Ova Animations built Pharmoice (package com.ova.pharmainvoice), an Android app for billing and bookkeeping in pharma distribution. This policy explains what stays on your phone, what is sent to us and to other companies, and the choices you have.
Earlier versions of this policy said that your information stays on your device. That is not accurate for the current app. Please read the sections below.
Data on Your Phone
Your business details, bills, purchases, parties (customers and sellers), products and stock, payments, returns, notes and signature image are stored on your phone. This data stays on your phone unless you sign in and a cloud backup runs (see "Cloud backups"). The app does not separately encrypt data on the phone. Its PIN lock only controls access inside the app.
The app does not ask for location, contacts, SMS, camera or microphone permissions. It uses storage permissions on older Android versions to share and print files. It uses the Internet permission to reach the services below.
Data Sent Off Your Phone
The app sends the following to servers run by us or by other companies. Each item is explained in the sections that follow.
- Your Google account details, if you sign in.
- A usage profile and daily activity counters.
- Analytics events, crash reports and performance timings.
- Ad requests to Google AdMob, if you have not removed ads.
- Purchase outcomes.
- Encrypted cloud backups, if you sign in and a backup runs.
Google Sign-In
Signing in with Google is optional. You need it only for cloud backups and for plans you buy. If you sign in, we receive your Google account email, your name and a Firebase Authentication user ID. We use them to run your account, to link your backups and plans to you, and to contact you about the service.
If you never sign in, the app still works on your phone. Note that the usage profile below is created even without sign-in.
Usage Profile and Analytics
Usage profile. Once you enter a business name, the app writes a profile to our Firebase database (Cloud Firestore), whether or not you are signed in. The profile is stored under a hash of the email in your business details or, if there is none, under a random ID. The app has no setting to turn this off. The profile contains:
- business name and type, the email entered in your business details, city, country and GST mode
- counts of bills, purchases, notes, products, customers, sellers, payments and returns (counts only, not the records)
- the time of your last backup
- app version, Android version and API level, device model and manufacturer, and the app store that installed the app
- which paid plans you have
- whether you are signed in, and the part of your Google email before the @ sign
Daily activity. The app records per-day counters of which features you use.
We use the profile and counters to understand how the app is used, to keep the app working, and to contact you about the service.
Google Firebase services. The app also uses these Google services. The app has no setting to turn them off.
- Firebase Analytics: app events and an app instance ID, to see how the app is used.
- Firebase Crashlytics: crash traces and device model, manufacturer, Android version and API level, to fix crashes.
- Firebase Performance Monitoring: start-up and network timings.
- Firebase Remote Config: settings we change without an app update.
- Firebase App Check (Play Integrity): helps keep our services from being misused.
- Firebase Cloud Messaging: a registration token so the app can receive notifications.
Google processes this data under its own terms. Its retention periods are set by Google. See the policies linked under "Service providers".
Ads and Remove Ads
Free users see ads served by Google AdMob. To show and measure ads, AdMob collects your Android advertising ID, your approximate location (worked out from your IP address), your interactions with ads and device information. This data is shared with Google AdMob. The app declares the advertising ID permission for this purpose.
The Remove Ads subscription turns off ads in the app. You can reset your advertising ID or opt out of ad personalisation in your Android settings under Google, Ads.
Purchases
Purchases and subscriptions are handled by Google Play Billing. Google processes your payment, and we do not receive your card details. The app records the outcome of a purchase (your user ID, the product, the status and the time) in our database in a transactions record and keeps your entitlements so that your plans work on your account. Google Play keeps its own purchase records, which we cannot delete.
Cloud Backups
Backups are optional and need Google sign-in. A signed-in user without a subscription gets an automatic monthly backup once they have 5 or more bills. A Backup subscription adds daily backups and a Backup now button.
A backup contains all your app data, including:
- company details, including GSTIN and Drug License number
- your signature image
- bills, purchases, payments and returns
- parties with their names, phone numbers, addresses and Drug License numbers
- products and stock
- notes
The app compresses the backup and encrypts it with AES-256-GCM on your phone, then uploads it to storage run by our service provider, Supabase, under your user ID.
This is not end-to-end encryption. The key that decrypts your backup is stored in our Firebase database, under your account. The encrypted backup and its key are both on servers we control, so we are technically able to read your backups. We do not read them as part of normal operation.
Security
Connections between the app and our services use HTTPS (TLS), so data is encrypted in transit. Backups are also encrypted before upload, as described above. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We have not had an independent security review done.
Service Providers
We use these companies to run the app. They process data on our behalf, under their own terms.
- Google (Firebase): sign-in, database, analytics, crash reports, performance, remote config, notifications and app checks.
- Google AdMob: ads, as described above.
- Google Play: app distribution and billing.
- Supabase: storage of encrypted cloud backups.
We do not sell your data.
Retention
- On your phone: until you erase it or uninstall the app.
- Automatic cloud backups: currently kept until you delete your account.
- Account data: your profile, daily activity, purchase records, entitlements, backups and backup key are kept until you delete your account. After a deletion request they are deleted within 30 days.
- Google services (Firebase, AdMob, Google Play): kept under Google's own retention rules. See Google's policies above.
- Supabase: your backups are kept until we delete them as described above.
Deleting Your Data
You can delete your account in the app: sign in, open the Account screen, tap the menu next to your name and tap Delete account. You can also ask us by email. We delete your backups and account data within 30 days of the request. Google Play keeps its own purchase records, and deleting your account does not cancel a subscription. We cannot reach the data on your phone. Uninstall the app or clear its storage to remove it. See the full steps on the Delete Your Pharmoice Account page.
We do not offer deleting only part of your data.
Children’s Privacy
Pharmoice is a business tool and is not directed at children. We do not knowingly collect personal information from children under 13. If you think a child has given us personal information, contact us and we will delete it.
Changes to This Privacy Policy
If this policy changes, the new version will be posted at the same address with an updated effective date.
Contacting Us
Questions: Ova Animations, ova.anim@gmail.com