PocketGST Privacy Policy

Effective Date: April 20, 2026 Last Updated: April 20, 2026

1. Introduction

Welcome to PocketGST, a mobile application for GST calculation and invoice management ("App" or "Service"). This Privacy Policy explains how QalbIT Infotech Private Limited ("QalbIT," "we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you use PocketGST.

QalbIT Infotech Private Limited is a company incorporated under the Companies Act, 2013, with its registered office at:

C-109, Siddhi Vinayak Towers, Near Kataria Arcade, Opp. S.G. Highway, Makarba, Ahmedabad, Gujarat, India 380051

GST Number: 24AAACQ8356Q1ZS CIN: U72900GJ2022PTC132898

By using PocketGST, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

2. Information We Collect

The information we collect depends on whether you use the Free tier or Pro tier. On both tiers, your business data (invoices, calculations, customers) stays on your device unless you choose to share exports (e.g. PDF) through other apps.

2.1 Information You Provide Directly

All Users (Free and Pro):

No account creation required: You can use PocketGST without creating a QalbIT account or providing email or phone for core features.
Business data you create: Invoices, GST calculations, customer records, business profile information, and notes you enter into the App. This data is stored locally on your device and is not transmitted to QalbIT's servers.

Pro Tier Users (additional):

Payment information: We do not collect or store your payment details (credit card, debit card, UPI, bank account). All payments are processed by Google Play Billing or Apple App Store. We receive only transaction receipts and subscription status information.

2.2 Information Collected Automatically

Device Information:

Device model and manufacturer
Operating system type and version (Android/iOS)
App version number
Unique device identifiers (Android ID, IDFA - used for crash reporting and analytics only if you opt-in)
Screen resolution and device language settings

Usage Information (Only if you opt-in to analytics):

Features you use within the App
Frequency and duration of App usage
Crash logs and error reports
Performance metrics (app load time, calculation speed)

Important: Usage analytics are opt-in only. By default, we do NOT collect usage data. You can enable or disable analytics at any time in the App's Settings.

2.3 Information We Do NOT Collect

We do NOT collect:

Your exact location (GPS coordinates)
Contacts from your phone
Photos or media files (except invoice templates you explicitly select)
SMS or call logs
Biometric data
Your invoices, calculations, or business data (stored on your device, not on QalbIT servers)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Maintain the Service

Enable GST calculations and invoice generation
Store your business data locally on your device
Process subscription payments through Google Play/Apple App Store
Verify your Pro tier subscription status

3.2 To Improve the Service (Opt-In Only)

Analyze app usage patterns to identify and fix bugs
Improve app performance and user experience
Develop new features based on user behavior
Generate crash reports to fix technical issues

3.3 To Communicate With You

Send important service announcements (e.g., Terms updates, scheduled maintenance)
Respond to your support requests
Send subscription renewal reminders (Pro users)
Notify you about new features or updates (you can opt-out)

3.4 To Comply With Legal Obligations

Comply with Indian laws, including GST Act, Income Tax Act, and Digital Personal Data Protection Act, 2023
Respond to legal requests from government authorities or courts
Prevent fraud, abuse, or violations of our Terms of Service
Maintain transaction records for tax and accounting purposes

4. How We Store and Protect Your Data

4.1 Data Storage Architecture

Offline-First Model (Free and Pro):

All business data is stored locally on your device using the App's private storage (optional AES-256 encryption may be available in Settings)
Your invoices, calculations, customer records, and business profile remain in the App's storage on your phone
QalbIT does not have access to your business data
No business data is transmitted to QalbIT's servers
Data remains on your device until you manually delete it, export it, or uninstall the App

Important: QalbIT does not operate cloud servers to store your invoices, customers, or calculations. Pro unlocks more features and limits on the same device — not cloud storage of your business data on our servers.

4.2 Data Security Measures

We implement industry-standard security measures to protect your information:

Technical Safeguards:

AES-256 encryption for local data storage (optional, user-enabled)
TLS/SSL encryption for data transmission (when connecting to Play Store or other services you use)
Regular security updates and patches
Code obfuscation to prevent reverse engineering

Administrative Safeguards:

Limited employee access to any user data (only authorized support staff, only when necessary for support requests)
Regular security training for employees
Data handling policies and procedures
Third-party security audits (when applicable)

Physical Safeguards:

Your device security (screen lock, biometric authentication) protects locally stored data

4.3 Data Security Limitations

No system is 100% secure. You acknowledge that:

Data stored on your device is subject to your device's security (if your device is compromised, data may be accessed)
If you share your device or its unlock credentials, others may access your data
QalbIT cannot guarantee absolute security and is not liable for unauthorized access due to factors beyond our control

Your Responsibility:

Use a strong screen lock (PIN, password, biometric) on your device
Do not share your device or its unlock credentials
Export PDFs or CSV (Pro) before changing phones or uninstalling the App
Regularly update your device OS and the PocketGST App
Report any suspected security issues to support@qalbit.com immediately

5. Data Sharing and Disclosure

5.1 We Do NOT Sell Your Data

QalbIT does not sell, rent, or trade your personal information or business data to third parties for marketing purposes. Your invoices, calculations, and customer records are private and are never shared with advertisers or data brokers.

5.2 When We Share Information

We may share limited information in the following circumstances:

With Service Providers:

Google Play / Apple App Store: For payment processing and subscription management. They receive transaction details but not your business data.
Crash Reporting Services: If you opt-in to analytics, anonymized crash logs may be sent to Firebase Crashlytics or similar services to help us fix bugs.

With Your Consent:

If you explicitly authorize us to share information (e.g., when contacting support, you may share invoice samples for troubleshooting)

For Legal Compliance:

To comply with applicable laws, regulations, or legal processes (court orders, government requests)
To detect, prevent, or address fraud, security issues, or violations of our Terms
To protect the rights, property, or safety of QalbIT, our users, or the public
In connection with a merger, acquisition, or sale of assets (users will be notified)

Important: When sharing data for legal compliance, we will:

Verify the legitimacy of the request
Share only the minimum information necessary
Notify you if permitted by law (unless notification would compromise an investigation)

5.3 Third-Party Services We Use

PocketGST integrates with the following third-party services:

Service	Purpose	Data Shared	Privacy Policy
Google Play Billing	Payment processing	Transaction details, subscription status	https://policies.google.com/privacy
Apple App Store	Payment processing (iOS)	Transaction details, subscription status	https://www.apple.com/legal/privacy/
Firebase Crashlytics	Crash reporting (opt-in)	Anonymized crash logs, device info	https://firebase.google.com/support/privacy

We do not control third-party services. Their privacy practices are governed by their own privacy policies. We recommend reviewing them.

6. Your Rights and Choices

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws, you have the following rights regarding your personal data:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To request access:

Email us at support@qalbit.com with subject "Data Access Request"
Provide your registered email address (if Pro user) or device details (if Free user)
We will respond within 30 days with a copy of your data (if any)

Note: Since Free tier data is stored locally on your device only, you already have full access to it within the App.

6.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to correct it:

Edit your business profile, customer records, or invoices directly in the App

6.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data:

Uninstall the App or use in-app data deletion options. All local business data on your device will be deleted.
Pro users: cancel your subscription if applicable, then email support@qalbit.com to request deletion of transaction records we hold (we retain only what is legally required)

6.4 Right to Data Portability

You have the right to receive your data in a structured, commonly used format:

Export invoice PDFs from the App. Pro users may also export CSV from reports where available in the App.

6.5 Right to Restrict or Object to Processing

You can restrict how we process your data:

Opt-out of analytics: Disable "Share usage data" in Settings (disabled by default)
Opt-out of marketing emails: Unsubscribe using the link in emails (support and transactional emails cannot be opted out)

6.6 Right to Withdraw Consent

If we process your data based on consent (e.g., analytics), you can withdraw consent at any time by disabling analytics in Settings. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

6.7 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you have the right to lodge a complaint with:

Data Protection Board of India (when established under DPDP Act)
Consumer Forums under the Consumer Protection Act, 2019
Email us first: support@qalbit.com – we will work to resolve your concerns

7. Data Retention

7.1 How Long We Keep Your Data

Free Tier:

Business data (invoices, calculations, customers): Stored on your device indefinitely until you manually delete it or uninstall the App
No automatic deletion: We do not delete your data (because it's on your device, not our servers)

Pro Tier:

Business data on device: Same as Free tier — on your device until you delete it or uninstall the App
Transaction records: We retain subscription purchase receipts and transaction logs for 7 years as required by Indian Income Tax Act and GST Act
Billing identifiers: Retained as long as needed for subscription support, plus a reasonable period after cancellation

Analytics Data (Opt-In Only):

Anonymized usage data and crash logs are retained for 12 months, then automatically deleted

7.2 Deletion After Subscription Cancellation (Pro Users)

When you cancel your Pro subscription:

You retain Pro access until the end of the current paid period
Your local business data remains on your device until you delete it
Your transaction records are retained for 7 years (legal requirement)

7.3 Deletion After App Uninstall

When you uninstall PocketGST:

Local data: All business data stored on your device is deleted by the operating system
QalbIT's records: Transaction records are retained for 7 years (legal requirement)

7.4 Legal Retention Requirements

We may retain certain data longer if:

Required by Indian tax laws (Income Tax Act, GST Act) – typically 7 years
Required by a court order, legal proceeding, or government investigation
Necessary to enforce our Terms of Service or protect our legal rights

8. Children's Privacy

PocketGST is not intended for use by children under the age of 18. We do not knowingly collect personal information from children.

If you are under 18, you may only use PocketGST under the supervision of a parent or legal guardian who agrees to these Terms and this Privacy Policy.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information as soon as possible. If you believe a child has provided us with personal information, please contact us at support@qalbit.com.

9. International Data Transfers

PocketGST is designed for users in India. Your business data is stored locally on your device. We do not upload it to QalbIT servers.

Cross-Border Data Transfers: If you are located outside India and use PocketGST, limited information (e.g. Play Store billing, opt-in analytics) may be processed by third parties in other countries. By using the App, you consent to such transfers where applicable.

10. Changes to This Privacy Policy

10.1 Right to Modify

QalbIT reserves the right to modify this Privacy Policy at any time. When we make changes, we will:

Update the "Last Updated" date at the top of this document
Post the revised Privacy Policy in the App and on our website at https://pocketgst.com/privacy
Notify you via in-app notification or email (if you have provided an email)

10.2 Acceptance of Changes

Material changes (e.g., changes to data collection practices, sharing policies) will take effect 14 days after notice. By continuing to use PocketGST after the notice period, you accept the revised Privacy Policy.

Non-material changes (e.g., clarifications, formatting, contact information updates) take effect immediately upon posting.

If you do not agree to the revised Privacy Policy, you must stop using the App and delete your data.

10.3 Version History

Previous versions of this Privacy Policy are available upon request at support@qalbit.com.

11. Third-Party Links and Services

PocketGST may contain links to third-party websites, services, or resources (e.g., GST portal, payment gateways). This Privacy Policy does not apply to third-party services.

We are not responsible for:

The privacy practices of third-party services
Data collection by third-party websites you visit through links in the App
Security breaches or data loss at third-party services

We recommend:

Reviewing the privacy policies of any third-party services you use
Using a strong screen lock and keeping your device OS updated

12. California Privacy Rights (CCPA) - If Applicable

Although PocketGST is designed for users in India, if you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request details about the personal information we collect, use, and disclose
Right to Delete: Request deletion of your personal information (subject to legal exceptions)
Right to Opt-Out: Opt-out of the "sale" of personal information (Note: We do NOT sell personal information)
Right to Non-Discrimination: You will not be discriminated against for exercising your CCPA rights

To exercise these rights, contact us at support@qalbit.com with subject "CCPA Request".

13. European Privacy Rights (GDPR) - If Applicable

Although PocketGST is designed for users in India, if you are a resident of the European Economic Area (EEA), you may have additional rights under the General Data Protection Regulation (GDPR):

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate personal data
Right to Erasure: Request deletion of your personal data
Right to Restrict Processing: Limit how we process your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to processing of your personal data
Right to Withdraw Consent: Withdraw consent for data processing

To exercise these rights, contact us at support@qalbit.com with subject "GDPR Request".

Legal Basis for Processing:

Contract Performance: To provide PocketGST services (Terms of Service)
Legitimate Interests: To improve the App and prevent fraud
Consent: For optional features like analytics
Legal Obligation: To comply with Indian laws

14. Security Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

Investigate the breach immediately
Take steps to contain and remediate the breach
Notify affected users within 72 hours of becoming aware of the breach (as required by DPDP Act)
Notify relevant authorities (Data Protection Board of India, Cyber Crime Cell) if required by law
Provide information about the breach, data affected, and steps you can take to protect yourself

Your Actions: If you suspect a security breach:

Change your device screen lock and review installed apps
Export important data if the device may be compromised
Contact us at support@qalbit.com with details

15. Cookies and Tracking Technologies

PocketGST does not use cookies because it is a native mobile app, not a website.

Analytics and Tracking (Opt-In Only): If you opt-in to "Share usage data" in Settings, we use Firebase Analytics to collect:

App usage patterns (anonymized)
Crash reports and error logs
Device information (model, OS version)

You can disable analytics at any time in Settings > Privacy > Share usage data (toggle OFF).

Third-Party Tracking: Google Play Services and Apple App Store may use their own tracking technologies for payment processing and app distribution. We do not control their tracking practices.

16. Do Not Track (DNT) Signals

PocketGST does not respond to "Do Not Track" (DNT) browser signals because:

It is a mobile app, not a website
Analytics are opt-in by default (disabled unless you enable them)
We do not track users across apps or websites

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

QalbIT Infotech Private Limited

Privacy Officer / Data Protection Officer: Email: support@qalbit.com Subject Line: "Privacy Policy Inquiry"

Registered Office: C-109, Siddhi Vinayak Towers, Near Kataria Arcade, Opp. S.G. Highway, Makarba, Ahmedabad, Gujarat, India 380051

App Support: https://pocketgst.com/support Website: https://qalbit.com

GST Number: 24AAACQ8356Q1ZS CIN: U72900GJ2022PTC132898

Response Time: We will respond to your inquiries within 30 days (or sooner when possible).

18. Consent and Acknowledgment

BY USING POCKETGST, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY.

You specifically acknowledge and consent to:

The collection and use of information as described in this Privacy Policy
Storage of your business data locally on your device (Free and Pro tiers)
Processing of transaction data by Google Play Billing or Apple App Store for payment purposes
Optional sharing of usage data if you opt-in to analytics
Data retention as described in Section 7
Cross-border data transfers if you use the App outside India

IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, PLEASE DO NOT USE POCKETGST.

End of Privacy Policy

Document Control

Version	Date	Changes
1.0	April 20, 2026	Initial publication

Compliance Statement:

This Privacy Policy is designed to comply with:

Digital Personal Data Protection Act, 2023 (DPDP Act) - India
Information Technology Act, 2000 - India
Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 - India
General Data Protection Regulation (GDPR) - European Union (if applicable)
California Consumer Privacy Act (CCPA) - United States (if applicable)

Legal Review Recommended: While this Privacy Policy is comprehensive, we recommend having it reviewed by a privacy lawyer licensed in India to ensure full compliance with evolving regulations and specific business circumstances.