Shakvaro.
Takvaro

Takvaro · App Privacy

Privacy Policy

The short version: Takvaro records your business books on your device and syncs them to Shakvaro's managed Postgres over TLS so you can work offline and across devices. Access is scoped by tenant, shop, and role. No ads, no third-party analytics, no selling data. Effective July 3, 2026.

1. Who we are

Takvaro is an Android application (package com.shakvaro.takvaro) published by Shakvaro (Chattogram, Bangladesh). Takvaro exists to record small-business books — sales, purchases, expenses, dues (বাকি খাতা), cash, stock, monthly closing, partner distribution — offline-first and bilingual (Bangla / English). Questions about this policy go to privacy@shakvaro.com.

2. Information we collect

a) Account information. Your email address and Google account identifier, obtained when you sign in with Google Sign-In. An internal account ID and the date your account was created.

b) Business and financial records you enter. Takvaro exists to record your business books. Data you create in the app includes:

  • Shops / branches, staff invitations, and roles.
  • Products, units, barcodes, and stock levels.
  • Parties (your customers and suppliers) — names and balances you enter.
  • Transactions — sales, purchases, expenses, cash in / out, amounts, discounts, VAT, delivery charges, dues, and payments.
  • Business partners and profit-share settings.
  • Shop profile fields you choose to set (shop name, phone, address, VAT / BIN number, receipt footer).

c) Authentication tokens. Sign-in tokens are stored securely on your device to keep you logged in.

d) Device permissions.

  • Internet — to sync your data with our server and to sign in.
  • Camera — used only to scan product barcodes / QR codes on your device. Camera images are processed locally and are not stored or transmitted; only the decoded barcode text is used.

We do not collect your location, contacts, photos, or device identifiers for advertising. We do not use advertising or third-party analytics / tracking SDKs.

3. How we use your information

  • To provide the core service: record, sync, and display your business books across your devices.
  • To authenticate you and secure your account.
  • To operate multi-shop access and the staff roles you configure.
  • To generate the reports, statements, and PDF receipts you request.

We do not sell your data. We do not use it for advertising or profiling.

4. How your data is stored and secured

  • Records are stored on your device (local SQLite) and on our managed server (PostgreSQL), synchronised so you can work offline and across devices.
  • Encrypted in transit using HTTPS / TLS 1.3.
  • Row-Level Securityin Postgres enforces tenant + shop scoping at the database — even a forgotten filter in code cannot return another tenant's data.
  • Role-scoped sync buckets: employees never receive purchase rows on-device; partners receive only the server aggregate. Profit is structurally hidden, not just UI-hidden.
  • Short-lived access tokens (RS256) with rotating refresh tokens, reuse-detection, and a jti denylist for instant revoke.
  • Daily backups with periodic restore drills.

Access is scoped by shop and role; only accounts you invite can see a shop's data.

5. Sharing and third parties

We share data only as needed to run the service:

  • Google Sign-In (Google LLC) — used to authenticate you; Google receives sign-in requests per its own privacy policy.Privacy: policies.google.com/privacy
  • Shakvaro-operated infrastructure— Takvaro's Postgres, PowerSync sync service, Nginx, and PgBouncer run on Shakvaro-controlled VPS infrastructure. Your data is not shared with third-party analytics or advertising platforms.

We do not otherwise share your business or personal data with third parties, except where required by law.

6. Data retention

We keep your account and business records for as long as your account is active. When you delete your account (see §8), we delete your account and associated business data, except where we are required to retain certain records for legal, tax, security, or fraud-prevention reasons; any such retained data is kept only as long as required and then deleted.

7. Your rights

You can access your data in the app at any time, correct entries you have made, and request deletion of your account and data.

8. Deleting your account and data

You can delete your account and its associated data in two ways:

Deletion removes your account, shop memberships, and the business records associated with your account, subject to the legal-retention exceptions in §6. Requests are completed within a reasonable period (typically within 30 days).

9. Children

Takvaro is a business tool intended for adults (business owners and their staff). It is not directed at children under 13, and does not knowingly collect data from children.

10. Changes to this policy

We may update this policy. Material changes will be posted at this URL with an updated effective date and, where reasonable, announced in-app before they take effect.

11. Contact

Questions about Takvaro's privacy? privacy@shakvaro.com. Takvaro is built by Shakvaro (Chattogram, Bangladesh).

Back to Takvaro