Privacy Policy
SubarnaPasal is a business tool used by jewellery shops to manage their own stock, prices and sales. This policy explains what the app collects, why, and what happens to it.
Who we are
SubarnaPasal is operated at mysuvarnapasal.com. Questions about this policy: adminTeam@mysuvarnapasal.com.
What the app collects
| Data | Why | Where it is kept |
|---|---|---|
| Account details you enter at sign-up: shop name, username, email address and/or mobile number, password | To create and sign in to your shop account; email is used for password-reset links | Our server. Passwords are stored only as a one-way hash. |
| Your shop's business records: inventory items, prices, metal rates, customers, orders and invoices you enter | This is the service — it is your shop's data | Our server, in a store that only your shop account can read or write |
| A sign-in token | To keep you signed in between launches | On your device, in the platform's encrypted storage (Android EncryptedSharedPreferences / iOS Keychain). Excluded from device backups. |
| Camera images (Android and iOS) | To scan item barcodes at the counter | Processed on the device only; images are never stored or uploaded |
| Face ID / Touch ID / fingerprint (optional) | To unlock the app without retyping your password | Handled entirely by the operating system; the app never receives biometric data |
| Usage analytics (website): which pages and features are opened, and counts of actions such as a sale being completed, together with browser type, screen size, approximate country and a random device identifier | To see which features are used and improve the app | Google Analytics (Google LLC), via Firebase. Customer names, phone numbers, item details and your account details are never included. The signed-in account is identified only by a one-way hash. |
| Crash reports (Android and iOS apps): device model, OS and app version, and the technical details of a crash | To find and fix bugs | Firebase Crashlytics (Google LLC). Crash reports contain no shop or customer data. |
| Names and phone numbers customers enter on your shop's public request link | So the shop knows who asked for which items | Our server, visible only to that shop's account |
What the app does not do
No advertising, no selling or sharing of data with third parties, no location tracking, no access to your contacts or photos. Analytics is limited to anonymous usage counts as described above and is never combined with your shop's records.
Cookies and local storage
The website stores your sign-in token, language and theme choice in your browser's local storage so you stay signed in and keep your preferences. Google Analytics sets its own cookies (for example _ga) to tell returning browsers apart; they hold a random identifier, not your name. Blocking these cookies or using an ad blocker does not affect how the app works.
Third-party services
The server fetches the international gold price and currency exchange rates from public market-data providers. Those requests are made by our server, not from your device, and contain no information about you or your shop.
Google LLC processes analytics and crash data on our behalf under the Google Privacy Policy. Our web host stores the server and database. No other company receives your data.
Security
All traffic between the app and the server uses HTTPS. Each shop's data is isolated to its own account. Password-reset links expire after 60 minutes and can be used once.
Retention and deletion
Your data is kept for as long as your shop account exists. A shop admin can close the shop at any time from Settings → Deactivate store: the shop is locked read-only for one month (so records can be printed) and can be reopened during that month; after that, all of its data is permanently deleted. You can also email adminTeam@mysuvarnapasal.com from the address on the account to request deletion; it is completed within 30 days. If a subscription lapses, the shop is warned for one month, locked read-only for a further month, and then deleted in the same way. Signing out on a device removes the sign-in token from that device. Event-level analytics data is kept in Google Analytics for two months (the default) and then deleted automatically; only aggregated reports remain.
Children
SubarnaPasal is a business application and is not directed at children under 13.
Changes
If this policy changes, the new version will be published at this address with a new effective date.