Fairsheet privacy policy
- Everything you put in Fairsheet stays on your phone, in an encrypted database. We have no servers and no accounts.
- The app has no internet permission. No ads, no analytics, no tracking. We never see, sell or share your data.
- Your staff's details are entered by you, stay on your phone, and leave it only when you share them.
What the app stores, and where
Fairsheet keeps the following only in the app's private storage on your device:
- Your business profile: name, address, owner's name and role, phone, email, website, GSTIN, tagline, logo and card colour.
- Your payroll rules: shift times, break, overtime, weekly offs, pay cycle, holidays, leave types, and food and perks.
- Your employees: name, employee code, phone, email, designation, joining and leaving dates, pay type and rate, pay increments, UPI ID, blood group, emergency contact phone and photo.
- Their work records: clock-in and clock-out times, leave, overtime, bonuses, allowances, deductions, advances and loans with their repayments, finalised salaries, and payment records (status, amount and the UPI or bank reference you type).
- An edit history of changes to attendance, salaries and settings, so a dispute can be checked.
The database is encrypted with SQLCipher. Its key is made on your phone and stored only wrapped by a key held in the Android Keystore, so a copy of the app's files can't be opened on another device. Photos and the logo are kept as image files in the app's private storage. Salary slips and reports you export are made in a temporary folder and deleted after a day.
Android's own device backup is switched off for this app, so none of this goes into your Google account backup. The password-protected backup below is the only way data leaves the app in bulk.
Permissions
| Permission | Why |
|---|---|
| Notifications | Reminders on the phone: people still clocked in at closing time, no one marked in yet, salaries ready or still unpaid, and a nudge to back up. |
| Run at startup | Re-arms those reminders after the phone restarts. |
| Fingerprint (biometric) | Only if you turn on Unlock with fingerprint for the app PIN. Android checks the fingerprint; the app never sees or stores it. |
| See UPI apps on the phone | Lets Pay with UPI list the payment apps you have installed (GPay, PhonePe, Paytm, BHIM…). The list isn't stored or sent anywhere. |
Photos for employees and the logo come through Android's photo picker, so the app sees only the picture you choose and needs no storage permission. Fairsheet doesn't use the internet, contacts, location, camera, microphone or SMS.
App PIN
The optional PIN is stored only as a salted hash (PBKDF2) on your phone. It isn't included in backups. With a PIN set, the home screen widget shows counts only, not names.
Sharing you choose
Nothing leaves the phone unless you send it. When you share a salary slip PDF, a payroll report (PDF, Excel or CSV), an ID or visiting card, or a backup file, the app hands that one file to the app you pick (for example WhatsApp, email or Google Drive). A salary slip holds only that one employee's details. Pay with UPI opens your UPI app with the employee's UPI ID, name, the amount and a note filled in; you confirm the payment there. Call opens your phone's dialer, and Privacy policy opens this page in your browser. What happens next is covered by that app's privacy policy.
Backups
A backup file is made only when you tap Export a backup. It holds your business, staff and records, encrypted with a password you choose (AES-256-GCM, with the key derived by PBKDF2), and is saved where you pick. We can't open it or recover the password. Restoring a backup replaces everything on the phone with its contents.
Your employees' data
Fairsheet is used by a business owner to record their own staff. Employees don't use the app, and their details are typed in by the business. That information stays on the owner's phone; we never receive it.
A note for businesses under India's Digital Personal Data Protection Act, 2023: for your employees' personal data you are the data fiduciary, not us. In practice: tell your staff what you record and why (attendance and pay), record only what you need, keep the phone and backups protected (a phone lock, the app PIN, a strong backup password), share a slip only with the employee it belongs to, correct details when they ask, and delete what you no longer need to keep, subject to how long wage records must be kept by law.
Deleting your data
You can delete leave, adjustments and holidays in the app, and mark an employee as left (their history is kept for wage records). Uninstalling the app, or Android Settings → Apps → Fairsheet → Storage → Clear storage, deletes everything it stored, including the encryption key. Backup files and slips you shared are yours to delete.
Children
Fairsheet is a business tool for adults. It is not directed at children and doesn't knowingly collect anything from anyone.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Questions: singhdharmvir81@gmail.com