Privacy Policy

Effective Date: October 24, 2026

1. Introduction

RepairKhata ("we", "our", or "us"), operated by Tapas Dutta, is a job-card, stock and accounts app for repair shops, available on Android phones and as a Windows desktop app. This Privacy Policy explains what information the app handles, where it is kept, and the choices you have.

In short: RepairKhata works offline first. Everything you enter is saved on your own device. Your data reaches our server only if you choose the paid Online plan (staff login and sync between devices). Backups go to your own Google Drive, only if you turn them on.

2. Information You Enter

The app stores what you type or capture, so you can run your shop:

• Shop details: shop name, owner name, phone number, address, logo, tax registration number (for example GSTIN) and UPI ID.
• Customers: names, phone numbers, area, notes and tax number.
• Devices and jobs: device type, brand, model, IMEI / serial / registration number, reported fault, condition, accessories, estimates, diagnosis, promised dates and status history.
• Device unlock codes: only if you record one. It is kept encrypted on the device that recorded it, is never sent to our server, and is deleted automatically when the job is closed.
• Photos, signatures and voice notes you take of a device or a hand-over. They stay on the device that captured them.
• Money records: payments, refunds, expenses, counter sales, tax invoices, parts and stock, vendors, technicians and their pay.

You decide what to enter. Your customers' details are entered by you, about your own customers; you are responsible for having their consent where your local law requires it.

3. Where Your Data Is Kept

• On your device (free app): in a local database inside the app. Nothing is sent to us.
• Your Google Drive (optional backup): if you connect Google Drive, the app saves backups to a hidden app folder in your Drive account. We cannot see them. You can disconnect at any time from the app.
• Our server (Online plan only): if you take your shop online, the shop's records listed in section 2 (except unlock codes, photos, signatures and voice notes) are copied to our server so your other phones and computers stay in sync. Your Google account name and email are stored to sign you and your staff in.
• Files you share: when you share a job card, receipt, invoice or statement (for example on WhatsApp) or export a CSV file, that file goes where you send it.

4. The Online Plan

• Sign-in: you sign in with your Google account. We receive your name, email address and a Google account identifier.
• Staff: the shop owner can invite staff by their Gmail address and give each a role (owner, manager, technician or counter). Each role sees only part of the shop's records — for example, technicians do not receive payments or expenses.
• Sync: changes made on any device of the shop are sent to our server and on to the shop's other devices. Each device keeps working offline and syncs later.
• Subscription: the plan is bought through Google Play. Our server checks the purchase with Google Play to confirm it; we never see or store your card or bank details.
• Stopping: if you stop syncing or the plan ends, syncing stops and all data already on your devices stays there.

5. How We Use Information

• To run the features you use: job cards, bills, reports, reminders, backup and sync.
• For the Online plan: to sign you in, keep your shop's devices in sync, apply staff roles and check your subscription.
• To answer your support requests.

We do not sell your data, we do not show ads, and we do not use your shop's records for advertising or profiling.

6. Permissions the App Asks For

• Camera: device photos and scanning IMEI / serial barcodes.
• Microphone: voice notes about a fault, only while you record.
• Bluetooth (and location on Android 11 and older): only to find and use a receipt printer. Location is not collected.
• Notifications: your daily reminder of jobs due and devices ready.
• Biometrics: optional fingerprint or face unlock for the app lock; checked by your phone, never sent anywhere.

7. Security

• All traffic to our server is encrypted (HTTPS/TLS).
• Sign-in uses short-lived access tokens; refresh tokens are stored only as a secure hash on the server and encrypted on your device.
• The optional app PIN is stored only as a strong one-way hash on your device.
• Unlock codes are encrypted with your device's secure key store.

8. Third-Party Services

• Google Sign-In and Google Drive (only if you use them) — see Google's Privacy Policy.
• Google Play Billing for Pro and Online plan purchases.
• Cloud hosting for the Online plan server.
• WhatsApp and other apps you choose to share files with.

These services have their own privacy policies.

9. Your Rights

Wherever you live, you can:

• Access and export your data — it is on your device, and you can export it as CSV files or a backup at any time.
• Correct any record in the app.
• Delete your data: delete records in the app, use "Delete all data" in the app, and for the Online plan delete your online account (see https://repairkhata.duttatech.in/delete-account).
• Complain to us, and to your local data-protection authority where one exists. In India this includes your rights under the Digital Personal Data Protection Act, 2023, including nominating another person to exercise them.

To exercise any of these rights, contact us at tapasdutta@outlook.com.

10. Data Retention

Data on your device stays until you delete it or uninstall the app. Online plan data stays on our server while your shop is online. When you delete your online account, your sign-in and the shops you own (with all their synced data and purchase records) are deleted from our server straight away; nightly server backups that may still contain them are deleted within 14 days. In shops where you were staff, the owner's staff list keeps only a note that your access was removed. Requests by email are completed within 7 days. Records may be kept longer only where the law requires it.

11. International Use

RepairKhata is offered in several countries. If you use the Online plan, your shop's synced data is stored on servers that may be outside your country. We protect it as described in this policy wherever it is stored.

12. Children's Privacy

RepairKhata is a business app and is not intended for anyone under 18. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this policy. Significant changes will be shown in the app or on this page with a new effective date. Continuing to use the app after a change means you accept the updated policy.

14. Contact Us

• Email: tapasdutta@outlook.com
• Publisher: Tapas Dutta