Privacy Policy
Effective date: August 14, 2026
EKhata4U (“we”, “us”, or “our”) operates ekhata4u.com (the “Site”), our cloud-based ledger and accounting platform (the “Service”), and the eKhata4U mobile application for Android and iOS (the “App”).
This Privacy Policy explains how we collect, use, store, share, and protect personal and business information when you use the Site, the Service, or the App.
By using the Site, Service, or App, you agree to this Privacy Policy.
1. Information We Collect
1.1 Account and profile information
When you register or sign in, we may collect:
- Full name
- Email address
- Mobile phone number
- Username
- Password (stored securely; we do not store plain-text passwords)
- Tenant, branch/location, role, and permission details assigned to your account
1.2 Business and financial information
Because eKhata4U is an accounting and ERP platform, we process business data you enter, view, or manage through the Service or App, including for example:
- Customers and suppliers
- Sales, purchases, trades, and returns
- Payments, receipts, expenses, and account balances
- Inventory and stock information
- Reports, invoices, and related business documents
This information belongs to you or your organization. We process it only to provide the Service.
1.3 Usage and technical information
When you use the Site, Service, or App, we may collect:
- Login and authentication activity
- IP address
- Date and time of access
- Features, pages, screens, or API endpoints used
- Device or browser type, operating system, and app version
- Error, security, and audit logs needed to operate and protect the Service
1.4 Mobile app–specific information
When you use the App, we may also collect or generate:
- A device identifier created by the App to manage sign-in sessions across devices and allow session revocation
- Language preference stored on your device
- Authentication tokens and session details needed to keep you signed in
- Temporary files created when you generate or export reports before you choose to share or open them
The App does not collect GPS location, contacts, photos, camera data, microphone audio, or SMS content.
1.5 WhatsApp and contact information
We collect WhatsApp or contact details only if you choose to opt in to receive messages from us through the Service. The App does not automatically access your phone contacts or send WhatsApp messages on your behalf.
If you use your device’s share feature to send a report (for example to WhatsApp or email), that sharing is initiated by you through your device and is not automatic data collection by us.
2. How We Use Your Data
We use collected information to:
- Provide, operate, maintain, and improve the Site, Service, and App
- Authenticate users and manage secure sessions
- Process and display your business and accounting data
- Generate reports, invoices, and other documents you request
- Send transactional messages such as account notifications or invoices, where applicable
- Respond to support requests and troubleshoot issues
- Monitor security, prevent fraud or abuse, and enforce our terms
- Comply with legal obligations
We do not use your business data for unrelated advertising profiling.
3. Information Stored on Your Device (Mobile App)
The App may store the following locally on your device until you log out, uninstall the App, or the data expires:
- Access and refresh authentication tokens (stored using secure device storage where supported)
- Session details such as tenant, location, permissions, and active POS shift
- Language preference
- A device identifier used for session management
- Temporary report files in app cache when you generate or export reports
We recommend logging out on shared devices and keeping your device secure with a screen lock.
4. How We Share Information
We do not sell or rent your personal information.
We may share information only with:
- Service providers who help us operate the Service (for example hosting, infrastructure, email, SMS, or WhatsApp delivery providers), under confidentiality and data-protection obligations
- Your organization’s authorized users, according to roles and permissions configured in your account
- Legal or regulatory authorities, if required by law, court order, or to protect our rights, users, or the public
- Business transfers, such as a merger or acquisition, with appropriate safeguards
Any report or document you share from the App using your device’s share menu is shared by you with the recipient you choose.
5. Cookies and Website Tracking
The Site may use cookies and similar technologies, and may use analytics tools (for example Google Analytics), to understand usage trends and improve the website. Where used, analytics data is handled in accordance with our analytics provider settings and applicable law.
The App does not use browser cookies and does not include third-party advertising or analytics SDKs in the current version.
6. Data Security
We use recognized industry practices to protect information, including:
- Encrypted communication (HTTPS/TLS) between the App and our servers
- Secure authentication and access controls
- Restricted internal access on a need-to-know basis
- Secure backups and monitoring
No method of transmission or storage is completely secure. You are responsible for keeping your login credentials confidential.
7. Data Retention
We retain information for as long as needed to:
- Provide the Service
- Meet legal, tax, and accounting obligations
- Resolve disputes and enforce agreements
When data is no longer required, we delete or anonymize it in accordance with our retention practices, unless law requires longer retention.
To submit deletion request a request visit https://app.ekhata4u.com/delete-account or contact our team via email at privacy@ekhata4u.com.
Information stored locally on your device remains until you log out, clear app data, or uninstall the App.
8. Your Rights and Choices
Depending on applicable law, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of personal information, subject to legal and contractual limits
- Withdraw consent where processing is based on consent
- Object to or restrict certain processing
To make a request, contact: privacy@ekhata4u.com
We may need to verify your identity before responding. Business records controlled by your organization may need to be handled through your account administrator.
9. International Transfers
Our servers or service providers may be located outside Pakistan. If your information is transferred internationally, we take reasonable steps to ensure appropriate safeguards consistent with applicable data-protection requirements.
10. Children’s Privacy
The Service and App are intended for business use and are not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children.
11. Policy Updates
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the Site, Service, or App after changes means you accept the updated policy.
12. Contact Us
For privacy questions or requests:
Email: privacy@ekhata4u.com
Website: https://ekhata4u.com
Google Play Data Safety (reference)
| Data type | Collected? | Notes |
|---|---|---|
| Name, email | Yes | Account login / profile |
| Financial info | Yes | Business transactions, balances, ERP records |
| App activity | Yes | Auth and API usage (server-side) |
| Device or other IDs | Yes | App-generated device ID for sessions |
| Location (precise) | No | App does not use GPS |
| Contacts | No | Not accessed by the App |
| Photos / files | No | Only temporary report files you generate |
| Shared with third parties | Limited | Hosting/infrastructure providers only |
| Encrypted in transit | Yes | HTTPS |
| Users can request deletion | Yes | privacy@ekhata4u.com |