1. Information We Collect and Process
When you use Sento, we process information necessary to generate invoices, manage clients, and facilitate cloud synchronization.
- Account & Profile Information: When you create an account, we process your email address, display name, and authentication identifiers.
- Business Profile Data: Your business name, trading address, phone number, email address, tax identifier (such as GSTIN or VAT ID), currency preference, and uploaded business logo.
- Client & Invoicing Records: Client names, billing addresses, contact emails/phone numbers, invoice line items, rates, taxes, discounts, issue and due dates, and payment notes.
- Payment Setup: UPI VPA identifiers (for UPI QR generation) or public payment links (e.g. Stripe, PayPal, Razorpay) you choose to display on your invoices.
- Billing & Purchases: Transaction identifiers and purchase verification tokens from Google Play Billing to activate and verify Pro subscriptions or lifetime licenses.
- Diagnostics & App Health: Non-identifying crash telemetry and app performance logs to diagnose bugs and maintain reliability.
2. Architecture, Local Storage, and Cloud Sync
Sento is architected with an offline-first design:
- Local Storage (Drift SQLite): By default, all invoices, clients, payment history, and business profile settings are saved locally on your device in a secure SQLite relational database.
- Optional Cloud Sync (Google Firebase): If you sign in and enable Cloud Sync (available to Pro users), your profile, client records, and invoices are synchronized to Google Firebase (Firestore and Firebase Storage) using authenticated, user-scoped security rules.
- End-to-End Control: You can use Sento indefinitely in offline mode without enabling cloud sync. Local data remains entirely under your device's file system controls.
3. Device Permissions and Why We Need Them
Sento requests specific Android permissions strictly to provide corresponding features in the app:
- Storage / Media / Photos: Required to export generated PDF invoices to your device, import/export CSV files and encrypted backup archives, and select business logos.
- Camera: Optional permission used if you capture a photo directly for your business profile or scan verification QR codes.
- Biometric Authentication (USE_BIOMETRIC / USE_FINGERPRINT): Used solely to gate access to the app via local device biometric hardware (Fingerprint / Face Unlock). Biometric data is processed exclusively by your device operating system and is never accessed, stored, or transmitted by Sento.
- Contacts (READ_CONTACTS): Optional convenience feature to let you quickly pick an existing contact to populate client address book fields, avoiding manual typing. Your address book is not uploaded to any server.
- Notifications (POST_NOTIFICATIONS): Used on Android 13+ to send local alerts for overdue invoices or recurring invoice generation schedules you have configured.
4. Third-Party Service Providers
We do not sell user data. We partner exclusively with established infrastructure providers necessary for app functionality:
- Google Firebase (Google LLC): Powers authentication, cloud database synchronization (Firestore), cloud logo storage, and crash reporting. Governed by the Google Cloud Privacy Notice.
- Google Play Billing (Google LLC): Processes in-app purchases, recurring subscriptions, and license entitlements. Financial and payment card details are handled directly by Google Play and are never received or stored by Sento.
5. Data Retention, Security, and Account Deletion
We retain account and synced cloud data only for as long as your account remains active or as needed to provide our services.
- In-App Account Deletion: You can delete your account and all associated Firestore cloud records at any time directly in the app via Profile > Settings > Delete Account.
- Web Deletion Request: You can also request complete account and data deletion by sending an email with your registered account email to hello@sheershjaiswal.in. We process deletion requests within 30 days.
- Local Data Removal: Uninstalling the app or clearing app storage in Android Settings immediately erases all locally cached SQLite databases and downloaded PDF files.
- Security Measures: Data in transit between the app and cloud services is encrypted using industry-standard TLS/SSL protocols. Encrypted backup exports use AES encryption with user-defined passphrases.
6. Children's Privacy
Sento is designed for commercial use by freelancers, contractors, and business owners. Sento is not directed at children under the age of 13 (or under 16 in the European Economic Area), and we do not knowingly collect personal data from children.
7. Policy Updates and Contact Information
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory updates. Any changes will be posted on this page with an updated 'Last modified' date.
8. Contact & account deletion
To request deletion of your account and associated cloud data, email:
Sheersh Jaiswal · Sento Developer
Email: hello@sheershjaiswal.in
Account deletion requests are processed within 30 days.
