Privacy Policy
This Privacy Policy explains how MilkuLedger ("the App") collects, uses, stores, and protects information when you use the App. The App is published by ZU TECH SOLUTIONS ("the developer", "we", "us"). MilkuLedger is a dairy/milk record-keeping app built on a local-first design — the large majority of your business data never leaves your device.
If you do not agree with this policy, please do not use the App. By using MilkuLedger, you agree to the collection and use of information as described here.
1. Data Stored Only On Your Device (Local-First)
The following is stored exclusively in the App's local storage on your phone and is never transmitted to us or any third party, unless you enable Cloud Backup (Section 3):
- Milk entries — date, quantity, fat %, CLR/SNF, calculated rate and amount
- Party names and payment records you enter
- Business profile — dairy name, address, contact number, GST number (if entered), logo/photo (if added)
- App Lock PIN — stored only as a salted, one-way cryptographic hash; the PIN itself is never stored or transmitted anywhere
- Fingerprint / biometric data — handled entirely by your device's own operating system. MilkuLedger never receives, stores, or transmits your biometric data.
- App preferences — language, theme, and similar settings
Uninstalling the App, or using the in-app "Clear All Data" option, permanently deletes this data from your device. We cannot recover it once deleted, unless you had a Cloud Backup (Section 3).
2. Advertising (Google AdMob)
Free-tier (non-subscribed) users may be shown ads served by Google AdMob. Premium subscribers never see ads.
- AdMob collects your device's advertising identifier and related technical data (device type, general location derived from IP, ad interaction data) to select, serve, and measure ads, and to detect invalid activity.
- For users in the European Economic Area (EEA), UK, and Switzerland, MilkuLedger uses Google's User Messaging Platform (UMP) to obtain your consent before requesting personalized ads or sharing data with advertising partners, in line with applicable law (GDPR).
- You can review or change your ad consent choice at any time from within the App (Settings → Privacy Options).
- AdMob's data collection and use is governed by Google's own Privacy Policy: policies.google.com/privacy.
3. Optional Cloud Backup (Google Drive)
Cloud Backup is an optional, user-initiated feature. If you choose to enable it:
- We use Google Sign-In to connect to your Google account. This collects your Google account name and email address, used only to identify your Drive connection within the App.
- Before anything is uploaded, your ledger data is encrypted on your device using AES-256-GCM with a key derived from a passphrase that only you know. Neither Google nor the MilkuLedger developer can read the contents of this backup.
- The encrypted backup file is stored in a private, app-specific folder in your own Google Drive — it is not accessible to us, and we do not have a copy.
- If you forget your backup passphrase, the backup file cannot be decrypted or recovered by us or by Google.
- You can delete a Cloud Backup at any time by deleting the file from your Google Drive, or by disconnecting the App's access from your Google Account settings.
- The connected Google account's email may also be used to verify your identity if you use "Forgot PIN."
4. Premium Subscription & Purchase Verification
MilkuLedger offers an optional Premium subscription, billed and processed entirely by Google Play Billing. We never see or store your payment card, UPI, or banking details — Google handles all payment processing.
To confirm a purchase is genuine (and to prevent fraud), the App sends the following to our backend, hosted on Firebase Cloud Functions (Google Cloud Platform):
- Purchase token, product ID, base plan ID, and order ID issued by Google Play
- The Android package name of the App
Our backend verifies this against the Google Play Developer API and stores a minimal purchase-verification record in Firebase Firestore (Google Cloud Platform), consisting of: a hashed reference to the purchase token, the subscribed plan, its active/expiry status. This record is not linked to your name, email, or any other personally identifying information — it exists only to confirm your subscription is valid.
You can manage or cancel your subscription at any time directly through Google Play (Settings → Manage Subscription, or via the "Manage Subscription" option inside the App, which opens Google Play's own subscription management screen).
5. Information We Do Not Collect
MilkuLedger itself never requests or accesses your device's location. The only location-related information involved is the coarse, IP-derived region used by Google AdMob for ad delivery, as described in Section 2.
6. Third-Party Services We Use
| Service | Purpose | Data Involved |
|---|---|---|
| Google AdMob | Serving ads to free-tier users | Advertising ID, device/technical data |
| Google Sign-In & Google Drive API | Optional Cloud Backup | Name, email, encrypted backup file |
| Google Play Billing | Processing Premium subscription payments | Handled entirely by Google; we never see payment details |
| Firebase Cloud Functions & Firestore (Google Cloud) | Verifying Premium purchases | Purchase token, product/plan ID, order ID |
Each of these services is operated by Google and governed additionally by Google's Privacy Policy.
7. Data Retention
- On-device data is retained until you delete it, clear app data, or uninstall the App.
- Cloud Backup files remain in your Google Drive until you delete them.
- Purchase-verification records in Firestore are retained for as long as your subscription is active, plus a limited period afterward for fraud-prevention and accounting purposes, after which they are deleted.
8. Your Rights & How to Delete Your Data
You can delete your data at any time. See our dedicated Account & Data Deletion page for exact steps, including how to request deletion if you no longer have the App installed.
9. Data Security
- All network communication between the App and our backend is encrypted in transit (HTTPS/TLS).
- Cloud Backup data is encrypted on your device before it ever leaves your phone (AES-256-GCM, PBKDF2 key derivation from your passphrase).
- Your App Lock PIN is stored as a salted cryptographic hash; biometric authentication is handled entirely by Android's own secure hardware.
- No security measure is perfect; you are responsible for keeping your device, PIN, and Google account secure.
10. Children's Privacy
MilkuLedger is a business/utility tool intended for dairy and milk-trade professionals and is not directed at children. We do not knowingly collect personal information from children — defined as anyone under 18 years of age in India, or under the applicable minimum age in other jurisdictions. If you believe a child has provided us with personal information, please contact us using the details below so we can delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
12. Contact Us
For privacy questions, data requests, or concerns, contact us at: milkuledger@gmail.com
For grievances relating to the processing of your personal data, write to the same address with the subject line 'Privacy Grievance'. We aim to acknowledge grievances within 7 days and resolve them within 30 days.