PreciseCA mobile app

Privacy Policy

Effective 4 October 2026 · Applies to the PreciseCA app for Android and iOS (package io.preciseca.mobile)

This policy explains what information the PreciseCA mobile app collects, why, how it is protected, and the choices you have. The app is operated by Precise Integrations LLP ("PreciseCA", "we", "us").

PreciseCA is a business reporting tool. It lets authorised users of an organisation view accounting reports (such as Day Book, ledgers, receivables and payables) that the organisation has synchronised from its Tally accounting software into its own PreciseCA server. The app is a viewer: you cannot create an account in the app, and it does not change your accounting data.

1Who is responsible for your data

Your organisation (the business that subscribed to PreciseCA and gave you access) decides who may use the app and which reports each user can see. For the business and accounting data shown in the app, your organisation is the data fiduciary (data controller) and PreciseCA processes that data on its behalf. For the sign-in information described in section 2, PreciseCA is responsible.

2Information we collect

Information	Why we use it	Where it is kept
Mobile phone number	To sign you in with a one-time password (OTP) and to find which organisation's server your account belongs to.	Our sign-in service stores it only as a keyed one-way hash, not in readable form. Your organisation's server holds it as part of your user account.
One-time password	To confirm that you control the phone number.	Sent by SMS. It is valid for 10 minutes and works only once.
Sign-in tokens	To keep you signed in without asking for an OTP every time.	On your device, in the Android Keystore or iOS Keychain. They are short-lived and renewed automatically.
App installation identifier	A random code created by the app, used to manage your signed-in sessions and to sign out a lost device.	On your device and on your organisation's server. It is not linked to your device's hardware IDs or advertising ID.
Technical logs	IP address, time of request and the action requested, used for security, abuse prevention and troubleshooting.	On our sign-in service and your organisation's server.
Business reports	To show you the reports your organisation allows you to see.	Fetched from your organisation's server when you open a report. The app keeps them in memory while it is open and does not save them as files on your device.

3What we do not collect

No advertising and no advertising ID.
No analytics or tracking SDKs, and no tracking across other apps or websites.
No location, contacts, camera, microphone, photos, files, SMS inbox or call logs.
No payment card or bank account details. The app does not make payments or offer loans or financial products.

4How we share information

We do not sell personal information and do not share it for advertising. We share it only as follows:

SMS delivery provider. Your phone number and OTP are passed to our Indian SMS gateway, which delivers the message under a DLT-registered template. It may use the information only to send the message.
Hosting provider. Our servers run on a cloud hosting provider that stores data on our behalf under contract.
Your organisation. Your organisation's administrators can see your user account and the activity logs on their PreciseCA server.
Legal reasons. When required by law, court order or a government authority, or to protect the security of our users and services.

5Security

All traffic between the app and our servers is encrypted with HTTPS (TLS).
Sign-in tokens are kept in the operating system's secure storage. Access tokens expire within minutes, refresh tokens are replaced on every use, and reuse of an old token signs out the whole session.
Each request is re-checked against your account, your organisation's subscription and your report permissions, so access ends as soon as an administrator removes it.
OTP attempts are limited to prevent guessing.

No system is perfectly secure, but we work to protect your information and will notify affected users and authorities of a personal data breach as the law requires.

6How long we keep information

OTPs expire after 10 minutes.
Sign-in sessions end when you sign out, when they expire, or when your access is removed. Signing out deletes the tokens from your device.
The hashed phone number on our sign-in service is kept while your organisation lists you as an active user, and is removed when your organisation removes you.
Your user account and business data are kept on your organisation's server for as long as your organisation's subscription and its own retention needs require.
Technical logs are kept for up to 35 days for security and troubleshooting, then deleted.

7Your rights and choices

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you may ask to access, correct or erase your personal data, withdraw consent, and nominate another person to exercise these rights for you. You can also:

Sign out of the app at any time, which removes your sign-in tokens from the device.
Uninstall the app, which removes everything the app stored on the device.
Ask your organisation's administrator to deactivate or delete your user account.
Request deletion of your account and the data we hold about you (steps: mobile.preciseca.io/delete-account) by emailing privacy@preciseca.io from, or mentioning, the phone number you sign in with. We will confirm your identity and respond within 30 days. Records your organisation must keep by law (for example accounting records) are handled by your organisation.

8Children

The app is a business tool intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.

9Changes to this policy

We may update this policy when the app or the law changes. We will post the new version on this page with a new effective date, and tell you in the app if a change significantly affects how your data is used.

10Contact and grievance officer

For questions, requests or complaints about privacy:

Precise Integrations LLP (registered office)
6, Pranika Avenue, Manek Shiv Nagar,
Near Swami Samarth Mandir, Kathe Galli, Dwarka Corner,
Nashik 422011, Maharashtra, India
Email: privacy@preciseca.io
Grievance Officer: Mangesh Mahajan

We will acknowledge your complaint and try to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.