Privacy Policy

Last updated: 12 JULY 2026

This Privacy Policy explains how MilkuLedger ("the App", "we", "us") collects, uses, stores, and protects information when you use the App. MilkuLedger is a dairy/milk record-keeping app built on a local-first design — the large majority of your business data never leaves your device.

If you do not agree with this policy, please do not use the App. By using MilkuLedger, you agree to the collection and use of information as described here.

In short: your milk ledger, party names, rate calculations, and business profile stay on your device. Data only leaves your device if you turn on Cloud Backup, if you subscribe to Premium (to verify the purchase), or through the advertising SDK for free-tier users.

1. Data Stored Only On Your Device (Local-First)

The following is stored exclusively in the App's local storage on your phone and is never transmitted to us or any third party, unless you enable Cloud Backup (Section 3):

Milk entries — date, quantity, fat %, CLR/SNF, calculated rate and amount
Party names and payment records you enter
Business profile — dairy name, address, contact number, GST number (if entered), logo/photo (if added)
App Lock PIN — stored only as a salted, one-way cryptographic hash; the PIN itself is never stored or transmitted anywhere
Fingerprint / biometric data — handled entirely by your device's own operating system. MilkuLedger never receives, stores, or transmits your biometric data.
App preferences — language, theme, and similar settings

Uninstalling the App, or using the in-app "Clear All Data" option, permanently deletes this data from your device. We cannot recover it once deleted, unless you had a Cloud Backup (Section 3).

2. Advertising (Google AdMob)

Free-tier (non-subscribed) users may be shown ads served by Google AdMob. Premium subscribers never see ads.

AdMob collects your device's advertising identifier and related technical data (device type, general location derived from IP, ad interaction data) to select, serve, and measure ads, and to detect invalid activity.
For users in the European Economic Area (EEA), UK, and Switzerland, MilkuLedger uses Google's User Messaging Platform (UMP) to obtain your consent before requesting personalized ads or sharing data with advertising partners, in line with applicable law (GDPR).
You can review or change your ad consent choice at any time from within the App (Settings → Privacy Options).
AdMob's data collection and use is governed by Google's own Privacy Policy: policies.google.com/privacy.

3. Optional Cloud Backup (Google Drive)

Cloud Backup is an optional, user-initiated feature. If you choose to enable it:

We use Google Sign-In to connect to your Google account. This collects your Google account name and email address, used only to identify your Drive connection within the App.
Before anything is uploaded, your ledger data is encrypted on your device using AES-256-GCM with a key derived from a passphrase that only you know. Neither Google nor the MilkuLedger developer can read the contents of this backup.
The encrypted backup file is stored in a private, app-specific folder in your own Google Drive — it is not accessible to us, and we do not have a copy.
If you forget your backup passphrase, the backup file cannot be decrypted or recovered by us or by Google.
You can delete a Cloud Backup at any time by deleting the file from your Google Drive, or by disconnecting the App's access from your Google Account settings.

4. Premium Subscription & Purchase Verification

MilkuLedger offers an optional Premium subscription, billed and processed entirely by Google Play Billing. We never see or store your payment card, UPI, or banking details — Google handles all payment processing.

To confirm a purchase is genuine (and to prevent fraud), the App sends the following to our backend, hosted on Firebase Cloud Functions (Google Cloud Platform):

Purchase token, product ID, base plan ID, and order ID issued by Google Play
The Android package name of the App

Our backend verifies this against the Google Play Developer API and stores a minimal purchase-verification record in Firebase Firestore (Google Cloud Platform), consisting of: a hashed reference to the purchase token, the subscribed plan, its active/expiry status. This record is not linked to your name, email, or any other personally identifying information — it exists only to confirm your subscription is valid.

You can manage or cancel your subscription at any time directly through Google Play (Settings → Manage Subscription, or via the "Manage Subscription" option inside the App, which opens Google Play's own subscription management screen).

5. Information We Do Not Collect

MilkuLedger does not collect or access: your precise or approximate location, contacts, call logs, SMS messages, photos/media beyond what you explicitly attach to your business profile, health or fitness data, or any data from your device's camera/microphone beyond an explicit photo you choose to upload.

6. Third-Party Services We Use

Service	Purpose	Data Involved
Google AdMob	Serving ads to free-tier users	Advertising ID, device/technical data
Google Sign-In & Google Drive API	Optional Cloud Backup	Name, email, encrypted backup file
Google Play Billing	Processing Premium subscription payments	Handled entirely by Google; we never see payment details
Firebase Cloud Functions & Firestore (Google Cloud)	Verifying Premium purchases	Purchase token, product/plan ID, order ID

Each of these services is operated by Google and governed additionally by Google's Privacy Policy.

7. Data Retention

On-device data is retained until you delete it, clear app data, or uninstall the App.
Cloud Backup files remain in your Google Drive until you delete them.
Purchase-verification records in Firestore are retained for as long as your subscription is active, plus a limited period afterward for fraud-prevention and accounting purposes, after which they are deleted.

8. Your Rights & How to Delete Your Data

You can delete your data at any time. See our dedicated Account & Data Deletion page for exact steps, including how to request deletion if you no longer have the App installed.

9. Data Security

All network communication between the App and our backend is encrypted in transit (HTTPS/TLS).
Cloud Backup data is encrypted on your device before it ever leaves your phone (AES-256-GCM, PBKDF2 key derivation from your passphrase).
Your App Lock PIN is stored as a salted cryptographic hash; biometric authentication is handled entirely by Android's own secure hardware.
No security measure is perfect; you are responsible for keeping your device, PIN, and Google account secure.

10. Children's Privacy

MilkuLedger is a business/utility tool intended for dairy and milk-trade professionals and is not directed at children. We do not knowingly collect personal information from children under the age of 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us with personal information, please contact us using the details below so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

For privacy questions, data requests, or concerns, contact us at: milkuledger@gmail.com