Privacy Policy

Last updated: 31-10-2026

MazaKhata helps you keep your daily expenses and khata (credit) accounts. This page explains in plain words how your information is handled.

What we collect

Account: username, full name, mobile number (optional), language and password. The password is stored only as an encrypted hash, so we cannot read it.
Your records: expenses, notes, custom categories you create, khata accounts of shopkeepers and tutors (name, optional mobile and UPI ID), credit entries and payment entries.
Paid plan requests: if you tell us you paid for the paid plan, we store the period, amount, transaction number (UTR) and your note.
Technical: last login time, one session cookie that keeps you signed in, and normal server logs.

QR scanning happens inside your phone browser. Camera images are not recorded, saved or uploaded to our server.
Only the UPI ID, name and amount found in the QR are put into the form. You can also choose a QR image instead of using the camera.

MazaKhata does not move your money and never sees your bank details or UPI PIN. Payments go through your own UPI app.
A payment in your khata is recorded as paid only when you tap "Mark as paid" yourself.
For the paid plan you send money to our UPI ID. The plan is activated by hand after we confirm the money has arrived. Your bank and UPI app keep their own record of that payment, which we cannot delete.

Only you can see your records. Each user's data is kept separate.
The owner panel shows account details (username, name, mobile, plan, number of entries) and paid plan requests (amount, transaction number, your note). It does not show your expenses or khata entries.
The site owner, as the operator, has technical access to the database. Your records will be looked at only to fix a problem you report, or if the law requires it.
If you forget your password, the owner can create a temporary one. You must set your own new password as soon as you use it.

We do not sell your data, show advertisements, or give it to advertisers.
The website runs on a hosting provider (Hostinger), so your data is stored there. The QR reader library loads from cdnjs (Cloudflare), so that service may see your IP address when the page loads.

We use one essential session cookie. There are no advertising or tracking cookies.
Your phone saves only style files, icons and the "No internet" page. Your accounts are not stored on the phone.

Passwords are stored as hashes, the site runs over HTTPS, and login is paused for a while after repeated wrong passwords.
No system is 100% secure. Please keep your password private.

In Profile you can change your name, mobile, language and password.
In Profile, "Delete my account" lets you permanently delete your account and all records yourself. This also removes your categories and paid plan requests.
For help, email us at the address below. We keep your information for as long as your account exists.