Last updated: [DATE]
HisabBox ("the App") is operated by ArthaIQ, 190 Pragati Nagar, Indore, Madhya Pradesh 452012, India ("we", "us"). This policy explains what the App reads, what it stores, and your rights under India's Digital Personal Data Protection Act, 2023.
1. Notification access — what we read
HisabBox needs Android's Notification Access permission. This is its core function: it reads payment-received notifications from UPI apps (such as Google Pay, PhonePe, Paytm, BHIM and Amazon Pay) and announces the amount out loud.
- We only process notifications that look like UPI payment alerts. Other notifications (chats, OTPs, emails) are ignored and not stored.
- From a payment alert we read: amount, payer name (if shown), source app and time.
- We never ask for or access your UPI PIN, OTP, bank login, card details or account balance. We cannot move money.
2. Data we collect
| Data | Why | Where it is kept |
|---|---|---|
| Payment alert details (amount, payer name, app, time) | Voice announcement and daily collection summary | [On your phone only / On ArthaIQ servers — CONFIRM] |
| Phone number or email (if you sign in) | Account and support | [CONFIRM] |
| Subscription status | Unlock paid features | Google Play and [CONFIRM] |
| Device model, Android version, crash logs | Fix bugs, keep the App working | [Analytics/crash tool — CONFIRM] |
We do not sell your data. We do not use payment data for advertising.
3. Payments
Subscriptions are billed by Google Play. We never see your card or UPI details used to pay for HisabBox; we only receive your subscription status from Google.
4. Sharing
We share data only with service providers who help run the App (hosting, crash reporting, Google Play billing), under contract, and when required by Indian law or a valid order from authorities.
5. Retention
Payment history is kept for [X days / until you delete it]. If you uninstall the App or delete your account, we delete your data within [30] days, except where law requires us to keep it.
6. Your rights
Under the DPDP Act, 2023 you can ask to access, correct or erase your personal data, withdraw consent, and raise a grievance. You can withdraw consent at any time by turning off Notification Access in Android settings or uninstalling the App. Write to support@hisabbox.app and we will respond within [30] days.
7. Security
Data is [encrypted on the device / encrypted in transit and at rest — CONFIRM]. No system is perfectly secure, but we take reasonable safeguards.
8. Children
HisabBox is for business owners aged 18 and above. We do not knowingly collect data from children.
9. Changes
We will post updates on this page and change the date above. Major changes will be shown in the App.
10. Grievance Officer
[NAME], Grievance Officer, ArthaIQ, 190 Pragati Nagar, Indore, Madhya Pradesh 452012. Email: support@hisabbox.app. Phone: +91 79745 54602.