Privacy Policy
lābhofy ("the app", "we", "us") is an Android app for small manufacturers and re-packers, built and operated by Thampister, India. This policy explains what data the app handles, where it goes, and the choices you have. The website is www.labhofy.com.
1. Data stored on your device
Everything you enter into the app, such as products, materials, purchases, production batches, sales, customers, suppliers, staff, and reports, is saved in a database on your phone. We have no access to it and it is not uploaded to us. Backups and exports you create are files you save or share yourself. If you uninstall the app or clear its data without a backup, this information is lost, and we cannot recover it for you.
2. Permissions the app asks for
| Permission | Why |
|---|---|
| Camera | To photograph bills, products and proof documents, and to scan QR codes. Photos are stored on your phone unless you use AI Scan (section 3). |
| Microphone | To record a voice entry for AI Scan. The recording is used only when you choose to scan it. |
| Bluetooth | To connect to a thermal receipt printer you choose. Not used for location. |
| Internet | For the optional online features in section 3 and for downloading language, help and template files from labhofy.com. |
The app does not request your location, contacts, or SMS.
3. Data that leaves your device
a) Business registration (collected when you set up the app). During onboarding the app sends us the details you enter: business name, owner's name, phone number, email, country and state, together with your device ID, the app version, and any activation or referral code you enter. All of these except the optional code are required to set up the app. We send a one-time 6-digit code to your email address to confirm that it is yours; the code is stored only in scrambled (hashed) form and stops working after 10 minutes. Setting up the app needs an internet connection. Your street address and postal code are optional and are entered later, in Settings. We use this to register your business, provide licences and support, contact you about your account, apply activation and referral codes, and understand how many businesses use the app. This data is stored on our servers (api.labhofy.com). We do not sell it or share it with advertisers. If you are offline, setup waits until you are connected.
b) AIDEA / AI Scan (optional). When you scan a photo, voice recording or text with AI, that item, together with an anonymous licence/installation ID used to track your AI scans, is sent to our server (hosted on Cloudflare) and passed to Google's Gemini AI service to be read and converted into an entry. Only the item you chose to scan is sent. We keep a record of your installation ID and remaining scan balance. We do not use scanned content to advertise to you, and we do not use it to build a profile of you. Do not scan anything you are not comfortable sending for processing.
c) Licence and referral codes (optional). When you register your installation or redeem a code, the code and your installation ID are sent to api.labhofy.com to validate it.
d) Online Store (optional, a paid add-on after the first month). If you turn
on the Online Store, the app sends our servers the store details you enter (store name, store
address name, WhatsApp number, area, about text, logo, UPI ID, delivery charge settings and,
if you use one, your own domain name) and the catalog items you choose to publish (names,
descriptions, categories, prices, stock availability, bundle contents and up to 5 photos per
item). Our servers show these on your public store page.
Your customers' data. When a customer places an order on your store page, we store
what they enter: name, phone number, email address, delivery address, pincode, any note, and
the items ordered, so that you can fetch the order into your app. You decide what to do with
that data; we hold it for you and do not use it for advertising or sell it. We use the
customer's email only to send them their order confirmation, shipping notice and one-time
sign-in codes (OTPs) to view their own orders. The store page keeps a sign-in cookie for
30 minutes after a customer enters a valid OTP. To limit abuse we also record a one-way
hash of the visitor's IP address for a short time; we do not store raw IP addresses for this.
Order pages shown to customers hide parts of the address and email. If you do not publish
anything and never turn the store on, none of this is sent.
e) Purchases through Google Play (optional). If you buy the licence or an AI scan pack in the app, the payment is handled by Google Play. We never see your card, UPI or bank details. After you pay, the app sends us the purchase token, product name and your device ID, and we confirm the purchase with Google and record it against your device so the licence or scans can be applied. Because the licence is tied to your Google account, restoring it on a new phone sends the same purchase details again.
f) Sharing. When you share an invoice, bill, report or order using your phone's share sheet, the file goes to the app and person you pick. That is under your control and outside our servers.
4. Payments
The app does not collect or store card, bank or UPI credentials. Purchases made in the app are paid through Google Play, which is governed by Google's own terms and privacy policy. Copies of the app downloaded directly from our website may be paid for by UPI to the details we show you and confirmed manually. In either case we record the payment type, amount, method, date and a short note against your account.
5. Third-party services
- Cloudflare hosts our AI Scan service and scan balance records.
- Google (Gemini API) processes items you send for AI Scan.
- Google Play distributes the app, processes in-app purchases, and may collect its own usage and crash data under Google's policies.
- Brevo (email delivery) sends Online Store emails to customers: order confirmations, shipping notices and one-time sign-in codes. It receives the recipient's email address and the message content.
- Our web hosting provider hosts our servers, including the Online Store pages and database.
The app itself contains no advertising SDKs, analytics SDKs or crash-tracking services.
6. Retention and deletion
Data on your phone stays until you delete it or uninstall the app. Server-side records (registration details, installation ID, scan balance, purchases and code redemptions) are kept while your account is active and for as long as needed to provide the service and meet legal or accounting obligations. To have your registration details and other server-side records deleted, email app@labhofy.com from your registered email or phone, quoting your device ID, and we will remove them. Scan items sent for AI processing are used to produce the result and are not kept by us as part of your record.
Online Store data (your store details, published items and photos, and the orders customers placed) is kept while your store exists. If your store subscription ends, the store switches off but its data is kept so you can renew; you can ask us to delete it at any time and we will. A customer who wants their own order details removed can email app@labhofy.com from the email address they ordered with, quoting the store and order number. One-time sign-in codes are deleted as soon as they are used or expire.
7. Security
Connections between the app and our servers use HTTPS. Your device data is protected by your phone's own security, so we recommend using a screen lock. No system is perfectly secure, but we keep the data we hold to the minimum needed.
8. Children
lābhofy is a business tool and is not directed at children under 13. We do not knowingly collect data from children.
9. Your choices and rights
You can leave the optional fields (address, postal code and codes) blank, and you can use the app without AI Scan, codes or website sync. You may ask us what data we hold about you, ask us to correct it, or ask us to delete it, at the email below. You can withdraw camera, microphone and Bluetooth permissions at any time in your phone's settings; the related features will then stop working.
10. Changes to this policy
If we change how we handle data, we will update this page and the date above. Significant changes will also be noted in the app or on our website.
11. Contact
To ask us to delete your data, see Delete your data.
Thampister, India
Email: app@labhofy.com
Phone / WhatsApp: +91 95263 13272
Web: www.labhofy.com