Legal
VyaparEye Privacy Policy
Last updated: 12 September 2026
This Privacy Policy describes how the V1 VyaparEye Android application (the “App”) handles information, based on the behavior implemented in the VyaparEye repository. It is written for operators who use the App and for store-listing purposes. It is not a claim of legal compliance with any particular statute. The publisher / legal entity that offers VyaparEye on Google Play is QIRFAT Technologies. This document describes the App’s technical behavior. Do not treat “VyaparEye” as a registered legal entity.
Summary
VyaparEye is a local-first, offline Android business app. In this version, you enter and manage one business profile and related records on a single device. Those records are stored in an app-private Room (SQLite) database on that device. The App does not create a cloud account, does not sync to a server, and does not include a backend. The App does not declare the INTERNET permission and does not send your business records over the internet. The App does not include analytics, advertising, Firebase, or a payment gateway. You can permanently delete all stored App data from Settings.
Who this App is for
The App is intended for a small-business operator using one phone or tablet. You choose a business type (in V1, the shipped Salon category pack) and register one local business profile. The App does not provide user accounts, sign-in, or multi-user roles. You decide what you type into the App. If you store information about other people (for example, a client name or phone number), you are responsible for having a lawful reason to keep that information.
Information stored on your device
The App stores only what you enter and what it derives from that input. Storage is the local Room database file vyapareye.db in the App’s private storage. There is no separate reports table and no separate outstanding-balance table; dashboard and report figures are calculated on the device from stored invoices, payments, expenses, and appointments.
Business profile (one local profile)
When you register, the App stores: business name (required); phone, address, and tax ID (optional); a category identifier for the chosen category pack; a currency code (V1 default: INR); and created and updated timestamps. V1 allows only one business row. This version does not provide an editor to change the profile after registration (the name is shown as read-only in Settings).
Clients (parties)
For each client (or other party label supplied by the category pack), the App can store name, phone (optional), note (optional), and created and updated timestamps. You can search the local list by name or phone. This version lets you create and edit these records. It does not provide a per-client delete action.
Offerings (services or products)
For each offering, the App can store name, kind (for example, service or product), price (as an integer amount in minor currency units), duration in minutes (optional), and created and updated timestamps. A category pack shipped with the App may insert optional seed offerings when you first register (for example, a default service name and price). Those seeds are stored locally like any other offering you add.
Appointments
For each appointment, the App can store links to a client and an offering; a snapshot of the offering name, price, and duration at booking time; start date and time; status (for example, scheduled, completed, or cancelled); and created and updated timestamps. Cancelling or completing an appointment changes its status. The record remains on the device until all data is deleted as described under Retention and deletion.
Invoices and invoice lines
For each invoice, the App can store invoice number; linked client and an optional linked appointment; status (for example, draft, issued, paid, or void); optional note and issued timestamp; line items with a name snapshot, quantity, unit price, and line total; and created and updated timestamps.
Payments
For each payment you record against an invoice, the App can store amount; method label chosen in the App (cash, UPI, card, or other); date and time paid; optional note; and created timestamp. Recording a payment is a local bookkeeping entry. The App does not connect to a payment gateway, does not take card numbers, UPI IDs, or bank credentials, and does not move money.
Expenses
For each expense, the App can store amount; category label (rent, supplies, salary, or other); date spent; optional note; and created and updated timestamps.
Reports and outstanding balances
Home dashboard cards and the Reports screen show totals such as today’s bookings, amounts collected, expenses, net, and outstanding remaining balances. Those figures are computed on the device from the records above. They are not uploaded and are not stored as a separate reporting dataset.
App metadata and shipped configuration
The App also keeps a small local metadata row (whether category-pack seed offerings have already been applied). Category-pack files shipped in the App (labels and optional seed offerings) are product configuration, not information you type about a person. The App does not ask for date of birth, government ID photographs, precise location, contacts from the device address book, photos, microphone audio, SMS contents, or call logs.
How that information is used
On the same device, the App uses stored records to show your business name and lists of clients, offerings, appointments, invoices, payments, and expenses; let you create and edit those records (and complete, cancel, issue, void, or record payments where those actions exist); calculate invoice totals, amounts paid, remaining balances, and report figures; and restore the App to the onboarding flow after you delete all data. The App does not use this information for advertising, profiling, or marketing. This version has no analytics or crash-reporting SDK.
What this version does not do
This V1 implementation does not: create or require a cloud account or online login; sync data to a backend, cloud database, or another device through the App; include a first-party or third-party server operated by the App; include Firebase or other Google Play services SDKs for the App’s own features; include an analytics, crash, or advertising SDK; include a payment gateway or payment processor; declare the INTERNET permission; send your business records over the internet; export, share, or upload files (there is no share sheet, file provider, or export feature in this version); access your device contacts, location, camera, microphone, SMS, or phone state; or encrypt the database with an application-level encryption product (see Security limitations).
Permissions
The App’s source manifest does not declare INTERNET, contacts, location, camera, microphone, SMS, phone, or storage permissions. The App does not present runtime permission prompts for those capabilities. Android may attach library-internal signature permissions that are not granted by the user (for example, a dynamic-receiver permission used by AndroidX). Those are not used to read contacts, location, or your business records off the device.
Storage, backup, and device transfer
Records are stored in the App’s private Room database (vyapareye.db) on the device. Other apps on a normal, non-modified device cannot open that file. The App sets android:allowBackup="false" and android:fullBackupContent="false". The App’s data_extraction_rules exclude root, file, database, shared-preferences, and external domains from both cloud backup and device transfer. This is the configured V1 behavior: the App does not opt in to Auto Backup or to the standard Android backup/transfer inclusion of its database. It is not a promise that a computer with debugging access, a modified device, a manufacturer tool, or someone with physical access can never copy files. Uninstalling the App, or clearing the App’s storage in Android settings, removes the App’s private files as the operating system normally does. This App does not create a separate backup file of its own.
Retention and deletion
Stored records remain on the device until you delete them as described below, clear the App’s storage, or uninstall the App. You can change records the App allows you to edit. Changing a status (for example, cancelling an appointment or voiding an invoice) does not by itself erase the row. Settings includes Delete all data. The App asks you to confirm. After confirmation it permanently removes, in a single local operation: payments; invoice lines and invoices; appointments; offerings; clients (parties); expenses; the business profile; and app metadata (then resets metadata so the App can be set up again). The App then returns you to the first-run category selection. Deleted data cannot be recovered from the App. There is no cloud copy to restore. This is local deletion of App data. It is not an “account deletion” web flow, because this version has no account.
Security limitations
The App relies on the Android application sandbox and the storage, backup, and device-transfer settings described above. It does not add a separate database-encryption library. You should treat the device as the place where this information lives. Anyone who can unlock the device and open the App can see the records. Anyone who can copy the App’s private files from an unlocked, debuggable, rooted, or otherwise modified device may be able to read them. Do not read this policy as a guarantee that the App is “secure,” that data can never leave the device, or that it meets a particular certification.
Children
The App is intended for business operators. It is not directed at children, and it does not ask a child to create a profile or provide information to a service. If you enter a name, phone number, or note about any person, including a minor, that text is stored only in the local database you control.
Changes to this policy
If a later version of the App stores different information, uses the network, or adds accounts or third-party services, this document must be updated to match the implemented behavior before that version is offered as current. This file is the V1 policy text in the repository. A public web address for this policy is not included here.
Contact
Support email: hello@qirfat.com. No telephone number or postal address is recorded in this repository. Do not invent one. Questions about this V1 App can be sent to hello@qirfat.com. The in-app Settings screen shows a privacy notice and About information (app name and version). That screen is not a messaging or support inbox.
Relationship to the in-app notice
Settings also shows a short in-app privacy notice. That notice is a summary for operators on the device. This document is the fuller V1 Privacy Policy text. Neither document is a hosted Play listing URL until a publisher publishes one.