KharchaOS Privacy Notice
This notice describes what the KharchaOS Android app collects, why, and who it is shared with. It supplements our company-wide Singnet Privacy Policy, which covers security, your rights, retention, international transfers and contact details — please read both together.
KharchaOS records personal income and expenses, money you lend to or borrow from people you know, shared group expenses, budgets, and the accounts you pay from. Because lending and group expenses involve another person, some of what you enter is visible to them. That is described in detail below.
What KharchaOS collects
| Category | Examples | Why |
|---|---|---|
| Account & identity | Email address or mobile number, password (stored only as a salted BCrypt hash), display name if you set one | To create and secure your account and sign you in |
| Money you record | Amounts, type (expense, income, transfer), category, date, and any note you write | The core purpose of the app |
| Payment sources | The label you give an account (e.g. “HDFC”, “GPay”), its type, and the balance you enter | So spending can be attributed to an account and balances kept |
| People you add | The name you give them, and their email or phone number if you choose to add one | To record who a loan or a shared expense involves |
| Loans & settlements | Amount, direction (lent or borrowed), date, note, repayments, and whether the other person confirmed or declined, including any reason they gave | To track what is owed and keep both people's records consistent |
| Groups | Group name, its members, shared expenses, how each expense was split, and settlements | To divide shared costs and show who owes whom |
| Invite code | A short code generated for your account, shareable as a link | So someone can add you without you exchanging contact details |
| Technical | IP address, app version, request logs with timestamps, error diagnostics | Security, abuse prevention and reliability |
| Notifications | A device notification token (from Google Firebase Cloud Messaging) | To send the reminders you enable; kept only while notifications are on |
| Advertising | Your device's advertising identifier and ad-interaction data, collected by Google AdMob | To show and measure the single banner ad — see Advertising |
Information about other people
When you add someone to KharchaOS, you type their details yourself — the app does not read your device's contact list and asks for no contacts permission. Only a name is required. An email or phone number is optional, and is used for one purpose: to recognise whether that person already has a KharchaOS account.
Please add only details you are comfortable storing on our servers, and only for people who would reasonably expect you to. You remain responsible for what you enter about others.
What other users can see
KharchaOS is shared by design. When another person is involved in a record, these things become visible to them:
| When you… | They see… |
|---|---|
| Add someone using their invite code | You are added to each other's lists. They see the name, email or phone on your account. |
| Record a loan with someone who has an account | They receive a request showing your name, the amount and your note, and can confirm or decline it. Once confirmed, the loan appears in their app too, and repayments recorded by either of you update both copies. |
| Decline a request | The reason you give, if any, is shown to the person who raised it. |
| Add someone to a group | Group members see each other's names and initials, and every expense and split in that group. They do not see each other's email addresses, phone numbers or invite codes. |
| Settle up in a group | The other person receives a request with the amount and your name, to confirm or decline. |
Records involving someone with no KharchaOS account stay entirely private to you — there is nobody to share them with, and no message is sent to them.
What KharchaOS does not do
The app requests only the permissions it needs: internet access; notifications, to send you the reminders you enable; running after device restart, to reschedule those reminders; and — through the Google AdMob advertising component — access to your device's advertising identifier (see Advertising). It does not connect to your bank or any payment provider, does not read SMS or call logs, and does not access your location, camera, microphone, photos, or device contacts. It stores no card numbers, bank account numbers, UPI PINs or CVVs — a “payment source” in KharchaOS is only a label and a balance you typed. No payment is ever taken or moved by this app.
Who we share data with
Beyond the other users described above, we share data only with the providers needed to operate the service: hosting, email delivery for one-time passcodes, CDN/security, and — for the banner ad — Google AdMob (see Advertising). The full list is in the company policy. We never sell your data, and we never share the money you record, your balances, your loans, or your contacts’ details with advertisers or data brokers.
Advertising
KharchaOS is free and shows a single banner ad (currently on the Home screen), served through Google AdMob. To request and measure that ad, the AdMob component collects your device’s advertising identifier along with ad-interaction and diagnostic information, and shares it with Google, which acts as an independent controller of that data under Google’s Privacy & Terms. We do not give Google — or any advertiser — the money you record, your balances, your loans, groups, or the people you add.
You control the advertising identifier from your device: Settings → Privacy → Ads (wording varies by device) lets you reset it or opt out of ad personalisation, and where the law requires it we ask for your consent before showing personalised ads. The ad is the only third-party tracking in the app; there is no cross-app profiling by us.
Children
KharchaOS is not directed at children under 13, and we do not knowingly collect their personal data.
Security, your rights, retention & contact
These apply across all Singnet products and are described in the company Privacy Policy. To exercise your rights or request deletion, email support@mail.singnet.in — or see how to delete your account.
One consequence of the shared features is worth stating plainly: if you delete your account, records the other person created in their own app — their copy of a confirmed loan, or a group expense they entered — remain theirs and are not deleted with yours.