Overview, Scope & Identity
FixCorp ("we", "our", "us") operates the DhanLaxmi Khata & Billing mobile application (Package Name: com.dhanlaxmi.khatabilling.vtrwnq) and associated cloud services at dhanlaxmi.fixcorp.in.
This Privacy Policy is designed to comply with the Google Play Developer Program Policies (specifically the User Data Policy, Financial Services Policy, and Account Deletion Policy) as well as the Digital Personal Data Protection (DPDP) Act of India and global data protection standards.
We practice strict data minimization. We do NOT sell, rent, or trade your personal or business ledger records to third-party data brokers, marketing agencies, or credit lending institutions.
Google Play Data Safety Disclosures
In compliance with Google Play's Data Safety declaration, the table below provides a full breakdown of the data types processed, their purpose, and encryption standards:
| Data Category | Specific Data | Primary Purpose | Shared with 3rd Party? | Encrypted in Transit? |
|---|---|---|---|---|
| Personal Information | Business Name, Merchant Name, Email Address, Mobile Number | Account Registration, Secure Login, OTP Password Reset, Service Communications | No (Private to Account) | Yes (TLS 1.3) |
| Financial & Invoicing Info | Invoice records, GST numbers, Udhaar/Jama balances, Google Play Purchase Tokens | App Core Functionality, Accounting, PRO Subscription verification via Google Play Billing | No (Google Play Billing processes payments directly) | Yes (TLS 1.3) |
| Device & Other Identifiers | Google Advertising ID (AAID), FCM Token | Contextual Advertisements (Free Tier only via Google AdMob), Cloud Push Notifications | Yes (Google AdMob SDK on Free Tier only) | Yes (HTTPS) |
| Photos & Camera | Camera stream frames | Real-time Barcode scanning & UPI QR scanning (Processed transiently on-device) | No (Never saved or transmitted) | N/A (Transient on-device) |
Offline-First Local Storage (Kept Securely On-Device)
DhanLaxmi is engineered with an Offline-First architecture. Your day-to-day operational business records are stored locally in your device's isolated SQLite (Room) database and are never accessible to FixCorp or external parties without your explicit cloud backup trigger:
* Secondary staff 4-digit security PINs are hashed using cryptographic SHA-256 one-way hashing locally on your device and are never stored in plain text.
Cloud Synchronization & Google Firebase
To facilitate secure account login, multi-device backup sync, and PRO subscription status verification, we store limited, encrypted account metadata on Google Firebase Cloud Firestore:
- Merchant Profile: Registered Shopkeeper Name, Shop Name, Registered Email Address, and Phone Number.
- Subscription Status: Current Plan Tier (Free, PRO, Enterprise), activation date, expiration timestamp, and Google Play purchase token.
- Encrypted Cloud Backups: If you explicitly trigger cloud backup synchronization, your compressed backup data is encrypted and transferred via TLS 1.3 directly to your authenticated Firebase cloud repository.
Device Hardware Permissions & Strict Usage Rationale
DhanLaxmi requests only system permissions strictly required for essential business billing and inventory features:
android.permission.CAMERA)
Used strictly in real time for barcode and QR code scanning during billing and product inventory management. Camera video frames are analyzed locally on-device and instantly discarded. No photos, videos, or camera data are ever stored or uploaded.
android.permission.USE_BIOMETRIC)
Used locally via the standard Android BiometricPrompt framework when you enable "App Lock" to protect your business records from unauthorized physical access. Biometric data is processed solely by your device's secure hardware chip and never leaves the device.
BLUETOOTH_CONNECT / BLUETOOTH_SCAN)
Required solely to discover, pair with, and transmit ESC/POS print commands to wireless 58mm / 80mm thermal receipt printers for on-the-spot bill generation. No personal data is transmitted over Bluetooth.
Used to save exported PDF invoices, Excel spreadsheets, 2-sided digital visiting card images, and encrypted JSON database backup files to your device's Download directory.
android.permission.INTERNET)
Required to authenticate your Firebase account, verify Google Play PRO subscription status, perform cloud backup sync, send OTP password reset codes, and load contextual advertisements on the Free tier.
Third-Party Service Providers & Advertising
We partner only with industry-leading technology providers who adhere to the highest global security and privacy certifications:
- Google Play In-App Billing: Handles all subscription payments securely. We never receive or store your credit card, debit card, or net banking credentials.
- Google Firebase (Alphabet Inc.): Provides encrypted cloud database hosting, identity authentication, and crash analytics.
- Google AdMob: Delivers non-intrusive contextual ads exclusively to Free Tier users. Subscribed PRO members enjoy a 100% ad-free experience. You can reset or opt out of personalized ads via your device's Settings > Google > Ads.
Account Deletion & Right to Erasure (DPDP Act & Google Play Policy)
In compliance with the Google Play User Data Account Deletion Mandate and the Digital Personal Data Protection (DPDP) Act of India, you have the absolute right to have your account and all associated cloud data permanently deleted at any time:
Open Business > Account Login > Danger Zone, tap "Permanently Delete My Account", and confirm your registered email address. Your cloud account, authentication credentials, and synchronized backup data will be immediately and irreversibly purged from our servers.
You can initiate account deletion online anytime by visiting our dedicated deletion portal at fixcorp.in/account-deletion or dhanlaxmi.fixcorp.in/account-deletion.html.
Send an email from your registered email address to dhanlaxmifixcorp@gmail.com with the subject line "Delete My DhanLaxmi Account". All associated cloud records will be permanently deleted within 48 business hours.
Uninstalling the app or selecting "Clear Storage / Clear Data" in Android App Settings instantly deletes your local SQLite database, cache, and preferences.
Children's Privacy (COPPA & Families Policy)
DhanLaxmi Khata & Billing is designed and intended exclusively for merchants, retailers, small business owners, and commercial professionals.
Our services are not directed to children under the age of 13 (or under 18 in jurisdictions where consent is required). We do not knowingly collect, solicit, or process personal data from children. If we become aware that personal information from a child has been collected without verified parental consent, we will promptly delete that information from our servers. If you believe a child has provided us with personal information, please contact us at dhanlaxmifixcorp@gmail.com.
Data Retention & Security Standards
We retain your personal account metadata only as long as your account remains active. Upon your deletion request, your cloud data is permanently destroyed within 48 business hours. We maintain the following technical safeguards:
- All communications between the DhanLaxmi app and cloud servers are strictly encrypted using TLS 1.3 encryption over HTTPS.
- On Android, your local database is protected by Android's application sandboxing, isolating your records from other installed applications.
- Optional App Lock with biometric hardware protection prevents unauthorized physical access to your records.
Grievance Officer & Contact Information
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, FixCorp has appointed a dedicated Grievance Officer for privacy and data protection matters: