Privacy — billo

The short version

There is no account. Nothing to sign up for, nothing to sign in to.
Your menu, your bills, your customers and your business details never reach me or anyone else.
No ads. No trackers of mine. Nothing measuring what you do in the app.
Your data leaves the phone only when you send it somewhere yourself.
Uninstall the app and it is gone. There is no copy of it anywhere to ask about.

What billo keeps

Everything you type, and nothing else

billo stores what you put into it in the app's own private storage on your phone. Android keeps other apps out of that storage, and on any reasonably modern phone it is encrypted at rest by the device itself.

Your menu

Item names, prices, and the cost prices you add for profit figures.
Your bills

Line items, taxes, invoice numbers, dates, whether a bill is paid, and whatever you wrote in the name field — a table number, a room, a person.
Your business

Business name, address, phone, GSTIN, UPI ID, invoice prefix and default tax rate — all optional, all only so they can appear on a bill.
Two images

Your logo and your UPI QR code, if you add them. They are copied into the app's storage so the bill can carry them.

There is no other list. billo does not record what you tap, how often you open it, which features you use, or anything about your phone. Not anonymously either — there is nowhere for such a record to go.

Permissions

One, and it is asked at the camera

Camera

For pointing the phone at a printed menu or a UPI QR code. Android asks you the moment a camera opens, never at launch. Say no and every one of those screens still works from your gallery instead.
Photos

billo asks for no photo permission at all. You pick one picture in Android's own picker and Android hands over that picture. The rest of your gallery stays invisible to the app.
Nothing else

No location, no contacts, no microphone, no call or SMS access. A billing app has no business asking.

Reading a menu photo and reading a QR code both happen on the phone, with models that ship inside the app. The pictures are not uploaded anywhere to be understood.

Sending things

Your data moves when you move it

Sharing a bill on WhatsApp, mailing a PDF, saving a PDF to Downloads, exporting a backup file — each of those is you handing a file to another app, deliberately, one tap at a time. billo never sends anything on its own and never in the background.

Once a bill is in WhatsApp or Gmail or your files, it lives under their rules, not these. That is worth knowing before you send a customer's details somewhere.

Android's own backup

The one copy that can leave without a tap

If backup is switched on in your Android settings, Android copies billo's data — the database, your business details, your logo and QR — into your own Google account backup, the same way it does for your other apps. It is also what carries your books across when you set up a new phone.

This is on purpose: for most people using billo, that phone holds the only record of what the business earned. But it is a copy in Google's hands rather than only yours, so you should know it exists. You can turn it off, or delete it, in Android's backup settings. I have no access to it either way.

The fine print I'd rather say out loud

Why the app lists an internet permission

If you check billo's permissions you will find INTERNET and ACCESS_NETWORK_STATE listed, which sits oddly next to everything above.

They are not mine. They arrive with a Google library that the menu scanner and the QR scanner are built on, and it is Google's own reporting pipeline for how that library gets used. None of your bills, menu, photos or business details are given to it, no feature in billo waits on a network, and the app works exactly the same with the data switched off.

I could have left this out and almost nobody would have looked. It seemed better to write it down than to promise something cleaner than what is actually installed.

Getting rid of it

Deleting is deleting

Delete a bill or a menu item in the app and it is gone from the phone. Uninstall billo and all of it goes — there is no server holding a shadow copy, no account to close, and no request to send me, because there is nothing on my side to delete.

The one exception is the Android backup above. If you want that gone too, clear it from your Google account's backup settings.

Before you uninstall, save a backup file from the Backup row under Setup if you want to keep your records. Once the app is off the phone, that history is not recoverable by me or by anyone.

Children

Not built for them

billo is a tool for running a small business. It is not directed at children, and it collects nothing from anyone, of any age.

Changes

If this page changes

I will update it here and change the date at the bottom. If billo ever gains something that genuinely handles your data differently, it will be written on this page before it ships, not after.

Contact

Ask me anything about this

billo is made by one person, and that person reads the mail: vail@orynx.space. If something on this page is unclear or looks wrong, that is worth an email — I would rather fix the sentence than have you guess.