Karobaar — Privacy Policy

Last updated: 1 October 2026

Karobaar is an inventory and billing app for shops. This policy explains what we store, why, and how you can get it deleted. It applies to the Karobaar web app and the Karobaar Android app (com.karobaar.karobaar).

What we collect

Your account — the email address you sign in with (or the email and name from your Google account, if you use Google sign-in), your name, and your mobile number, which we ask for when you create a shop. Each login has an account ID. Authentication is handled by Google Firebase Authentication. We never see or store your password.
Your shop's business data — the data you enter: items and prices, customers and suppliers (including any phone number, address or GSTIN you choose to record), invoices, payments, credit notes, expenses, repair job sheets and any notes you type, plus your shop's own details (name, address, GSTIN, UPI ID) and the logo and signature images you upload for your bills.
Staff records — if you use staff attendance and salary slips: employee names, attendance and salary details. When a staff member punches attendance, the app records their location at that moment (only with their permission, only at the punch, never in the background) so the owner can see where the punch was made. A punch still saves if location is refused.
Usage within your shop — when each member last opened the app, and a log of changes (who edited or deleted what), shown to the shop's owner.
Crash reports — if the app crashes, a technical report (error, app version, device model) is sent to our crash-reporting service, Sentry. It is configured to carry no names, emails, bills or shop data.

We do not collect your contacts, your messages, background location, or advertising identifiers. There are no ads and no advertising or tracking SDKs in the app. We do not sell or share your data with other companies, and we do not use it for advertising.

Camera

The app asks for camera permission only so you can scan barcodes and IMEI numbers. Scanning happens on your device; the camera image is never uploaded or stored — only the decoded number is, and only when you save it to a record.

Where it is stored

Your data is stored in Google Cloud Firestore under your shop's own isolated space, and is encrypted at rest. Access is enforced by security rules: only users who are members of your shop can read or write its data. A copy is cached on your device so the app works offline.

Who can see it

People you invite to your shop with your share code can see your shop's data. The shop owner sees profit and cost figures; staff members do not see those screens. Google (Firebase) processes the data on our behalf as our hosting provider, and Sentry processes crash reports on our behalf. We do not share your data with anyone else, except where required by law.

Messages you send

Payment reminders and repair updates open your own WhatsApp or SMS app with the message prefilled — you press send. We do not send messages on your behalf and we operate no messaging gateway.

Payments

Karobaar has a free plan and paid plans. If you buy a paid plan, the payment is handled by our payment provider (such as Razorpay or a UPI payment link). They process your card / UPI / bank details on their own secure systems — we never see or store your full card number or UPI PIN. We receive only the fact that a payment succeeded, the amount, and a reference number, which we use to activate your plan and issue an invoice.

The UPI "pay" links your shop sends to its own customers are a direct hand-off from the customer's UPI app to your shop's UPI ID. The money never passes through us; we are not a payment processor and we hold no funds. The pay page carries only what is already printed on the bill (shop name, shop's UPI ID, amount, bill number) — never the customer's name or phone.

Your rights

You can access and correct your data at any time inside the app, export it as a backup (Home → ☁ Backup), and delete it as described above. You may also ask us to confirm what we hold about you, or to delete it, by writing to the contact below. We will respond within 30 days.

Deleting your account and data

In the app: Home → ⚙ Settings → scroll to Danger zone → Delete my account.

If you are the shop owner, this deletes your account and the entire shop: all items, parties, invoices, payments, expenses and repair jobs, for every user in that shop.
If you are staff, this deletes your account and removes your access. The shop's data belongs to the owner and remains.

Can't sign in? Email info@tuskerworks.com from the address on the account and ask for deletion. We'll action it within 30 days. Full steps, in English and Hindi: karobaar.co.in/delete-account.

Deletion is immediate. Deleted data stays in encrypted infrastructure backups for about 7 days before it is overwritten, and we use those backups for one thing only: if you tell us within 5 days that a deletion was not done by you, we can restore it. After that it is permanent. Export a backup first (Home → ☁ Backup) if you may need the data.

Retention

We keep your data for as long as your account exists. Delete your account and it is removed as described above. When a shop or an account is deleted we keep a deletion record — the name, email or phone number on the login, the date and time, the device and network address the request came from, and what was deleted — for up to 8 years, so that either of us can show what happened if it is ever disputed. It is used for nothing else.

Children

Karobaar is a business tool and is not directed at children under 13.

Changes

If this policy changes materially, we will update this page and the date at the top.

Contact

Questions about this policy or your data, or to raise a grievance: info@tuskerworks.com or phone +91 98806 69982 (Mon–Sat, 9am–6pm IST). Karobaar is operated by TuskerWorks Innovations Private Limited (CIN: U62011KA2026PTC226023), Bangalore, Karnataka, India.

See also our Terms of Service and Refund & Cancellation Policy.

← Back to Karobaar