Last updated: September 23, 2026
OkDebit ("OkDebit", "we", "us", or "our") is an invoicing and payment-tracking app for small businesses. This Privacy Policy explains what information we collect through the OkDebit mobile app and website, how we use it, and the choices you have. By using OkDebit, you agree to the practices described here.
Account information. When you register you provide a name, email address, and optionally a phone number. If you sign in with Google, we receive your name, email address, and profile photo from your Google account via Firebase Authentication. We store a securely hashed version of your password (if you use email/password sign-in) — we never store your password in plain text.
Business profile. Your business name, business email/phone, address, tax identifiers, invoice numbering preferences, default currency, and similar settings you configure.
Client and invoice data. The clients, invoices, catalog items, recurring invoice templates, and payment records you create in the app — including any client names, emails, phone numbers, addresses, and notes you choose to enter.
Support messages. Messages you send us through the in-app "Contact Us" form or support chat, including your name, reply-to email, and message content, and any file you attach in support chat.
Purchase information. If you subscribe to OkDebit Pro, Google Play (or the Apple App Store) processes your payment — we never see or store your card details. We receive a purchase token from the store, which we verify with Google/Apple to activate your subscription, along with your plan and renewal status.
Push notification token. A device token issued by Firebase Cloud Messaging, used only to deliver in-app notifications (e.g. payment reminders) to your device.
Technical and log data. Standard server logs (IP address, request timestamps, app version) generated when the app communicates with our servers, used for security and troubleshooting.
What we do not collect. OkDebit does not request access to your camera, photo library, contacts, or location. Biometric app-lock (fingerprint/face unlock) is verified entirely by your device's operating system — no biometric data is ever sent to us or stored on our servers. We do not use advertising or third-party analytics/tracking SDKs.
When you add a client's name, contact details, or notes to OkDebit, you are providing personal information about a third party for the purpose of running your business. You are responsible for having the right to store and process that information (for example, having told your customer how you use their data), and for complying with any privacy laws that apply to your business. We process this data only to provide the OkDebit service to you and do not use it for any other purpose.
We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.
We share information only with the service providers that help us run OkDebit, and only to the extent needed:
We may also disclose information if required by law, to protect the rights and safety of OkDebit or our users, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).
When you share an invoice with a client, OkDebit generates a link containing a long, unguessable token. Anyone who has that link can view the invoice — no account is required. Only share invoice links with the intended recipient, and you can revoke access at any time by deleting the invoice.
Your data is stored on servers located in India. We use industry-standard measures to protect it, including encrypted connections (HTTPS/TLS) between the app and our servers, hashed passwords, and expiring session tokens. No method of transmission or storage is 100% secure, but we work to protect your information using commercially reasonable safeguards.
We retain your account and business data for as long as your account is active, so the service keeps working as expected. You can erase your business data at any time from Settings → Delete All Data, which permanently deletes your clients, invoices, payments, and catalog items. To delete your account entirely, contact us (see Section 10) — we will delete your account and associated data within 30 days, except where we need to retain limited information to comply with legal obligations or resolve disputes.
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can exercise these rights by using the in-app tools described above or by contacting us directly — we will respond to reasonable requests within a reasonable time.
OkDebit is a business tool and is not directed at, or knowingly used to collect information from, children. If you believe a child has provided us with personal information, please contact us and we will delete it.
Questions about this Privacy Policy or your data? Email us at aoubusinesskaren@gmail.com, or use the "Contact Us" screen inside the app.
We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do, and for significant changes we'll provide additional notice (such as an in-app notification).