Privacy Policy for Paona360

Last Updated: October 6, 2026

Welcome to Paona360 (“Paona360,” “we,” “our,” or “us”).

Paona360 is a digital business management application designed for shopkeepers, retailers, wholesalers, and small business operators. The application provides digital khata/ledger management, customer balance tracking, sales and payment records, inventory management, reports, notifications, PDF generation, and optional premium services.

This Privacy Policy explains what information Paona360 may collect, how that information is used, where it is stored, how it is protected, and the choices available to you when using the application.

By downloading, accessing, or using Paona360, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of the application.

1. Our Privacy Approach

Paona360 is designed with an offline-first architecture.

Your business information is primarily stored in a local database on your Android device so that core features can continue to work when an internet connection is unavailable.

When you are signed in and cloud synchronization is available, selected business information may also be synchronized with our cloud infrastructure to provide:

• Account-based data recovery
• Cloud backup and restore
• Multi-device synchronization
• Business data synchronization
• Data continuity after device replacement or reinstallation
• Authorized access to your business data

Therefore, the current version of Paona360 does use cloud services for account and business-data synchronization.

We do not sell your business records or customer information to third parties.

2. Information We Collect and Process

Depending on how you use Paona360, we may process the following categories of information.

A. Account and Authentication Information

When you create or use a Paona360 account, we may process:

• Firebase user ID (UID)
• Email address
• Authentication information required to maintain your account
• Business/shop information associated with your account
• Account/session information required for authentication and synchronization

Firebase Authentication is used to securely authenticate users.

Your authentication credentials, such as passwords, are handled through the authentication infrastructure and are not stored by Paona360 as readable passwords.

3. Business and Customer Information

When you use Paona360 to manage your business, you may enter information such as:

Customer Information

• Customer name
• Phone number
• Customer location/address, where provided
• Customer profile/photo reference, where used
• Customer balance
• Due/payment information
• Notes associated with customer records

Sales and Ledger Information

• Sale records
• Credit/due records
• Payment/collection records
• Transaction amounts
• Transaction dates and timestamps
• Transaction notes
• Ledger balances

Product and Inventory Information

• Product names
• Product quantities
• Stock information
• Stock adjustments
• Damage/return records
• Low-stock threshold settings
• Inventory history

Business Information

• Business/shop name
• Shop/business configuration
• Business-related settings
• Authorized business membership information

This information is used to provide the core accounting, ledger, sales, inventory, reporting, and synchronization features of Paona360.

4. Local Storage and Offline-First Processing

Paona360 uses a local Android database based on Room/SQLite.

Local storage allows the application to continue functioning when the device is:

• Offline
• Connected to a weak network
• Temporarily disconnected from the internet

Business operations may be written to the local database first and synchronized with cloud services when connectivity becomes available.

This architecture is intended to provide faster performance and prevent loss of locally entered information during temporary network interruptions.

5. Cloud Synchronization and Firebase

Paona360 uses Firebase services to provide authentication, cloud synchronization, security, and application infrastructure.

Depending on the feature and account state, information may be synchronized between your Android device and Firebase cloud services.

Firebase Authentication

Used for:

• Account creation
• Login
• Authentication
• Session management
• User identity

Cloud Firestore

Used for authorized cloud storage and synchronization of business information, which may include:

• Customers
• Transactions
• Products
• Inventory/stock records
• Damage/return records
• Business/shop information
• Synchronization metadata

Firestore data is associated with the appropriate authenticated user/business and is protected by Firebase Security Rules.

Firebase Realtime Database

Paona360 uses Firebase Realtime Database for limited realtime application state, such as:

• User presence
• Business synchronization status
• Synchronization heartbeat information
• Authorized business membership state used by realtime functionality

Realtime Database is not intended to be the primary storage location for the complete customer ledger, sales history, or inventory database.

6. Synchronization and Multi-Device Access

Paona360 may synchronize your authorized business data across supported devices using your Paona360 account.

For example, if you enter a customer, sale, payment, or inventory change while offline, the information may first be stored locally and then synchronized with the cloud when connectivity becomes available.

If you subsequently sign in to the same authorized business account on another supported device, synchronized cloud information may be restored to that device.

Access to business information is controlled using authenticated user and business authorization mechanisms.

Users belonging to one business are not intended to receive unauthorized access to another business's data.

7. Data Synchronization Queue

For reliable offline operation, Paona360 may maintain a local synchronization queue.

This queue may contain information necessary to synchronize locally created or modified records with the cloud.

Synchronization operations may remain pending when:

• The device is offline
• The network is unavailable
• A temporary server/network error occurs
• Synchronization needs to be retried

Pending synchronization operations may be processed automatically when connectivity becomes available.

8. Backup and Restore

Where cloud synchronization/backup functionality is available, Paona360 may use Firebase cloud services to restore authorized business information.

Cloud restoration may be useful when:

• You reinstall the application
• You change your device
• You sign in on another supported device
• Local application data is lost

Cloud restore is subject to successful authentication and synchronization.

If information has not been successfully synchronized to the cloud, it may not be recoverable after permanent local deletion.

9. Photos and Media

Paona360 may allow you to select or reference images, such as customer profile photographs.

Depending on your Android version and device configuration, the application may request the appropriate Android media/photo access required for this functionality.

Paona360 does not require access to your entire photo library for ordinary ledger functionality.

Images or image references that you intentionally associate with records may be stored or referenced according to the application's local/cloud synchronization functionality.

10. Notifications

Paona360 may use Android notifications for features such as:

• Due/payment reminders
• Scheduled reminders
• Low-stock notifications
• Other relevant business alerts

On supported Android versions, the application may request notification permission.

You can control notification permissions through Android system settings.

11. Low-Stock Notifications

Paona360 may process:

• Current product stock
• User-defined minimum stock threshold

to determine whether a product has fallen below its configured low-stock level.

This information is used to generate local inventory warnings and notifications.

12. PDF, Printing, and Sharing

Paona360 may allow you to generate:

• Customer statements
• Ledger reports
• Sales reports
• Inventory reports
• Invoices
• Other business documents

Generated PDFs may be processed locally on your device.

Where you choose to print or share a document, Android system functionality or third-party applications selected by you may receive the information necessary to complete that action.

For example, when using the Android Share Sheet, the selected recipient application may process the information according to its own privacy policy.

Paona360 does not control how third-party applications handle information after you intentionally share or export it.

13. Advertising — Google AdMob

Free users may see advertisements provided by Google AdMob.

AdMob may process information such as:

• IP address
• Advertising identifiers
• Device information
• App/device interaction information
• Approximate location information where permitted by the relevant advertising configuration
• Advertising and diagnostic information

The exact information processed by Google may depend on your device settings, consent choices, regional requirements, and Google's advertising technologies.

Premium/Pro functionality may provide an ad-free experience where the active entitlement is successfully verified.

For more information about Google's privacy practices:

Google Privacy Policy

14. Subscriptions and Google Play Billing

Paona360 may offer optional paid subscription plans or Pro features.

Subscriptions are processed through:

• Google Play Billing
• RevenueCat

Paona360 does not directly receive or store your complete credit card or bank account credentials used for Google Play purchases.

RevenueCat may process information necessary to manage subscription entitlements, including:

• App user identifier
• Purchase information
• Subscription status
• Product identifier
• Entitlement status
• Subscription expiration information
• Renewal-related information

For more information:

RevenueCat Privacy Policy

Google Privacy Policy

Google Play subscription management is controlled through your Google Play account.

15. Analytics and Application Performance

Paona360 may use Firebase services such as Firebase Analytics to understand application usage and improve the product.

We may also use Firebase Crashlytics and related diagnostic services to identify:

• Application crashes
• Technical errors
• Performance problems
• Stability issues
• Device/app environment information relevant to diagnosing failures

These services are intended to improve reliability and performance and are not used to sell your business ledger information.

16. Firebase App Check and Play Integrity

Paona360 may use Firebase App Check with Google Play Integrity for supported production builds.

These security mechanisms help us distinguish legitimate application traffic from potentially unauthorized or automated requests.

Information processed by these security services may include technical/app integrity information required to validate requests.

App Check and Play Integrity are security mechanisms and are not intended to provide access to your business ledger information.

17. Information We Do Not Sell

Paona360 does not sell your personal information, customer records, financial ledger records, sales history, or inventory information to third parties.

We do not use your business ledger to sell products or services to your customers.

Third-party service providers may nevertheless process certain technical, authentication, subscription, advertising, analytics, security, or synchronization information as necessary to provide their services.

18. Third-Party Service Providers

Paona360 may use third-party services including:

• Firebase Authentication
• Firebase Cloud Firestore
• Firebase Realtime Database
• Firebase Analytics
• Firebase Crashlytics
• Firebase App Check
• Google Play Integrity
• Google Play Billing
• Google AdMob

These providers process information according to their respective terms and privacy policies.

You should review the privacy policies of these services for additional information about their data processing practices.

19. Data Security

We use technical and organizational measures designed to protect information processed through Paona360.

These measures may include:

• Firebase Authentication
• Firestore Security Rules
• Realtime Database Security Rules
• Firebase App Check
• Google Play Integrity
• Authenticated business/user authorization
• Local Android application sandboxing
• Offline local database protection
• Controlled synchronization
• Idempotent synchronization mechanisms
• Access restrictions between businesses

However, no electronic storage system, transmission method, or software application can be guaranteed to be completely secure.

You are responsible for protecting access to your Android device and Paona360 account.

20. Business Data Ownership

Your business records are your business information.

Paona360 provides the software infrastructure necessary to create, manage, synchronize, display, and restore your business information.

We do not claim ownership of your:

• Customer records
• Sales records
• Payment records
• Ledger information
• Product information
• Inventory information
• Business records

You remain responsible for ensuring that you have the appropriate rights and permissions to enter and process information belonging to your customers, employees, suppliers, or other individuals.

21. Data Retention

We retain information only for as long as reasonably necessary to provide the relevant application services, maintain your account, provide synchronization/backup functionality, comply with legal obligations, resolve disputes, and protect our services.

Local information may remain on your device until:

• You delete it within the application
• You clear application data
• You uninstall the application
• The device's storage is otherwise erased

Cloud-synchronized information may remain associated with your account/business until it is deleted according to the applicable application functionality, account processes, or legal requirements.

Deleting local application data does not necessarily mean that previously synchronized cloud information is immediately deleted.

22. Account and Data Deletion

If you wish to delete your Paona360 account or request deletion of associated cloud information, please contact us using the contact information provided below or use any available account-deletion functionality within the application.

A deletion request may require verification of account ownership.

Some information may be retained where required by law, for legitimate security purposes, to resolve disputes, prevent fraud, or satisfy legal/accounting obligations.

23. Data Export and Sharing

Paona360 may provide features for generating or sharing business documents such as statements, invoices, and reports.

When you intentionally export or share information:

• You control the destination you select.
• The receiving application may process the information independently.
• Paona360 cannot control the recipient's subsequent use of the exported information.

You should use appropriate care when sharing sensitive customer or financial information.

24. Children's Privacy

Paona360 is designed primarily for business operators, shopkeepers, retailers, wholesalers, and other business users.

Paona360 is not intentionally designed to collect personal information from children.

If you believe a child has provided personal information to us in a manner that violates applicable law, please contact us so that we can investigate and take appropriate action.

25. International Users

Paona360 may be used by customers in different countries.

Depending on the services used, information may be processed by service providers operating in jurisdictions outside your country.

Where applicable, we seek to use appropriate contractual, technical, and organizational safeguards for such processing.

Users are responsible for complying with applicable local laws when entering customer or business information into Paona360.

26. GDPR and Other Privacy Rights

Depending on your country or region, you may have privacy rights concerning your personal information, which may include rights to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion
• Request restriction of processing
• Object to certain processing
• Request data portability
• Withdraw consent where processing is based on consent

These rights may be subject to applicable legal limitations and verification requirements.

To exercise applicable rights, contact us using the information below.

27. California Privacy Rights

For users covered by applicable California privacy laws, you may have rights concerning the collection and use of personal information.

Paona360 does not sell personal information in the traditional sense of selling customer data for monetary consideration.

You may contact us to request information regarding applicable privacy rights or to submit a privacy request.

We will verify requests as reasonably necessary to protect account and personal information.

28. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• New application functionality
• Changes to third-party services
• Changes to data processing
• Security improvements
• Legal or regulatory requirements

When we make material changes, we may update the “Last Updated” date and, where appropriate, provide additional notice through the application or other reasonable means.

You should periodically review this Privacy Policy for updates.

29. Contact Us

If you have questions about this Privacy Policy, data processing, account deletion, or privacy-related requests, please contact us:

Paona360
Email: paona360@gmail.com

Developer: VizoMart Tech