Privacy policy

Information Munshi handles

We process the information needed to open and operate your business workspace. Some records describe other people, so only enter information you are authorised to use.

• Account information: your account identifier and the name, email address or other information your sign-in provider supplies.
• Business profile: business and owner names, mobile number, business activity, city, area, address and financial-year settings. Business addresses are entered by you; they are not a request for your device’s GPS location.
• Business records: customer and supplier details, worker records, wages, advances, partner accounts, purchases, sales, quantities, stock locations, expenses, balances and approval history.
• Payment records: amounts, bank or wallet account details you enter, and cheque or written-note information. Munshi records these details; entering them is not a bank transfer.
• Documents and photos: receipts, bills, cheque images and other files you choose to attach, plus notes and captions.
• Service information: sign-in sessions, access permissions, entry references, activity and audit records. Servers and hosting providers also process network information such as your IP address to deliver and protect the service.
• Support information: messages and account details you choose to give the Munshi team.

How we use it

• Authenticate you and open the workspaces you are allowed to access.
• Save and retrieve business records; calculate and display ledgers, stock, reports and balances.
• Manage worker permissions, owner approvals and the history of changes or actions.
• Store attachments and prepare receipts, printouts and exports you request.
• Provide support, investigate errors or misuse, protect accounts and handle deletion requests.
• Meet obligations that apply to the business records and the operation of the service.

Where information is stored

Saved business records and uploaded attachments are sent to Munshi’s server and storage infrastructure. Munshi uses a Supabase-based authentication and database system; this describes the software and does not mean every record is sent to Supabase’s hosted cloud service.

Your device also keeps settings, drafts and sign-in information needed to resume work. The Android app protects stored session values with the Android Keystore, and the iPhone app uses Keychain storage. The shared web app uses browser storage for its session. Use sign out on a shared device.

Hosting and sign-in infrastructure can process information outside your country. We do not promise a particular storage country on this page.

Who can see or receive it

People authorised for your business can see records according to their assigned role. Owners and administrators manage access. Authorised Munshi administrators may process records when needed to operate the service, provide support or handle security and account requests.

Infrastructure providers process information needed to host and deliver the service. Apple or Google processes information when you use its sign-in option, under its own privacy policy. We may disclose information when required by law or when reasonably necessary to protect legal rights or investigate misuse.

We do not sell your personal information. The current app does not include advertising, cross-app advertising tracking, or AI processing of your business records.

Photos, camera and sharing

Where supported, the app opens the system camera or file/photo picker when you choose to add a document. A selected photo may be compressed on your device before being uploaded with its business record. Denying camera access does not authorise the app to access your photo library. You can manage device permissions in system settings.

Sharing and printing happen when you choose them. A receipt or export can contain contact information, amounts and attached images. Check it before sending. Your selected recipient and any app you share through handle that copy under their own policies; deleting your Munshi login does not recall a copy already shared.

Retention and deletion

We keep account and workspace information while needed to provide the service, support the business or meet applicable obligations. A request to delete a personal account starts a separate process for removing its login and assessing associated personal information.

Posted transactions, shared business ledgers, linked supporting documents and audit history are not automatically erased when one person leaves or deletes a login. They can remain with the business for accounting, audit, dispute, security or legal reasons. A deletion request and its completion record may also be retained to document the request.

Retention depends on the record and the business’s applicable obligations. Contact the team to ask which records are retained, why, and the retention period that applies to your request. We do not promise that every business record or backup is erased immediately. See the account-deletion page for the process.

Your choices and requests

You can change available profile details, choose Urdu or English, manage device permissions, sign out and request account deletion. Posted financial entries may require a correction through an authorised person rather than direct editing.

Contact the team to request access to or correction of personal information, or to ask for deletion of specific information. We may verify your identity and your authority over a business before acting. Requests can be limited where another person’s rights or a legitimate record-keeping obligation applies.

This website

The public-facing content is informational. The sample screen explorer and purchase calculator do not connect to your Munshi account or submit the figures you enter. The site does not add advertising cookies or an analytics SDK.

The website hosting provider processes requests, security information and any hosting authentication under its own policies. A private review version may require the hosting provider’s sign-in. Following a store, phone or messaging link opens the corresponding external service.

Security and children

We use access controls and protected sign-in storage to help safeguard records. No online system can guarantee absolute security. Protect your device and sign-in account, and tell the team if you suspect unauthorised access.

Munshi is a business tool, not a service directed at children. Do not use it to collect unnecessary personal information about children. Contact the team if a child’s information has been entered inappropriately.

Changes and contact

We will update this page when our practices change and show the revised date. Material changes may also be communicated in the app or through available account contact details.

For privacy questions or requests, contact the Munshi team through the support details below.