1. Scope and who we are
Lendbook ("the App") is developed and managed by Shivanshika Innovations ("we", "us", or "our"). This Privacy Policy applies to the Android App and related support interactions.
The App helps users record money they have lent or borrowed, track personal repayments and bank-loan progress, use financial calculators, export records, and prepare payment reminders. It is not a bank, lender, loan marketplace, payment processor, debt collector, credit bureau, or financial adviser.
2. Information processed by the App
Account information
When you sign in with Google, we receive information needed to create and secure your account, which may include your name, email address, Google account identifier, and profile image URL. Google handles the sign-in flow under its own privacy policy. Lendbook does not receive or store your Google password.
Ledger information you enter
To provide the App's core features, we process information you choose to add, including:
- contact names, phone numbers, email addresses, addresses, and notes;
- principal amounts, interest rates and methods, disbursement dates, due dates, and debt status;
- repayment amounts, dates, methods, references, and notes; and
- bank or lender names, loan nicknames and types, rates, EMI schedules, balances, statement dates, and payment splits; and
- editable reminder drafts that you choose to open in SMS or WhatsApp.
This information may concern another person. You are responsible for having a lawful reason and any consent required before adding or using another person's information.
Contact information you choose to import
When you use the contact picker, Lendbook accesses information needed to fill the borrower form, such as the selected person's name, phone number, email address, and postal address, where available.
The Android system picker provides only the contact information you select. Lendbook does not request access to or upload your entire address book. Only information from a contact you select and save is added to your ledger. You can enter contact information manually instead.
Offline data and preferences
Lendbook stores a local copy of synchronized ledger records so they remain available offline. Changes made offline may be queued on the device and synchronized when a network connection becomes available. The local Room database, authentication session, OAuth verifier, and app preferences are encrypted using keys protected by Android Keystore. Protect your device with a screen lock; no storage system is completely secure.
PDF exports
When you export records, Lendbook creates a PDF only at your request. You may save it in the public Downloads/LendBook folder or choose another location through Android's document picker. Exported PDFs are outside Lendbook's encrypted app storage and may be available to you, file-management tools, backup tools, or other apps with access to that location. You are responsible for securing, sharing, and deleting exported files.
App usage, crash reports, and performance
Release versions use Google Analytics for Firebase, Firebase Crashlytics, and Firebase Performance Monitoring to understand feature use and improve reliability. These services process app-instance or installation identifiers, app version, device and operating-system information, screen visits, action outcomes, crash diagnostics, and timing and network-performance information. Performance Monitoring may process requested network URLs without query parameters or payload contents, response codes, response and payload sizes, and response times. Google Analytics may derive approximate geographic information from network information; the App does not request device location permission.
Our custom events contain predefined screen and action names and their outcomes. We do not add borrower names, contact details, debt or payment amounts, notes, account or ledger identifiers, authentication tokens, or exported records to these events or custom performance attributes. Handled error reports are sanitized before submission. Automatic crash reports include technical stack traces and diagnostic information.
Advertising ID collection and advertising personalization signals are disabled. We do not attach your Google or Supabase account identifier to Firebase telemetry. Deleting your ledger account does not automatically erase previously collected installation-based diagnostics or aggregate usage reports; those follow the applicable Firebase and Google Analytics retention settings. Contact us about privacy requests.
Technical and security information
Our authentication and hosting providers may process limited technical information needed to operate and protect the service, such as IP address, request timestamps, authentication events, and diagnostic or security records.
The App does not include advertising or behavioral-advertising SDKs. It does not use location, camera, microphone, or call-log data and does not read your SMS or WhatsApp messages.
3. How information is used
- To authenticate you and maintain your account.
- To create, display, calculate, synchronize, and back up ledger records.
- To calculate outstanding principal, accrued interest, EMIs, and indicative loan projections from values you enter.
- To record repayments and show ledger history.
- To prepare editable reminder drafts when you ask to open SMS or WhatsApp.
- To create a PDF export when you request one.
- To provide offline access and synchronize pending changes.
- To protect accounts, investigate errors, prevent abuse, and maintain reliability.
- To respond to support, privacy, and deletion requests.
- To comply with applicable legal obligations.
We do not sell personal information or use ledger information for advertising.
4. Android permissions
- Internet: used for Google sign-in, cloud synchronization, and service requests.
- Selected contacts: the system contact picker shares the contact information you choose for the borrower form. The App does not request access to your entire address book. You may enter details manually instead.
The App does not request location, camera, microphone, call-log, direct-call, or direct-SMS permissions.
5. Service providers and external apps
- Google provides account authentication.
- Google Firebase provides Analytics, Crashlytics, and Performance Monitoring as described above. See Firebase privacy information.
- Supabase provides authentication, database, and backend infrastructure.
- Your chosen messaging app receives the recipient and editable draft when you ask Lendbook to open SMS or WhatsApp.
When an external messaging app opens, its own terms and privacy policy apply. You decide whether to send the prepared message.
7. Storage, security, retention, and deletion
Ledger information is stored in our cloud backend and cached in encrypted app-managed storage on your device. Authentication sessions and app preferences are encrypted locally with Android Keystore-protected keys. Network requests use encrypted connections. Access controls are designed to restrict each signed-in user to their own records. No method of storage or transmission is completely secure.
Signing out removes the local synchronized ledger when no changes are pending. If unsynced changes exist, the account's saved ledger and pending changes remain in app-managed storage so the same account can sign in and finish syncing. Uninstalling removes app-managed local data, subject to Android's behavior, but does not by itself delete data already synchronized to your account.
We retain account and ledger information while your account is active or as needed to provide the service. Limited records may be retained longer where required for security, fraud prevention, dispute resolution, or legal compliance.
You may correct payments through linked reversal entries and archive or restore borrowers. Financial history is retained for auditability until account deletion. To request deletion of your account and associated cloud data, use the account-deletion option in the App or the account-deletion page linked from Lendbook's Google Play listing, or contact us using the email below.
After a verified request, we will delete or de-identify associated information unless retention is legally required. Information may remain temporarily in restricted backups until they are rotated. Previously exported files and offline copies on other devices must be removed separately. Deleting Lendbook does not delete information held independently by Google, messaging apps, or other third parties.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, export, object to, restrict, or delete personal information. You can edit contact details, correct payments with linked reversal entries, export a PDF, archive contacts and bank loans, avoid contact import, decide whether to send a reminder draft, and delete your account. Signing out preserves unsynced changes for your account. We may need to verify your identity before completing a request.
9. Children's privacy
Lendbook is intended for adults and is not directed to children under 18. We do not knowingly ask children to create accounts. If you believe a child has created an account or that a child's information was added improperly, contact us so we can review and take appropriate action.
10. International processing
Our service providers may process information on global infrastructure, including outside your state or country, subject to their terms and applicable safeguards.
11. Changes to this Privacy Policy
We may update this policy when App features, providers, data practices, or legal requirements change. The effective date at the top identifies the latest version. Where appropriate, we may provide additional notice in the App or store listing.
12. Contact and privacy requests
Email: care@shivanshikainnovations.com
Please do not include passwords, OTPs, payment information, or unnecessary financial information in your message.