💾
Offline First
Your data stays on your device. We don't send it to any server.
🚫
No Data Selling
We never sell, rent, or share your personal data with third parties.
☁️
Optional Cloud Backup
Google Drive backup is fully optional. You control when and what is backed up.
🔐
PIN Protected
App access is secured by a local PIN that only you know.
🔑
Google Sign-In
Cloud features use Google Sign-In for secure authentication. We receive only your email and name.
🗄️
Server Storage (ERP)
Our upcoming ERP product stores data on our secure servers. Fully disclosed and opt-in.
ℹ️
Simple Version: Dukan Daftar is an offline-first app. All your shop data — products, sales, credit records, expenses — is stored locally on your phone. We do not have access to it. Optional Google Drive backup is the only way data leaves your device for the core app. If you use Google Sign-In for cloud features, we receive only your name and email for authentication. Our upcoming ERP product uses secure server storage — this is fully disclosed and opt-in.
Dukan Daftar is designed as an offline-first application. The vast majority of data you enter into the app stays entirely on your device and is never transmitted to us or any third party.
📱 Data You Enter Into the App (Stored Locally Only)
Shop name, owner name, and contact details (setup information)
Product names, prices, barcodes, and stock quantities
Customer names, phone numbers, and credit balances
Supplier names, contact info, and purchase records
Sales transactions, receipts, and daily records
Expense records and categories
PIN lock code (stored locally, encrypted)
🔑 Data Received via Google Sign-In (Cloud Features)
Your Google account email address — used solely to identify your account for backup and cloud sync
Your Google display name — shown within the app to confirm which account is connected
A unique Google user identifier — used to link your backup data to your account securely
📊 Data We May Collect Automatically (Anonymized)
Crash reports and error logs (to fix bugs — contains no personal data)
General app usage analytics (screens visited, features used — no business data)
Device type and Android version (for compatibility improvements)
We never collect your actual business data, customer information, transaction amounts, or any shop-specific content.
2
How We Use Your Information
The limited anonymized data we may collect is used exclusively to:
Fix bugs and crashes reported through automated crash reporting
Improve app performance and user experience
Understand which features are most useful to plan future updates
Ensure compatibility with different Android device models
We do not use your information for advertising, profiling, or any commercial purpose beyond operating and improving the app.
3
Data Storage & Security
All your business data is stored locally on your device using the device's secure local storage. This means:
Your data never leaves your phone unless you explicitly choose to back it up
No internet connection is required to use the core features of the app
Even without internet (load shedding, no SIM), the app works completely normally
Your PIN is stored in encrypted form — we cannot access it
Uninstalling the app will delete all local data from the device
🔒
Security Note: We strongly recommend setting a PIN lock and taking regular local backups. If your phone is lost or reset, local data may be unrecoverable unless you have a backup saved to Google Drive or your device storage.
4
Google Sign-In & Authentication
Certain features of Dukan Daftar — including Google Drive backup and upcoming cloud sync features — require you to sign in with your Google account. We use Google Sign-In (OAuth 2.0) as a secure authentication method.
🔑 What We Receive from Google Sign-In
Email address — to identify your account and link it to your backup data
Display name — shown within the app so you can confirm which Google account is active
Profile photo (optional) — displayed in the app interface only, not stored on our servers
Google user ID — a unique identifier used to securely associate your data with your account
ℹ️
Important: Google Sign-In is only used for authentication. We do not access your Gmail, Google Contacts, Google Photos, or any other Google service beyond what you explicitly authorize (Google Drive backup). You can revoke access at any time from your Google account settings at myaccount.google.com.
Google Sign-In is governed by Google's own Privacy Policy at policies.google.com. By using this feature, you agree to Google's Terms of Service in addition to ours.
Dukan Daftar offers an optional Google Drive backup feature available in our Enterprise plan. Here is exactly how it works:
☁️ How Google Drive Backup Works
You must explicitly connect your Google account to enable this feature
Your backup file is saved to your own Google Drive account — not ours
We do not have access to your Google Drive or the backup files
The backup contains an encrypted copy of your local database
You can delete your backup from Google Drive at any time
You can disconnect your Google account from the app at any time in Settings
Google Drive is governed by Google's own Privacy Policy (policies.google.com). By using the Google Drive backup feature, you agree to Google's Terms of Service in addition to ours.
6
ERP Product & Server Storage
Dukan Daftar is currently an offline-first application. However, our upcoming Dukan Daftar ERP product — designed for larger businesses with multi-branch and cloud requirements — will store data on our secure servers.
🗄️ What Changes with the ERP Product
Business data (inventory, accounts, employee records) will be stored on our secure cloud servers
Data is encrypted in transit (TLS) and at rest (AES-256)
Server storage is required for ERP features such as multi-branch sync and real-time dashboards
You retain full ownership of all data — we do not use it for any commercial purpose
You can request a full data export or deletion at any time by contacting us
ℹ️
Note: Server storage only applies to users who subscribe to the ERP product. The core Dukan Daftar shop management app remains offline-first. When the ERP product launches, we will update this Privacy Policy with full details and notify all users before any server storage becomes active for their account.
Dukan Daftar may use the following third-party services, each governed by their own privacy policies:
Google Sign-In (OAuth 2.0) — for secure account authentication when using cloud features. We receive only your email, display name, and user ID. Governed by Google's Privacy Policy.
Google Drive API — for optional cloud backup (Enterprise plan only). Your backup is saved to your own Google Drive. Governed by Google's Privacy Policy.
Firebase Crashlytics — for crash reporting and stability improvements. Collects anonymized crash data only, no personal information.
Google Play Services — for app distribution and basic Android services.
We do not use any advertising networks, social media trackers, or marketing analytics tools in the app.
Dukan Daftar requests the following Android permissions and here is exactly why each one is needed:
Camera — to scan product barcodes for quick sale and inventory updates. No photos are captured or stored by the app.
Storage / File Access — to save local backup files to your device's storage so you can later restore your data.
Internet — only used for Google Sign-In, Google Drive backup sync (optional), and crash reporting. Not required for daily use.
Bluetooth — to connect with Bluetooth thermal receipt printers (Enterprise plan only).
Vibration — for haptic feedback on barcode scan success.
You can revoke any permission at any time through your Android device settings. Revoking camera permission will disable barcode scanning. Revoking storage permission will disable local backup.
Dukan Daftar is a business management application intended for use by adults operating shops and retail businesses. It is not directed at or designed for children under 13 years of age.
We do not knowingly collect any personal information from children under 13. If you believe a child under 13 has provided information through our app, please contact us at info@dukandaftar.pk and we will promptly address the situation.
Since your business data is stored locally on your device, you have complete control over it at all times:
Access: All your data is visible and accessible within the app at any time.
Export: You can export your data as a backup file at any time from Settings → Backup.
Delete: Uninstalling the app permanently deletes all local data. You can also clear individual records from within the app.
Opt out of analytics: You can disable crash reporting and analytics in Settings → Privacy.
Google Sign-In revoke: You can disconnect your Google account at any time in Settings → Backup → Google Drive, or via myaccount.google.com.
Google Drive disconnect: You can remove your backup files directly from your Google Drive at any time.
11
Data Retention & Deletion
Local data: Your business data is retained on your device for as long as the app is installed and you choose to keep it. Uninstalling the app deletes all local data permanently.
Google Sign-In data: If you disconnect your Google account from the app, we no longer have access to your Google profile information. Any stored Google user identifier is removed from our systems within 30 days of disconnection.
Google Drive backups: Backup files in your Google Drive are retained until you delete them manually from your Google Drive account or disconnect the app.
Crash reports: Anonymized crash data is automatically deleted from our analytics systems after 90 days.
For the core app, we do not retain identifiable user data on our servers. For the ERP product (when launched), data retention terms will be provided at time of subscription.
12
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the app, legal requirements, or our practices. When we make significant changes, we will:
Update the "Last Updated" date at the top of this page
Show an in-app notification about the changes
Post the updated policy on our website at dukandaftar.pk
Continued use of the app after changes are posted constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us. We typically respond within 48 hours.