MobiKhata

Privacy Policy

Last Updated: October 29, 2026

Welcome to MobiKhata. This Privacy Policy explains what information the MobiKhata apps for Android and iPhone and the MobiKhata web app (web.mobikhata.com) collect, how it is used, who processes it, and the choices you have. MobiKhata is operated by AYYAN NOORY LLC ("we" or "us").

The Android and iPhone apps work a little differently. Where that affects your data, we say so below.

1. Information We Collect

We only collect the information MobiKhata needs to work:

  • Account information: your name, email address, profile photo (if your Google account has one) and sign-in identifiers when you sign in with Apple, Google or email. We use them to create and secure your account, sync your ledger and help you when you contact support.
  • Your ledger: parties (name and phone number), entries (amount, date, type and notes) and your business profile (business name, currency, category, phone, email and address).
  • App and device details: a random ID created when you install the app, your platform (Android or iPhone) and app version. They are attached to your requests and records so your devices sync correctly and we can see which app version you use.
  • Messages you send us: support messages and feature requests, with your email address and business name if you include them. On Android, these messages also include your device's manufacturer and model, operating system version and security update level, app version, app language, region setting and time zone, so we can find and fix your problem.
  • Diagnostics and usage: crash reports, app performance data and app usage statistics (such as app opens, screens viewed and features used), with device details such as the model and operating system version. These are not linked to your name or your ledger.
  • Advertising ID (Android only): Google Analytics for Firebase, which we use for usage statistics, may read your phone's advertising ID. MobiKhata does not show ads and does not use your advertising ID for advertising.

2. Contacts

With your permission, MobiKhata reads the contacts on your phone only to suggest names and phone numbers when you add a party. Your contact list is never uploaded.

If you choose to save a contact as a party, that party's name and phone number are stored in your ledger and uploaded to your MobiKhata account on our servers. They are used only to show that party in your ledger and keep it in sync on your devices. We never sell them or use them for advertising.

The app asks for your permission before it reads any contact. On iPhone, it first explains how contacts are used when you add a party. If you do not allow it, or later turn off Contacts access for MobiKhata in your phone's settings, the app does not read your contacts. You can still type parties in yourself. Parties you have already saved stay in your ledger until you delete them.

3. Photos, Notifications, Sharing and Device Features

  • Camera: MobiKhata does not use your camera.
  • Photos: MobiKhata does not read your photo library. On iPhone, the app saves a receipt image to your photo library only when you choose Save Image.
  • Reminders and notifications (Android): reminders you set, such as a daily reminder or a reminder about a party's balance, are scheduled on your phone. We may also send app notifications, for example about updates, through Firebase Cloud Messaging, which gives your phone a notification token. The app asks for permission before showing notifications.
  • Sharing: when you share a statement, receipt or payment reminder (for example by WhatsApp or SMS), it goes only to the app and the person you choose.
  • Web app in your browser: the web app stores your language and theme choices and a random browser ID in your browser. The browser ID is saved with each change you make on the web, so the apps can tell which device made it. If you tick “Keep me signed in on this computer”, you stay signed in after closing the browser; otherwise closing the tab or window signs you out. The web app keeps a copy of its own files so it opens quickly and can be installed, but never stores your ledger in that copy. It does not use Google Analytics.
  • Calendar: MobiKhata does not access your calendar.
  • Face ID, Touch ID and fingerprint: the optional app lock is handled by your device. MobiKhata never receives your biometric data.

4. How We Use Your Data

We use your data only to:

  • Provide your ledger and keep it backed up and in sync across your devices.
  • Keep your account secure and protect the service from abuse, including checking that requests come from the genuine MobiKhata app.
  • Find and fix crashes and performance problems.
  • Understand, in aggregate, how the app is used so we can improve it.
  • Respond to your support messages and feature requests, including by email.
  • Send the reminders and notifications you have turned on.
  • Occasionally email you about important app updates or changes to the service. Each of these emails has an unsubscribe link.

Authorized members of the MobiKhata team can view account details, ledger data and support messages in our admin system, only to provide support and run the service.

We do not sell your personal or financial data, and we do not use your ledger or contacts for advertising.

5. Where Your Data Is Stored and Who Processes It

We use these service providers to run MobiKhata:

  • Google Firebase (Authentication, Realtime Database, Crashlytics, Performance Monitoring, Analytics, Cloud Messaging, In-App Messaging, Remote Config and App Check), Google Sign-In and Sign in with Apple. Not every feature is used on every platform.
  • Google reCAPTCHA Enterprise (web app), which Firebase App Check uses to check that requests come from the genuine MobiKhata website. reCAPTCHA reads information about your browser and device and is subject to Google’s Privacy Policy and Terms of Service.
  • Hostinger, which hosts MobiKhata's own server and our email. For the Android app, this server stores your account details, ledger, business profile and support messages, and we are moving Android ledgers from Google Firebase to it. The web app uses the same server for accounts that have moved to it and for Help & Support messages.
  • Google Play (Android), for in-app updates, in-app reviews and Play Integrity checks.

These providers process data on our behalf, under their own privacy and security terms, and must protect it at least as well as this policy describes. Your data may be stored on servers outside your country.

6. Data Retention and Deletion (Apple App Store & Google Play Policy)

Your ledger is kept until you delete it or delete your account.

  • Deleting a party or entry moves it to the Recycle Bin, where you can restore it. It stays there until you restore it or use Delete Forever.
  • Delete Forever removes the item from your ledger on all your devices and removes its name, phone number, notes and amount from our servers. A small deletion record without these details stays so your other devices know to delete it too.

You can delete your account and all associated data directly in the app at any time:

  1. Open the MobiKhata app.
  2. Go to Settings.
  3. Select Delete Account.
  4. Sign in again if asked, then confirm.

Deleting your account immediately and permanently removes your account and your ledger from Google Firebase and clears your data from that device. Any remaining copies, including your data on MobiKhata's own server and your support messages, are permanently deleted within 30 days. Copies in our automatic backups are deleted when those backups expire, within 60 days. This cannot be undone.

If you cannot use the app, email support@mobikhata.com from the email address on your account to request deletion. We will reply and complete the deletion within 30 days.

Crash reports, performance data and usage statistics are kept by Google according to its retention settings and are not linked to your name or your ledger. If you unsubscribe from our emails, we keep your email address on a do-not-email list so we do not email you again.

7. Your Choices

  • Contact suggestions: do not allow Contacts access when the app asks, or turn it off at any time in your phone's settings (on iPhone: Settings › Apps › MobiKhata › Contacts; on Android: Settings › Apps › MobiKhata › Permissions › Contacts).
  • Notifications (Android): turn off reminders in the app, or turn off notifications for MobiKhata in your phone's settings.
  • Emails: use the unsubscribe link in any update email, or contact us.
  • Advertising ID (Android): reset or delete your advertising ID in your phone's settings (Settings › Privacy › Ads on most phones).
  • Your ledger: view, edit and export your records in the app at any time.
  • Deletion: delete individual records with Delete Forever, or your whole account as described above.
  • Anything else: contact us and we will help.

8. Data Security

Your data is encrypted in transit between the app and our servers. Google Firebase also encrypts data at rest. Security rules let only your signed-in account read or change your ledger in Firebase, and our own server accepts requests only from your signed-in account in the genuine MobiKhata apps and website. On a shared computer, leave “Keep me signed in” unticked and sign out of the web app when you finish. Only authorized team members can use our admin system. You can also lock the app with Face ID, Touch ID or your fingerprint. No system is perfectly secure, but we work to protect your data.

9. Children's Privacy

Our Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions or requests about your privacy, contact us at support@mobikhata.com.