Privacy policy

Where the app is today

ToluBhai is getting ready for its first shops. The cloud service described below is being prepared for launch and is not yet running for customers. This policy explains the data handling planned for that service and the data handling on this website today.

Data we collect

• Account: your email address, the profile details your sign-in provides, and an account ID.
• Shop and access: shop details, owner and staff roles, counter records, enrolled phone identifiers, the Bluetooth scale address saved with scale trades, and access permissions.
• Catalog and rates: your products, units, pack sizes, buy and sell rates, and the rate applied to a trade.
• People you name: customer or supplier names, if your shop enters them.
• Trades: gross, tare and net weight, piece counts, unit, rate, amount, payment status, whether the reading came from the scale or by hand and the reason, timestamps, operator and counter, and the audit trail for saved corrections and cancellations.

Why we use this data

We use account and device details to sign you in and apply your shop's access rules. Products, rates and saved trades let the counter calculate amounts, keep stock and history, and show reports to authorized people in your shop. Live readings let an authorized owner see the scale while both phones are online. Filtered error reports help us find and fix app faults. Messages you send support let us answer your request.

Where the data is stored

The counter app saves trades on the phone and keeps track of records waiting to upload. This lets the counter keep working without internet within its verified access period.

When the app is configured with the cloud service, signed-in records go to Supabase for authentication and saved records. Inside one shop, people with the right role can see that shop's records.

Google sign-in is optional. If you choose it, we receive the basic profile needed to sign you in. ToluBhai does not read your contacts or other Google content.

While an owner is watching, live scale readings pass through a Cloudflare relay. Those readings are transient. They do not become saved trade rows, and raw frame payloads are not kept in logs.

Crash reports go to Sentry only when a deployment is configured with it. The report is limited to scrubbed Dart error type, stack, app version and time. Customer, trade, weight, login and token payloads are excluded. Session replay, screenshots and native crash reports are not used.

Our network and service providers process connection metadata such as IP address as part of delivering a request. We cannot promise that a provider keeps no logs.

Data the app does not collect

• ToluBhai connects to a Bluetooth scale you have paired. Bluetooth is used for that connection, not for your location.
• The app does not ask for camera, biometrics, location, advertising identifiers, or bank or card details. It does not include advertising or tracking SDKs.
• An amount or payment status saved in a trade is a ledger entry about the sale. ToluBhai does not process payments or move money.

This website

This website stores only your language choice in your browser's localStorage. It has no forms, no analytics, no cookies and no tracking scripts.

Cloudflare hosts the site. If you choose a WhatsApp, email or call link, your own app opens and the request goes to that service. We cannot promise that those services keep no logs.

How long data is kept

Saved business and account records are kept for the service and your history until account erasure is completed.

After two confirmations, the server confirms the deletion schedule. Erasure starts seven days after that confirmed schedule, and you can cancel while it is pending. Erasure removes your login identity, every shop you own and all records in those shops, including records saved there by your workers. It also removes your own saved trades and your memberships in other people's shops. Shops owned by other people, and the trades other people saved there, are kept.

After an erasure is committed, or a pending request is cancelled, we keep minimal proof of that decision for 30 days. The proof holds no business payload such as names, weights, rates or trades.

A phone that is offline keeps its local records until it is online again and receives verified proof from the server. A phone that was registered for recovery earlier can check within 30 days. Missing proof or missing support help is never treated as a reason to wipe records by inference.

Retention for support messages, and for the operational data and settings of our providers, is not settled. We do not publish a day count for those yet. Ask us using the contact details below and we will explain the current position for your request.

Your choices and rights

You can ask us to show the account and shop data we hold, to correct it, or to erase your account. Use the contact details below. We check that a request belongs to you before acting. We use safeguards such as access control and signed-in roles, but no system can promise complete security.

We do not sell your data.

Adults only

ToluBhai is a business app for adults who run or work in a shop. It is not made for children.

Providers and processing outside India

Cloud providers and their settings can change, so data may be processed outside India depending on how a deployment is configured. We do not claim a specific storage region or a legal certification that has not been verified.

Changes to this policy

We may update this policy as the product and the law change. The date at the top shows the latest version. If a change is significant, we will show it clearly on this site.