Privacy Policy

Effective date: 28 October 2026

This Privacy Policy explains how CashBell (the “App”, Android package com.cashbell.app) collects, uses, shares and protects information. CashBell is operated by Handful Labs, a sole proprietorship of Kaustubh Khandelwal, GSTIN 08CVRPK6564P1ZF, registered at 17-B, New Colony, Gumanpura, Kota, Rajasthan 324007, India (“CashBell”, “we”, “us”). Address: 17-B, New Colony, Gumanpura, Kota, Rajasthan 324007, India. Contact: kaustubh.khandelwal4@gmail.com.

By installing or using the App you agree to this Policy. If you do not agree, please do not use the App.

1. What CashBell does

CashBell is an Android app for merchants in India. With your permission, it reads notifications from the payment apps you choose and, when a payment is received, announces the amount out loud using your phone’s text-to-speech. It also shows today’s collection and transaction list, earning reports, your own UPI QR code (including a home-screen widget), and a Team feature that lets staff phones hear the same announcements.

2. Notification access: exactly what is read and what is ignored

CashBell’s core feature uses Android’s Notification Access (Notification Listener) permission. You grant this permission yourself in Android settings, and you can turn it off at any time in Settings → Notifications → Device & app notifications (wording varies by phone). Without it, CashBell cannot announce payments.

What CashBell reads

• Only notifications posted by the payment apps you select inside CashBell (for example GPay, PhonePe, Paytm, CRED, Amazon Pay or your bank’s app).
• From those notifications, CashBell looks only for payment-received messages. When it finds one, it extracts and stores:
  • the amount received;
  • the payer’s name or payer UPI ID, where shown in the notification;
  • which payment app it came from;
  • the time of the payment notification; and
  • a truncated copy of the notification text (maximum 500 characters), kept so you can check how the entry was recorded.

What CashBell ignores and never stores

• Notifications from any app you have not selected are ignored. They are not stored or sent anywhere.
• CashBell does not read or store OTPs, SMS or chat messages, or UPI PINs.
• CashBell does not read your bank balance or your payment app accounts, and it cannot make or approve payments.

How this data is used

Payment entries captured from notifications are used only to make the announcement and to show your own ledger, transaction list and reports. They are shared only with team members you add to your shop (see Section 6). They are not sold and are not used for advertising.

3. Information we collect

We do not collect card numbers, bank account login details or UPI PINs. Subscriptions are paid through Google Play, and CashBell never sees your card or UPI payment details.

4. Legal basis and consent

We process your information on the basis of your consent, given when you sign up, grant notification access and choose the payment apps to monitor, and as needed to provide the service you asked for. Under India’s Digital Personal Data Protection Act, 2023 and other applicable law, you may withdraw consent at any time by turning off notification access, changing the monitored apps, or deleting your account. Withdrawing consent does not affect processing that already happened, but some features will stop working.

Where you add team members, you confirm that you have their permission to share their name and mobile number with CashBell for this purpose.

5. Service providers we use

We use the following providers to run CashBell. They process data on our behalf, or as independent services where noted, under their own terms and privacy policies:

• Railway: application hosting and database (Singapore region).
• Cloudflare R2: encrypted database backups.
• Google Firebase: phone-number sign-in fallback, push notifications (Firebase Cloud Messaging) and crash reports.
• MSG91: sending OTP SMS for sign-in.
• Truecaller: optional one-tap login, only if you choose it.
• Google Play Billing: subscription purchases and payments.
• Amplitude and Meta (Facebook) SDK: these may be used for app analytics and install attribution, which can involve your device’s advertising ID. You can reset or delete your advertising ID, or opt out of ad personalisation, in your Android settings (Settings → Google → Ads or Settings → Privacy → Ads).

Because our hosting is in Singapore, your information may be stored and processed outside India. We take reasonable steps to make sure it stays protected as described in this Policy.

6. How information is shared

• With your team: payment announcements and transaction data for your shop are shared with team members you add. You can remove a team member at any time.
• With service providers listed above, only as needed to run the App.
• For legal reasons: when required by law, court order or a government authority, or to protect the rights, safety or property of CashBell, our users or others.
• Business transfer: if CashBell is merged or sold, information may be transferred to the new operator, who will be bound by this Policy or one that is equally protective.

We do not sell your personal information.

7. Data retention

• Account, shop, team and transaction data are kept while your account is active.
• When you delete your account, this data is deleted from our live systems and your phone number is scrubbed. Encrypted backups expire within 14 days.
• Google Play purchase records are kept as financial records, as required for accounting and legal purposes.

8. Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS) between the App and our servers, access controls on our systems and encrypted backups. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach that affects your personal data, we will notify you and the authorities as required by law.

9. Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you. Much of it can be seen in the App (profile, shop settings, team, transactions).
• Correct inaccurate or incomplete information. You can edit your name, language and shop settings in the App, or email us.
• Delete your account and data, in the App under Settings → Delete account, or by email. See Delete your account.
• Withdraw consent, for example by turning off notification access.
• Raise a grievance and nominate another person to exercise your rights if you die or become incapacitated, as provided under applicable law.

To exercise any right, email kaustubh.khandelwal4@gmail.com from, or quoting, your registered mobile number. We may need to verify your identity. We aim to respond within 30 days.

10. Children

CashBell is a business tool for merchants. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has given us information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will change the effective date above and, for significant changes, notify you in the App or by other reasonable means. Continuing to use the App after a change means you accept the updated Policy.

12. Contact and grievances

For questions, requests or complaints about privacy, contact:

Handful Labs (CashBell) — sole proprietorship of Kaustubh Khandelwal
GSTIN 08CVRPK6564P1ZF
17-B, New Colony, Gumanpura, Kota, Rajasthan 324007, India
Email: kaustubh.khandelwal4@gmail.com