ScanDukaan Privacy Policy

Last updated: 2 October 2026

The short version

✓Your shop's stock, prices, sales and khata belong to you. We never sell them.
✓Data is stored on your phone first and synced to our servers in India so your shop's phones stay in step.
✓No ads, no advertising or analytics trackers in the app.
✓You can ask us to delete your account and all its data at any time.

1. Who we are

ScanDukaan (Android package com.scandukaan.app) is published by Vamsi Krishna, trading as Vamaha Tech, India ("we", "us"). We decide how the data described here is used. Contact: scandukaan@vamaha.tech.

2. What we collect and why

Only what's needed to run billing, stock and your khata, and to sync your shop's phones:

Data	Examples	Why
Account	Email address and password (stored only as a secure hash); Google account ID and email if you use Google sign-in; phone number if you sign in with one	Signing you in and keeping your account secure
Devices	A device identifier, name and platform for each phone signed in to your shop	Secure sessions, and syncing between your shop's phones
Shop profile	Shop name, phone number, address, UPI ID	Receipts, and the UPI QR shown at checkout
Products and stock	Names, barcodes, units, prices, MRP, stock levels, stock movements, product photos you take	Barcode billing, stock tracking, low-stock alerts
Sales	Bills, items, amounts, discounts, coupons, payment method (cash, UPI, credit)	Receipts and your sales history
Khata (udhar)	Your customers' names, phone numbers and addresses that you enter; balances and repayments	Keeping each customer's credit account

We do not collect your location, contacts, call logs or messages, and we do not read other apps' data.

3. Your customers' details

When you record a customer in your khata, you are the one collecting their details, and we store them only on your behalf to run your khata. Please record only what you need and only with your customer's knowledge. We never contact your customers or use their details for anything else.

4. Phone permissions

• Camera: to scan barcodes and take product photos, only while you are scanning or taking a photo. Nothing is recorded or kept apart from photos you save to a product.
• Notifications: for low-stock alerts and the daily summary, which the app creates on your phone.
• Internet: to sign in, sync your data and upload product photos.

5. Where your data is stored

ScanDukaan works offline: everything is saved in a database on your phone first, so billing and stock work without internet. When you are online, your changes sync to our servers on Amazon Web Services in Mumbai, India, so every phone in your shop sees the same data.

• All data travelling between the app and our servers is encrypted (HTTPS).
• Passwords are stored only as secure hashes, never in readable form.
• Sign-in sessions use signed tokens that expire and renew. You can sign any phone out of your shop from Settings → Account.
• Product photos are uploaded straight to private Amazon S3 storage through short-lived upload links, and served through Amazon CloudFront.

6. Service providers we use

• Amazon Web Services: servers, database, photo storage and delivery (India).
• Google: sign-in, if you choose "Continue with Google".
• Hostinger: sends our emails, such as sign-in and password-reset codes and security notices.

They process data only to provide these services to us. We do not use advertising networks, data brokers or analytics trackers in the app, and we do not sell or rent your data to anyone.

7. How long we keep it, and deleting it

We keep your data for as long as your account exists. You can edit or delete products, customers and other records in the app at any time.

To delete your account and all its data from our servers, follow the steps on Delete your ScanDukaan account. We complete deletion within 30 days of your request.

8. Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us for a summary of your data, ask us to correct or delete it, and raise a grievance. Email scandukaan@vamaha.tech and we will reply within 30 days.

9. Children

ScanDukaan is a business tool for shop owners and their staff. It is not meant for anyone under 18, and we do not knowingly collect data from children.

10. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before the change applies. The date at the top shows when it was last updated.

11. Contact and grievances

Grievance officer: Vamsi Krishna, Vamaha Tech · scandukaan@vamaha.tech