Effective date: 6 September 2026 · Last updated: 6 September 2026
Applies to the Android application com.managedukaan.app
In short: ManageDukaan is a cloud-synced app. Your shop data is stored on your device and also on Google Firebase servers so it syncs across your devices and your shop staff. We do not sell your data, we do not show ads, and we do not use advertising identifiers. We do use Google's standard app analytics to understand app stability and usage.
ManageDukaan ("we", "our", "us") provides a point-of-sale, inventory and credit-ledger (khata) application for small retail shops. This policy explains what information the app handles, why, and what choices you have. It applies to the ManageDukaan Android app and the backend services that support it.
You sign in with your mobile number. We collect and store:
Phone verification is performed by Google Firebase Authentication. Delivery of the one-time code involves your mobile network operator.
Data you enter while running your shop, including: shop name and owner contact number, product catalogue and prices, stock and purchase records, supplier details, sales transactions, payment records, and credit (khata) balances.
To run a credit ledger you may record a customer's name, an optional phone number, and free-text notes. To share a shop you may add staff members by name, phone number and role.
Your responsibility: these are other people's personal details. By entering them you confirm you have a lawful basis to do so, and you are responsible for how you use them — for example when sending a payment reminder. We process this information on your behalf.
If you tap "From Contacts" when adding a customer, the app asks for contacts permission and opens your phone's system contact picker. Only the single contact you choose is read, and only that contact's name and phone number. The app does not read, upload or index your contact list in bulk. If you decline the permission, you can still add customers by typing their details.
The app includes Google Firebase Analytics, which automatically collects standard app events (such as first open, session and screen activity), basic device and app-version information, and a Firebase app instance identifier. This is used to understand stability and feature usage in aggregate.
We do not use the Android Advertising ID. The AD_ID permission is
explicitly removed from the app and advertising-ID collection is disabled in the app's
configuration. We serve no advertising.
The app requests Bluetooth permissions to connect to thermal receipt printers and barcode scanners. On older Android versions the operating system requires a location permission in order to scan for nearby Bluetooth devices. We do not collect, use, store or infer your location.
ManageDukaan is offline-first: your data is written to local storage on your device so the app works without a network connection. The same data is synchronised to Google Firebase (Cloud Firestore, Firebase Storage and Firebase Authentication), operated by Google LLC, so that it is backed up and available on your other devices and to staff you have added to your shop. Data in transit is encrypted using HTTPS/TLS, and is encrypted at rest by Google Cloud. Access is restricted by security rules to your own shop account.
This means your data may be stored and processed on servers outside your country.
| Service | What it receives | Why |
|---|---|---|
| Google Firebase (Auth, Firestore, Storage, Analytics) | Account details, shop and business data, attached images, analytics events | Authentication, cloud sync, backup, app diagnostics |
| Google Gemini via Firebase AI Logic | The receipt image you scan, when you use that feature | Extracting line items from a purchase receipt |
| Open Food Facts (openfoodfacts.org) | The product barcode number only | Looking up a product name and image when you scan a barcode |
| Your mobile network operator | Your phone number | Delivering the one-time sign-in code by SMS |
These providers process data on our instructions in order to deliver the app. We do not sell your data, and we do not share it with advertisers, data brokers or for any advertising or profiling purpose. We may disclose information if required by law.
We do not use your shop's business records to build advertising profiles.
We keep your data for as long as your account is active, so your records remain available to you. Deleted records are retained briefly as deletion markers so the deletion propagates to your other devices, and are then purged. If you ask us to delete your account, see section 7.
Within the app you can view, edit, export (CSV / backup file) and delete individual records at any time.
To delete your account and all associated data, email support@managedukaan.com from your registered address, or include your registered mobile number, with the subject "Delete my ManageDukaan account". We will verify the request and delete your account, your shop records, and any uploaded images. We aim to complete this within 30 days.
You may also request a copy of your data, correction of inaccurate data, or withdrawal of consent (by discontinuing use and requesting deletion) using the same address.
Uninstalling the app removes the local copy from your device but does not delete data already synced to the cloud — use the deletion request above for that.
ManageDukaan is a business tool intended for shop owners and their staff. It is not directed at children, and we do not knowingly collect data from children under 13.
We rely on Google Firebase's encryption in transit and at rest, and on server-side security rules that restrict each shop's data to its authorised members. No system is perfectly secure; please keep your device and your sign-in number secure, and remove staff members who should no longer have access.
We may update this policy as the app changes. The effective date at the top will be updated, and material changes will be reflected here before they take effect.
For any privacy question, data request or grievance: support@managedukaan.com. We aim to respond within 7 days, in line with applicable Indian grievance-redressal expectations.