Privacy & Terms

1. Your records stay on your phone

Items, prices, tokens, sales, expenses, staff, customers (khata, prepaid cards) and reports are saved on the phone where you use the app. You can use the app without any account. Owner and staff PINs are stored only as a protected hash (PBKDF2), with a lock after wrong tries.

2. Optional cloud copy and extra phones

If you turn on the cloud copy, records are encrypted on your phone (AES-256-GCM) before they are sent to our server (Cloudflare), so your other billing phones can get them. The key stays in your shop link; our server cannot read the records. Old token records are removed from the server after about 130 days. “Change all keys” stops old links from working. Share shop links only with your own staff.

2a. Google login for a plan (optional)

If you sign in with Google in Account & phones (needed only for a plan), our server keeps your Google e-mail, your plan and its dates, and the list of linked phones (a random id, a name like “Android phone” and the type). We also note where the app was opened from when you first signed in — the Play Store app, the Windows app, the installed app or the website — only to count which way stalls reach us; nothing else about your phone is kept. It never gets your stall records. Payment receipts are kept for the period the tax law asks; they do not contain your e-mail. Delete the account any time: Account & phones → Delete my account, or follow desktopndraw.com/delete-account.html. Your stall data on the phone stays.

3. TV screen, counter screen and phone orders

The TV and counter screens show token numbers only. If you use QR phone orders, the order (items, and the name / phone number the customer types) is kept on our server only so your counter can see it, and is deleted after 7 days. Network addresses are stored only as a one-way code to stop misuse.

4. Backups

Download a backup file from Settings, or connect Google Drive: the app then saves a backup in your own Drive once a day and keeps the last 30. The app can see only the files it made (permission “drive.file”). Keep backup files private — they contain your sales.

5. No ads, no tracking

No advertising and no analytics. Google Sign-In loads only when you connect Drive. WhatsApp and UPI apps open only when you tap them. The camera is used only for barcode / card scanning when you tap it; nothing is uploaded.

App problem reports: if the app hits an error, it sends us only the error line, the app version and the phone type (for example “Android 14 · Chrome”) so we can fix it. Long numbers, emails and amounts are removed first. No tokens, customers, names or anything you typed. “Report a problem” sends only what you write (and your mobile only if you add it). To ask what we hold, correct or delete it, or for a grievance, write to us — we reply within 7 days.

6. Not professional advice

Reports, profit and “galla milan” are calculated from what you enter. Check important figures with your accountant. A phone-order “UPI paid” message is only the customer’s claim — always check the money in your UPI app before giving the order.

7. Delete everything

Clear the app’s site data in your browser to remove everything from the phone. To remove the cloud copy, remove your phones in Settings or WhatsApp us; to remove the Google-login account, use Delete my account (see 2a); delete Drive backups from your Google Drive.

8. Law and contact

We follow India’s Digital Personal Data Protection Act, 2023. Questions or grievances: Desktop N Draw, Chhatrapati Sambhajinagar, Maharashtra · [email protected] · WhatsApp / Call +91 97640 18789 · desktopndraw.com/token