Leave whenever you like
Bills, stock and the khata export to CSV, free, with no tier and no support request. Anti-lock-in costs us nothing and it is the fear worth answering first.
Your books. Here is the list of who can read them.
Not adjectives — a table. For each thing in your shop, who sees it: you, the boy at the counter, and us. Every “no” below is enforced by the server, which is the only kind of no that holds.
The short version
We cannot see your money, and we built it that way.
Support can tell whether your bills are syncing. They cannot open your khata, read a customer's name, or see a single rupee figure for your shop. It is not a policy we ask staff to follow — the endpoints do not return it.
A support conversation is “my bill did not sync” or “this product is flagged”. It is never “how much did you make”. A capability nobody needs only has a downside.
Access
Who sees what
The middle column is the one worth reading twice — it is the reason you can hand the phone to someone else during a rush.
| In your shop | You, the owner | Your staff | Us |
|---|---|---|---|
| The day's takings | Yes — it is the first thing on the home screen. | No. There is no setting that turns this on. | No. Not per shop, not ever. |
| Individual bills | All of them. | Only the ones they made themselves. | No. |
| The udhaar book | Yes. | No. Staff cannot open it at all. | No. Customer names and balances are off limits to support by design. |
| Prices, and changing them | Yes. | Reads them. Changing one needs a permission you grant per person, off by default. | No. |
| Which phones are signed in | Their own. Every person sees only their own devices. | Their own, and they can sign a lost phone out themselves. | No. |
| Whether the shop is syncing | Yes. | Yes — it is on the screen while they bill. | Yes. This is how a stuck sync gets noticed before you have to report it. |
Commitments
Four things that stay true
Delete means delete
One request removes the account and its data. The page that describes it is linked from inside the app, and it is a real process rather than a form that opens a ticket.
Your phone has a copy
The app writes to the phone first and syncs after. If our servers vanished tomorrow, the bills you made today would still be on your handset.
Nothing on your receipt but you
No logo, no watermark, no 'sent via'. The receipt is the shop's signboard, not our billboard, so there is no de-branding to sell back to you later.
Why free
Free, and you are not the product
So how does this pay for itself?
Today it mostly doesn't need to. The app works offline, so it barely touches a server; the running cost of a pilot shop is close to nothing. That is a real answer and it only works at this size, which is why the pilot is small.
Later, money comes from places where the value is already obvious — listing placement for shops that want it, ordering between businesses, analytics for people who ask for analytics. Never from the till.
What does “never from the till” mean exactly?
Billing, stock, the udhaar book and sync do not become paid, get row limits, get a device count, or start charging to restore a backup. Those are the five ways this category usually monetises, and each one works by removing something that already worked.
A paid listing will also never be allowed to outrank a real search result. If we ever sell placement it is a separate, labelled, capped slot — not a thumb on the scale.
Will you sell my data?
No, and the sharpest version of that promise is about the khata specifically: the udhaar book is never sold, never shared, and never monetised. It is the record of a relationship that existed before this app and will outlast it.
Lending against your transaction history is the obvious way to make money here. It is also the obvious way to lose the trust the whole thing depends on, and it is written down internally as a decision that cannot be made quietly.
Who is actually behind it?
A small team building this in India, in the open, with a pilot you can talk to a human in. There is no growth team and no ad budget — which is also why you found this page rather than an advertisement.
Straight answers
Things we are deliberately not claiming
Every security page on the internet says “bank-grade” and “encrypted”. Here is where those words would be doing more work than they deserve.
- Not end-to-end encrypted
- Traffic is encrypted in transit and data is encrypted at rest, but our server can read your shop's rows — it has to, in order to sync them between your phones and render your public page. Anyone claiming end-to-end encryption on a product that syncs and serves a web page is describing something else.
- Not “we technically cannot access it”
- An operator with database access can reach data. The honest control is that the operations console cannot show per-shop revenue or customer references to anybody, every action on it is written to an audit log including reads, and the wide-open admin panel is closed in production. Scoped and recorded beats an impossible promise.
- Not a backup service
- Your bills sync to us and you can export them any time, but the app is not a vault and does not claim to be one. Take the CSV occasionally. That advice is free and it is what we would tell a friend.
- Not audited or certified
- There is no SOC 2 report and no external penetration test to point at, because this is a pilot and buying one would be theatre at this stage. When there is, it will be linked here rather than described.
The other half of trust
Nobody worries about a shop app until the network drops mid-sale. That is a separate page, and it is the one that shows the actual mechanism.