Privacy policy

Applies to the Collection Book Android app and to cbk.sarbaa.com.

1. What this policy covers

This policy covers the Collection Book Android app and the public website at cbk.sarbaa.com, which is operated by Sarbani Associates from Bagdogra, Siliguri, West Bengal. It describes what each of them stores, what leaves your phone, and who to contact.

Collection Book has no user account and no hosted copy of your subscriber register. This is the single most important fact on this page.

2. Your subscriber and customer data stays on the phone

Subscriber names, alias names, phone numbers, VC/STB numbers, account numbers, areas, monthly amounts, and every payment and adjustment are stored in a local SQLite database inside the app on your device.

That data is not uploaded to us, to a hosting provider, or to any other service by the app.
It leaves the device only when you choose to: exporting or sharing a list, taking a local backup copy, or restoring a backup file you already have.
Once you share a file or a receipt through another app, that app and its recipients apply their own policies.

The Android app is installed with operating-system backup disabled, so the local database is not copied into the platform's own backup services. Clearing the app's storage, uninstalling it, or resetting it from the app's settings removes the register, the queued events, and the random client identifier on that device.

The app generates a receipt on your device and hands it to the WhatsApp app installed on the phone, in the language you selected. It never connects to a WhatsApp Business account or a messaging API, and it never sends anything on its own: every message starts with a tap from you.

When the WhatsApp app is not installed or cannot be opened, the app falls back to wa.me and hands your browser a wa.me web link instead. On that fallback the complete receipt text is placed in the link's text parameter, which means the customer name, phone number, service identifier, billing month, amount paid, and remaining balance all travel to WhatsApp's web service. The link is handled by the browser and by WhatsApp under their own privacy policies and terms, both of which may use that information. Because the full receipt leaves the app in a URL, treat a wa.me fallback as a share with the network provider rather than as a purely on-device action, and prefer the installed app when a message contains customer details.

The same is true of backups and exports. The app hands the file to the system share sheet, and the app you pick completes the transfer.

4. The small, pseudonymous product event queue

To know which parts of the app are used, the app keeps a queue on the device of a small set of product events. A batch contains:

a random client identifier generated on the device, with no name, phone number, email address, or account attached to it;
event names from a fixed allowlist, such as first app open, first subscriber created, a spreadsheet import, a payment recorded, and a receipt handed to WhatsApp;
the event timestamp, and a small set of allowlisted properties such as counts, timings, the service type, and the detected import format.

These events never contain subscriber names, subscriber or customer phone numbers, VC or STB numbers, payment amounts, areas, or free-text fields.

Delivery to cbk.sarbaa.com is only attempted while the device reports a Wi-Fi connection. If no attempt succeeds, the events stay queued on the device. Because the edge service accepts a batch only when its analytics storage is available, a deployment without that storage answers with a temporary error and the app keeps its queue rather than discarding it.

Resetting the app from its settings removes the local register, the queued events, and the random client identifier on that device.

5. Referral links

A receipt may carry a referral link to a page on this site. Visiting it sets a single first-party cookie named cbk_referral that holds the six-character referral code, is marked HttpOnly, Secure, and SameSite=Lax, and expires after 30 days. It is not readable by scripts and is not shared with any advertising or analytics provider.

For each valid referral click the server writes one log line containing the event name, the referral code, a generated request identifier, and a timestamp. That line deliberately excludes IP addresses, user agents, cookies, subscriber data, and operator data.

6. Website hosting and network data

This site is served over HTTPS through a hosting provider and, for the referral and event endpoints, through a CDN or reverse proxy. Like any web server, they process the ordinary network metadata a connection requires, such as the request time, the requested path, response status, and the connection's IP address, and they may keep their own short-lived logs and rate limits for security and abuse prevention. The app itself does not send subscriber or customer data to them.

This page contains no scripts, no cookies of its own, no embedded third-party content, and no advertising or measurement code.

7. Retention and your control

Data on the device is under your control: it stays until you delete it, you clear the app's storage, you uninstall the app, or you reset it from the app's settings. Backups you create are ordinary files that you keep, move, or delete yourself.

Server-side, we keep the minimum needed to operate the site: short-lived web request logs from the hosting and proxy layers, and the minimal referral log described in section 5. How long those operational logs are kept is a decision for the hosting provider's own policy, and we do not publish a fixed deletion window here. If you want a specific record removed, contact us using the details in section 9 and we will tell you exactly what we can find and delete.

8. Children

Collection Book is a business tool for collection operators. It is not directed at children, and we do not knowingly collect personal data from them.

9. Contact

Operator: Sarbani Associates, Bagdogra, Siliguri, West Bengal, India
Website: https://sarbaa.com
Phone: +91 89721 46130

Use the phone number or the website above for any question about this policy, a referral log line, or a data deletion request.