Privacy Policy

Last updated: July 7, 2026

Khata (“Khata”, “we”, “us”) is an independently developed app that helps business owners track credit they extend to their customers - recording what's owed, logging payments, and keeping accounts organized. Khata is developed and operated by an individual developer (App Store Connect account: Srimanth Reddy). This policy explains what information Khata collects, how it's used, where it's stored, and the rights you have over it.

Khata does not issue credit, approve loan applications, or move money on its own. It is a record-keeping tool: it stores the entries you and your team make, and helps you keep track of them.

The roles we play

Under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), it matters whose data is being processed and who decides how:

Your account data (your name, phone/email, login credentials, business details) - Khata is the Data Fiduciary, responsible for this policy and how that data is handled.
Your customers' ledger data (the khata entries you create for the people you extend credit to) - you are the Data Fiduciary for that data, since you decide what to record and why. Khata acts as a Data Processor, storing and processing it on your behalf, under your instructions.

In other words: you're responsible for having the right to record information about your own customers in your khata; we're responsible for keeping that data secure and only using it to provide the app to you.

Information we collect

Account & business information

When you sign up, we collect the information needed to create your account and run your business on Khata: your name, phone number and/or email address, a password (stored in hashed form, never in plain text), and any business details you choose to add (business name, type of business, etc.).

Customer ledger data

The core of the app: entries you make about your customers, including customer name and contact details, amounts owed, payment history, due dates, notes, and any adjustments (waivers, additional charges) along with the record of who made each change and when.

Team & staff information

If you give your staff or field collectors access, we store their name, contact details, login credentials, the area or accounts they're assigned to, and the collection actions they log in the app. Khata does not collect or track GPS location of any user, staff member, or field collector. Area assignment is a manual field you set, not a location tracked by the app.

Payment records

When you log a payment as cash, UPI, or bank transfer, we store the amount, method, and date you record. Khata does not process payments, connect to your bank account or UPI handle, or handle card details - it only stores the record you manually enter that a payment took place.

Support communications

If you email us at admin@getkhata.app, we keep that correspondence to respond to you and resolve your request.

Technical & log data

Our servers automatically log standard technical information (such as IP address, device/OS type, and request timestamps) for security, abuse prevention, and keeping the service running reliably.

What we don't do

We don't track or collect GPS/location data from any user.
We don't use third-party analytics, advertising, or crash-reporting SDKs. If push notifications are used to remind you of a due date, they're delivered through the standard notification services provided by Apple and Google (APNs/FCM) - this is a basic requirement of any mobile app and isn't used for advertising or tracking.
We don't sell personal data, to anyone, ever.
We don't access your bank accounts, cards, or UPI apps, and we don't move money.

How we use information

To provide the core app functionality: ledgers, dashboards, and reminders.
To operate staff/team accounts and role-based access you configure.
To send notifications about upcoming or overdue payments.
To maintain an audit trail of edits (waivers, charges) for your own records.
To respond to support requests.
To maintain the security and integrity of the service.

Legal basis for processing

We process your account information on the basis of your consent, given when you create an account and agree to this policy. Customer ledger data is processed on your instructions, as the business owner who controls that data.

Sharing & disclosure

We don't share personal data with third parties for their own marketing or advertising purposes. Data may be disclosed to:

Our infrastructure provider (see “Where your data is stored” below), who processes data only to host and run the app.
Team members you've given access to within your own business account, according to the role and area you assign them.
Law enforcement or regulators, only where legally required.

Where your data is stored

Khata's data is hosted on Amazon Web Services (AWS) in the ap-south-1 (Mumbai, India) region. Your data is stored within India and is not routinely transferred outside the country.

Data retention

We retain your data for as long as your account is active. If you close your account or request deletion, we delete or anonymize your data within a reasonable period, except where we're required to retain certain records for legal or tax purposes.

Your rights

As a Data Principal under the DPDP Act, you have the right to:

Access the personal data we hold about you.
Correct or update inaccurate or incomplete data.
Request erasure of your data, subject to any legal retention requirements.
Withdraw consent at any time (this may limit or end your use of the app).
Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
Lodge a grievance with our Grievance Officer (see below).

To exercise any of these rights, including requesting deletion of your account or data, email us at admin@getkhata.app. We currently handle deletion requests manually via support email.

Children's privacy

Khata is intended for business owners aged 18 and over and is not directed at children. We don't knowingly collect account data from children. Any information about a business owner's own customers, including minors, is entered and controlled by that business owner, who is responsible for having the right to record it.

Security

We use industry-standard measures to protect your data, including encrypted data transmission (HTTPS/TLS) and access controls that limit who can view or modify data within the app. No method of transmission or storage is 100% secure, but we work to protect your information to the best of our ability.

Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you through the app.

Grievance Officer & contact

For any questions, requests, or grievances relating to this policy or your data:

Srimanth Reddy
Email: admin@getkhata.app

Governing law

This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023.