Privacy Policy

1. Introduction & Data Controller

This Privacy Policy governs the manner in which Yesri Business Manager ("we", "our", or "the application"), available under the package identifier com.yesrifinance.app on the Google Play Store, collects, uses, maintains, and discloses information collected from users ("you" or "the user").

If you have questions about this policy, you may contact the designated developer and data controller at:

• Email: yesribusinessmanager@gmail.com
• Phone / WhatsApp: +92 301 1249286
• Country: Pakistan

2. Local Data Architecture (Offline-First Storage)

Unlike traditional cloud accounting services, Yesri Business Manager is architected as an offline-first application:

• Your Business Data: All financial entries (including sales invoices, expenses, inventory counts, bank accounts, cash registers, general ledger records, and customer/supplier Khata books) are saved directly onto your device's internal storage using a sandboxed SQLite engine via Drift.
• No Proprietary Server Transmission: We do not upload your financial accounting records to our developer servers. Your ledger is stored locally on your device under your complete ownership and control.
• AES-256 Encrypted Backups: When you choose to use the backup feature, the application packages your database into a file encrypted with AES-256 encryption. This file can only be decrypted by your master password when restoring on your new device.

3. Information Collected Automatically by Third-Party SDKs

To provide essential monetization and subscription services, the application integrates reputable, industry-standard third-party Software Development Kits (SDKs). These services may collect technical device identifiers as described below:

A. Google Mobile Ads (AdMob)

The free tier of Yesri Business Manager displays advertisements served by Google AdMob. Google AdMob may collect and process:

• Advertising Identifiers: Google Advertising ID (AAID) for ad personalization, frequency capping, and fraud detection.
• Device & Network Information: IP address, device model, operating system version, carrier, and general geographical location (country/city level).
• Ad Interaction Metrics: Impressions, click events, and ad diagnostics.

Consent Management (GDPR & CCPA): In compliance with European and regional data protection laws, we integrate Google's User Messaging Platform (UMP) SDK. Users in the EEA and UK are prompted with a consent banner prior to any personalized ad serving. You can review or revoke your consent preferences at any time from within the app: Settings → Ad Privacy Settings.

For more details on how Google processes ad data, please visit Google's Advertising Privacy Policy.

B. RevenueCat & Google Play In-App Billing

When you purchase or subscribe to the Pro plan, payments are handled exclusively by Google Play Billing. We utilize RevenueCat to securely validate purchase receipts and track subscription entitlement status.

• Information Collected: An anonymous app user ID, Google Play order transaction tokens, purchase timestamps, and subscription expiration dates.
• No Payment Card Access: Yesri Business Manager and RevenueCat never receive or store your credit card numbers, CVV, or bank credentials. All financial payment processing is handled exclusively by Google Play.
• Ad Elimination: Upgrading to Pro completely deactivates the Google AdMob SDK, halting advertising identifier collection.

For more details, review the RevenueCat Privacy Policy and the Google Payments Privacy Notice.

4. Device Permissions & Why We Request Them

Yesri Business Manager only requests operating system permissions strictly necessary for user-initiated features:

Permission	Purpose & Usage	Storage / Handling
Camera	Used only when you scan product barcodes in Inventory or photograph a paper receipt to attach to an expense.	Processed locally on device. Images saved strictly within your app's local database directory.
Storage / Media Files	Used to export PDF invoices to your Downloads folder or import/export AES-256 backup files.	Operates strictly on user-selected file paths.
Bluetooth / Nearby Devices	Used optionally to discover and send print jobs to 58mm or 80mm ESC/POS thermal receipt printers.	Communication is direct from phone to printer via Bluetooth; no data is sent externally.
Internet Access	Used solely for Google Play purchase validation (RevenueCat) and ad delivery (AdMob on Free tier).	Encrypted via HTTPS/TLS 1.3.

5. Data Retention & Permanent Deletion Policy

You have full sovereignty over your data:

• In-App Immediate Deletion: You can permanently wipe all accounts and business records at any time by navigating to Settings → Account → Delete Account. This instantaneously purges the local SQLite database and cached receipt photos from your phone.
• Web-Based Deletion Request: In accordance with Google Play's mandatory account and data deletion policy, you can submit a deletion request via our dedicated Account & Data Deletion Page or by emailing yesribusinessmanager@gmail.com.
• Retention Exceptions: Because we do not store your accounting data on developer servers, deleting the app or using the in-app wipe permanently destroys your records. Google Play transaction IDs may be retained by Google in according with statutory tax and accounting obligations.

6. Children's Privacy (COPPA & Global Standards)

Yesri Business Manager is an enterprise bookkeeping tool designed specifically for small business owners, traders, and entrepreneurs aged 18 and older. The application is not directed to children under the age of 13 (or under 16 in the European Union). We do not knowingly collect personal information from children.

7. User Rights under GDPR (EEA/UK) & CCPA (California)

Depending on your geographic location, you hold statutory privacy rights:

• Right to Access & Portability: You can export your entire accounting ledger, invoices, and reports at any time into standard PDF and CSV formats from within the app.
• Right to Erasure ("Right to be Forgotten"): You can wipe all data using the in-app deletion button or our web deletion portal.
• Right to Opt-Out of Personalized Advertising: You can revoke consent in Settings → Ad Privacy Settings or reset your Google Advertising ID in Android settings.
• Non-Discrimination: We will never discriminate against you for exercising any of your statutory privacy rights.

8. Security Standards

We take appropriate technical and organizational measures to safeguard your data:

• All network communications with Google Play and RevenueCat utilize HTTPS / TLS 1.3 encryption.
• Backup archives are protected using AES-256 symmetric encryption.
• The SQLite database is stored inside the operating system's private sandboxed app directory, inaccessible to other apps on standard non-rooted devices.

9. Policy Updates & Notifications

We may update this Privacy Policy from time to time to reflect regulatory changes or enhancements to the application. Any modifications will be posted on this URL with an updated "Last Updated" date. Continued use of the application after such updates constitutes acceptance of the modified policy.