1. Local Data Storage & Sandboxing
All business records created within Girvi—including customer profiles, transaction amounts, items, notes, and calculation logs—are stored exclusively in the private sandboxed storage of your Android device (Room DB v12 (SQLite) with 12 manual schema migrations & ACID transactions).
VaidikTech does not operate or maintain any remote server, database, or analytics infrastructure that receives your records. Your data remains strictly within your physical possession.
2. Network & Internet Usage
Internet Requirement: 100% Offline; Zero INTERNET Permission in AndroidManifest.
The AndroidManifest declares zero INTERNET permission. Absolutely no network sockets exist in the data layer; defensive network security configuration blocks all cleartext traffic. Google Play Billing v7 verifies in-app entitlements, and plain-text itemized receipts dispatch to WhatsApp via Android URI intents.
When you initiate an action that contacts an external application (such as sharing a receipt to WhatsApp or opening an official court portal in your web browser), that communication is governed by the privacy policy of the receiving external application.
3. System Permissions Declared
The application requests only the minimum set of Android system permissions required for user-initiated features:
- CAMERA: Used solely when you choose to photograph pledged jewelry or ornaments using CameraX. Photos remain in private app storage.
- USE_BIOMETRIC / USE_FINGERPRINT: Used on-device to lock and unlock the application when App Lock is activated. Biometric verification is handled by the Android OS Keystore; the app never receives your raw biometric data.
- SCHEDULE_EXACT_ALARM: Used for on-device daily reminder notifications for maturing loans.
- BILLING: Handled securely by the official Google Play Billing library for subscription upgrades.
4. Data Backups & Encryption
Dual-mode AES-256-GCM backups (.gbackup ZIP archive): Hardware Android Keystore 'DEVICE_KEY' for same-device protection, and PBKDF2 100,000 iterations 'PASSWORD_KEY' ('PBK2' magic header) for cross-device migrations. Automated daily background execution via WorkManager.
We strongly recommend regular exports of your backup archives. Because your database is not hosted on a cloud server, VaidikTech cannot recover your records if you lose your device without a prior backup.
5. Privacy Inquiries & Data Rights
Because your data is stored entirely on your device, you have complete and instantaneous control over its deletion. Uninstalling the application removes all sandboxed database tables from your phone.
For any privacy inquiries or legal clarifications, contact: vaidik.gandhi1@gmail.com.