SahiBill is a business tool meant for adults and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has used the App, contact us and we will delete the data linked to that install.
11. Changes to this policy
We may update this policy as the App changes. We will post the new version here with a new “Last updated” date and, for significant changes, tell you in the App.
12. Contact and Grievance Officer
Questions, requests or complaints about privacy:
- Email: auspoapps@gmail.com
- Grievance Officer: Auspo Apps, at the email address above
We aim to acknowledge requests within 72 hours and resolve them within 30 days.
You can also read the Terms of Service.
← Back to SahiBill