Privacy policy
BillZap does not collect your data.
Not a softened version of that sentence — there is no account to sign into, no server holding your books and no analytics reading your invoices. This page explains what that means in practice, what the app asks Android for, the one case where something does leave your phone, and — separately — the two things this website collects, which the app does not.
The short version
- BillZap has no user accounts. You are never asked for a name, phone number or email.
- BillZap has no backend server. There is nowhere for us to store your invoices, because we do not run anything to store them on.
- Your invoices, customers, products and expenses live in the app's own storage on your phone.
- There is no analytics, no advertising and no tracking of any kind in the app.
- The only data that ever leaves your phone is what you send — a PDF you share, or a voice command you speak.
- This website is a separate matter: it has analytics, and it asks for your email before the download. Neither touches the app. The details are below, and the download is also on GitHub with nothing to fill in.
What BillZap stores, and where
Everything you enter is written to a local database inside the app's private storage area on your device. That includes your business profile and GSTIN, your bank and UPI details, your customers, your product catalogue, every invoice you make, your expenses, and your settings.
No copy of any of it is sent to us or to anyone else. We could not produce your invoices if a court asked us to, because we do not have them.
Uninstalling the app deletes this storage, and with it everything above. Take a backup first if you want to keep it — settings has a backup option that writes a single file you choose the location of. That file is yours; it is not uploaded anywhere.
What the app asks Android for
Android lists every permission an app declares. Here is each one BillZap asks for and what it is actually used for.
Used only by voice billing, and only while you are holding the button. BillZap does not record, keep or transmit audio itself — it hands the microphone to Android's own speech recognition service and receives text back. See the note below, because on most phones that service is Google's.
Used for the optional app lock. The check happens inside Android; BillZap receives only a yes or a no. Your fingerprint is never exposed to the app and never stored by it. Your PIN, if you set one, is stored on the device as a hash, not as the number you typed.
Used when you save an invoice PDF, export a report, or write and read back a backup file. BillZap does not browse your storage or read files you have not picked.
Declared so the app can print to a printer on your WiFi and open a link when you tap one. No invoice, customer, report or setting is ever uploaded. The app's fonts and everything else it draws are bundled inside the download, so BillZap makes no call of its own on startup or at any other time.
Voice billing, in plain terms
Speech recognition is Android's, not ours. When you use voice billing, the audio goes to whichever recognition service your phone is set up to use. On most Android phones that is Google's, and Google may process the audio on its servers under Google's own privacy policy — the same as when you dictate a message in any other app.
BillZap receives only the recognised text, uses it to fill in the invoice, and keeps no audio. If you would rather nothing left the phone at all, simply do not use voice billing — every other part of the app works with the network off.
Sharing an invoice
When you share a bill, BillZap makes a PDF and hands it to Android's share sheet. You choose where it goes — WhatsApp, email, a printer, your own files. From that point the invoice is in that app's hands and its privacy policy applies, not ours. Nothing is shared unless you tap share.
UPI payments
The QR code on an unpaid invoice encodes your own UPI ID and the amount due. Your customer scans it and pays you from their UPI app, straight into your bank account.
BillZap is not a payment processor and is not a party to the payment. We do not see, hold, route or take a cut of any money. We have no way of knowing whether an invoice was paid unless you mark it paid yourself.
Children
BillZap is a tool for running a business and is not directed at children. Because the app collects nothing, it collects nothing from children either.
Your rights over your data
Data protection law gives you rights to access, correct, export and delete personal data a company holds about you — including under India's Digital Personal Data Protection Act, 2023 and the GDPR where it applies.
We hold none, so there is nothing to request from us. In practice those rights are already in your hands: the data is on your device, you can edit or delete any of it in the app, you can export it as PDF or CSV at any time, and uninstalling removes all of it.
This website
Everything above is about the app. This website is a separate thing and it does collect two pieces of information. Keeping that distinction clear matters more than a tidy claim, so: the app collects nothing; the website has analytics and asks for your email before the download. Nothing the website learns is ever sent to the app, and nothing the app holds is ever sent to the website.
Your email address, when you download
The download button asks for an email address. It is used to tell you when a new version is out, and for nothing else. We store the address, the domain part of it, and the date — no name, no IP address, no device details — in a private Google spreadsheet.
It is never sold, never passed to anyone else, and never used to message you about anything but BillZap. To have it removed, open an issue at the link at the bottom of this page and it will be deleted from the sheet.
You do not have to give it. The same file is on the public releases page at github.com/dakshu007/billzap/releases, with nothing to fill in. It is the identical APK.
Analytics
This site uses Google Analytics to count visits and see which pages people read. It records the usual things a web analytics tool records — pages viewed, roughly where in the world the visit came from, what kind of device and browser — and it sets cookies to recognise a returning browser. Google processes that data under its own privacy policy.
It runs on this website only. There is no analytics of any kind inside the app, which is the part that holds your invoices, and there is no way for the two to meet.
Analytics loads only after the page is up and you have started reading, so blocking it with a content blocker, a tracking protection setting, or Do Not Track costs you nothing here — the site works identically without it.
Hosting
Netlify serves the site and keeps standard server access logs — see Netlify's privacy policy. The pages themselves load no external fonts, no CDN scripts and no embeds; a strict content security policy blocks anything that is not listed here from loading at all.
Changes to this policy
If the app's behaviour changes in a way that affects your privacy, this page changes with it and the date at the top is updated. The app is open source, so any change is visible in the commit history as well.
Contact
Questions about this policy, or something here that does not match what you see in the app? Open an issue at github.com/dakshu007/billzap/issues — it is a public, tracked channel and the fastest way to reach a real answer.