- Everything you enter (bills, customers, photos, rates) is stored on your own device.
- There is no server of ours that receives your shop or customer data. The app has no analytics, advertising or tracking cookies.
- Google Drive is optional. If you connect it, the app can only see and create its own files (bill PDFs, reports, and encrypted backups with their records PDFs) in your Drive, and nothing else.
Who we are
This policy covers the Shri Krishna Jewellers app, a billing and record-keeping app for the Shri Krishna Jewellers shop, available at https://skj2.pages.dev and as an Android app. Questions about this policy: pushkargoyal24@gmail.com.
Information stored on your device
The app keeps its data in your browser's storage (IndexedDB) on the phone or computer you use, or in the Android app's storage. It includes:
- Owner login: your username. The password, PIN and recovery code are kept only as salted PBKDF2 hashes, never in readable form. If you turn on fingerprint or face unlock, the app stores only an ID for a credential held by your device's screen lock; your fingerprint or face data never reaches the app.
- Shop profile: shop name, address, contact number, invoice text and logo.
- Customers and bills: customer names and contact numbers, bill items, weights, purities, rates, making charges, totals, payment status, payments received and notes, and photos you attach to items. Unfinished bills are kept as drafts.
- Rates: gold and silver rates and their history.
- Settings: making-charge defaults, item name suggestions, theme and the last screen you opened.
- Google Drive, if you connect it: whether and when it was connected, the IDs of the app's Drive folders, copies of PDFs and backups waiting to upload, and a log of past backups.
This data stays on the device until you delete it. Settings → Data & backup → Erase all data removes everything. Clearing the browser's data for the app's address, or uninstalling the Android app, also deletes it, so take backups.
Backups and files you create
- Encrypted backups contain all of the data above and are encrypted with AES-GCM using a password you choose. Without that password the file cannot be opened. If you turn on automatic Drive backups, that backup password is kept on the device so backups can run without asking.
- Records PDF: with every backup the app also makes a readable PDF of all completed bills (dates, invoice numbers, customer names and amounts). This PDF is not encrypted. It waits in the app's upload queue on the device and is uploaded next to the backup when Google Drive is connected.
- PDF invoices, reports and Excel/CSV exports contain the customer and bill details shown in them. You decide where they go: saved on the device, shared through your phone's share sheet (for example to WhatsApp), or uploaded to your Google Drive.
Google Drive and your Google account
Connecting Google Drive is optional. The app works fully without it.
What the app asks for
Only the https://www.googleapis.com/auth/drive.file permission. It lets the app see and manage only the files and folders it creates itself. The app cannot see, read, change or delete any other file in your Google Drive.
What the app does with it
- Creates a Shri Krishna Jewellers folder with Customer Bills, Daily Reports and Database Backups inside it, and uploads bill PDFs, report PDFs, and encrypted backups with their records PDFs there.
- When you unlock the app while Drive is connected, it uploads files waiting in its upload queue and, if you turned on daily backups, that day's encrypted backup.
- Does not read your name, email address or any other details of your Google account. The app only shows whether Drive is connected.
- The access token Google issues is kept only in the app's memory while it is open and is used only to talk to Google Drive. It is never saved or sent anywhere else.
What the app does not do
Your Google data is not sent to us or to anyone else, is not sold, is not used for advertising, and is not used to train AI models. The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting
Use Settings → Google Drive → Disconnect, or remove the app's access at myaccount.google.com/connections. Files the app already uploaded stay in your Drive until you delete them.
Other services the app connects to
- Live gold and silver rates come from OroPocket (
api.oropocket.com). On the website the request passes through the site's own/api/oropocketaddress on Cloudflare; the Android app asks OroPocket directly. The request carries no shop or customer data. - Hosting: the website is served by Cloudflare Pages, which, like any web host, handles technical request data such as your IP address.
- Libraries and fonts are loaded from cdnjs.cloudflare.com, cdn.jsdelivr.net and Google Fonts. These providers receive standard request information (IP address, browser type) when the files are downloaded.
- Google sign-in (accounts.google.com) is contacted only if you connect Google Drive: when you connect, and when the app renews its access after being unlocked.
Security
The login, PIN and auto-lock protect the app's screens, and backups are encrypted. The records themselves are stored in the device's app storage without separate encryption, so keep the device itself protected with a screen lock.
Children
The app is a business tool for shop staff and is not meant for children.
Changes to this policy
If this policy changes, the new version will be posted on this page with a new date.
Contact
Shri Krishna Jewellers · pushkargoyal24@gmail.com