This policy explains how CodeOrbit Technologies (“we”, “us”) handles information in the OrbitHisaab Android app (package com.codeorbitapp.orbithisaab) and on this website, hisaab.codeorbitapp.com. OrbitHisaab is a loan record (ledger) app for money lenders. It does not lend money, take loan applications or move money.
1. Information we collect
a. Your account
- Email and password, if you sign up with email. Passwords are handled by Firebase Authentication; we never see or store them.
- Name and email from Google, if you choose Google sign-in.
- Your mobile number, which you enter during setup.
b. Your business profile and settings
Owner name, business name, address (village, block, district, state), money-lending licence number and validity, preferred language, lending rules (maximum loan, interest-cap mode, defaults) and receipt footer text.
c. Records you enter
- Borrowers: name, father’s or husband’s name, mobile and alternate number, village and address, an optional photo, guarantor name and number, notes, and optionally the last 4 digits of an Aadhaar number. The app never accepts a full Aadhaar number.
- Loans and payments: amounts, interest rate and method, schedules, payment dates and modes, reference numbers (such as UPI UTR), receipt numbers, notes and reasons for reversals.
- Audit log: a record of each create, update and reversal (what changed and when) so your books stay trustworthy.
d. Kept only on your phone
- Your app-lock PIN, stored only as a salted hash in the phone’s secure storage, and whether fingerprint unlock is on. Fingerprint and face checks are done by Android; we never receive biometric data.
- An offline copy of your records, so the app works without internet.
e. What we do not collect
The app does not read your contacts, SMS, call log, photo gallery, files or location, and does not use the advertising ID. It contains no advertising and no analytics or crash-reporting SDKs.
2. Phone permissions
| Permission | Why |
|---|---|
| Internet | To sign in, sync your records and upload borrower photos. |
| Camera | Only when you choose to take a borrower’s photo, through your phone’s camera. |
| Fingerprint / face unlock | Only if you turn on app lock with biometrics. |
3. Information about borrowers
Borrower details are entered by you, the lender, and belong to your records. You are responsible for collecting them lawfully and for telling your borrowers that you keep their details in OrbitHisaab. We process this information only on your behalf and only to provide the app to you. A borrower who wants to see, correct or remove their details should contact the lender; they may also write to us at info@codeorbitapp.com and we will pass the request on and help where we can.
4. How we use information
- To run the app: store and sync your records, calculate schedules, and create receipts, statements and reports.
- To keep your account secure and prevent misuse.
- To answer your support requests.
- To meet legal obligations.
We do not use your information for advertising, profiling or credit scoring, and we do not sell it.
5. Where it is stored and how it is protected
We use Google Firebase: Firebase Authentication for sign-in, Cloud Firestore for records and Cloud Storage for borrower photos. Firestore and Cloud Storage are located in Google Cloud’s asia-south1 (Mumbai, India) region. Data is encrypted in transit (TLS) and at rest by Google. Security rules allow only the signed-in account that owns the records to read or change them. Firebase Authentication is a global Google service.
6. When information is shared
- Service provider: Google (Firebase) stores and processes data for us under its privacy and security terms.
- When you share: receipts, statements and other PDFs or messages you send go to whoever you choose, through the apps you choose (for example WhatsApp).
- When the law requires it: if we receive a valid legal request from an Indian authority.
We never sell or rent your information.
7. How long we keep it, and deletion
We keep your information while your account is active. Archiving a borrower hides them but does not delete them. To keep the books honest, a single payment cannot be deleted, only reversed with a reason.
You can delete your account at any time in the app under Settings → Delete account and data. This immediately and permanently deletes your login, business profile, all borrowers, loans, installments, payments, audit logs and borrower photos. Copies in Google’s encrypted backups are removed as those backups expire. You can also ask by email; see Delete your account.
8. Your rights
Under India’s Digital Personal Data Protection Act, 2023 and other applicable law, you can:
- see the information we hold about you (most of it is visible in the app);
- correct it (edit it in the app, or ask us);
- erase it (delete your account, or ask us);
- raise a grievance with us, and then with the Data Protection Board of India;
- nominate someone to exercise these rights if you die or cannot act.
9. Children
OrbitHisaab is meant for adults running a lending business. It is not directed at anyone under 18, and we do not knowingly collect children’s data from them.
10. This website
This website has no sign-up, no cookies and no analytics. It remembers your language choice in your browser’s local storage. It is served by Cloudflare and loads fonts from Google Fonts; both receive your IP address and browser details in order to deliver the pages.
11. Changes to this policy
If we change this policy we will update the date above and point out important changes at the top of this page.
12. Contact and grievance officer
CodeOrbit Technologies, Bengaluru, Karnataka, India
Grievance officer: Sanoj Kumar
Email: info@codeorbitapp.com
We reply within 2 working days and resolve grievances within 30 days.