Privacy Policy

Effective & last updated: May 2026

Welcome to MyBiller. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the Android app and any related services operated by Black & White Studio ("we", "us", "our").

    Privacy in one line. Your customer, bill, collection and receipt data lives only on your phone. The backend only handles login, profile and silent dashboard counters — it never stores your customers' details.
  

What's in this policy

Who we are
Information we collect
How we use it
Local-first storage
Drive backup
Backend APIs
Permissions
Data sharing
Security
Retention & deletion
Your rights
Children's privacy
Changes & contact

1. Who we are

MyBiller is developed by Black & White Studio, Dhaka, Bangladesh. Contact: info@blacknwhitestudio.com · +880 1945 936934.

2. Information we collect

Information you provide

Google account info — name, email, profile photo (for sign-in).
Organization profile — organization name, business type, district, address, mobile, logo.
Customer data — customer codes, names, mobiles, alternate mobiles, addresses, areas, monthly bill amounts, notes (kept on your device only).
Bill & collection data — bill amounts, categories, due dates, payment dates, methods, receipt numbers (kept on your device only).

Information collected automatically

Silent dashboard counters — device ID, app version, Android version, brand, model, database size, customer count, bill count, collection count. Sent so we can compute trial dates, plan limits and show promotional banners. No customer details are sent.

3. How we use information

To operate customer, bill, collection and receipt features.
To authenticate you via Google Sign-In and maintain a JWT session.
To enforce trial dates, plan limits and feature flags returned by the dashboard API.
To show optional promotional banners on the dashboard.

4. Local-first storage

All customer, bill, collection, receipt and category data is stored exclusively in a local Room database on your device. The backend never sees it. If you uninstall without backup, the data is permanently deleted.

5. Google Drive backup

Drive auto-sync writes your data to your own Google Drive account. We do not access, read or store backups on our servers. Restoration is fully under your control.

6. Backend APIs

MyBiller's backend exposes three endpoints:

POST /auth/google — verifies your Google token, returns JWT and profile-completion flag.
POST /profile/update — stores your organization profile.
POST /dashboard — silent daily sync of usage counters; receives trial date, plan limits, can-add flags and a promo banner.

No customer, bill, collection or receipt records are sent.

7. Permissions

Internet — for login, profile, dashboard and Drive backup.
Notifications — for due, backup and bill-generated reminders.
Storage / share — to export PDF receipts and share via WhatsApp or print.
Drive (AppData) — to read/write your private backup file.

8. Data sharing

We do not sell, rent or share your data. Data is shared only with Google (Auth, Drive) to operate the Service, and when required by law.

9. Security

Local Room database is stored in the app's private storage.
JWT tokens live in encrypted DataStore.
Backups travel over HTTPS to your Drive AppData folder.

10. Retention & deletion

Local data — kept until you delete it or uninstall.
Drive backups — kept in your own Drive until you delete them.
Backend account — kept until you request deletion via email.

11. Your rights

You may access, correct, delete or port your account data by emailing us. Local data is fully under your control via the app.

12. Children's privacy

MyBiller is a business tool not directed to children under 13.

13. Changes & contact

We may update this Privacy Policy. Material changes will be communicated via an in-app notice. Email info@blacknwhitestudio.com or WhatsApp +880 1945 936934.