Milk Tracker Logo
Milk Trackerby Gulposh Labs
DPDP Act 2023 Compliant

Privacy Policy

Compliant with Digital Personal Data Protection Act, 2023 (India) • Last Updated: September 25, 2026

1. Overview & Data Architecture

Milk Tracker ("we", "our", or "us"), operated by Gulposh Labs, is a modern dairy accounting and milk delivery management application. In legal terms under the Digital Personal Data Protection Act, 2023 (DPDP Act, India), Gulposh Labs acts as the Data Fiduciary determining the purpose and means of processing personal data within our ecosystem. The app combines high-speed on-device database storage (Android Room DB v12) with online cloud capabilities. When Cloud Synchronization is enabled, transaction records synchronize in real time with our secure online cloud database (Google Cloud Firebase Firestore). Furthermore, the application is ad-supported for free tier users, requiring active internet connectivity to load third-party advertisements via Google AdMob, synchronize cloud records, and check configuration updates. Paid subscribers receive a 100% ad-free experience.

2. Information We Process & Collect

When you use Milk Tracker v2.7.0, the application processes the following categories of information:

  • User Profiles & Ledgers: Profile names, contact numbers (optional), fixed/dynamic per-litre rate structures, FAT/SNF formulas, and default Sold (Blue) / Bought (Orange) designations.
  • Milk Transactions: Quantities (litres), session timestamps (morning/evening), FAT/SNF percentage logs, total amounts, and transaction status (sold vs. bought).
  • Financial & Payment History: Settlement checklists, cash/online payment entries, partial payments, remarks, and monthly bill summaries.
  • Vacation & Extra Products Ledger: Scheduled vacation dates (auto-skip days) and additional items (ghee, butter, paneer, curd, etc.).
  • Device & System Data: Device model, OS version, app version, language preference, and unique installation IDs used for debugging, Firebase Remote Config sync, and Google Play Billing entitlements.
  • Voice / Audio Inputs: When using the optional voice logging assistant, the microphone is accessed strictly in real-time on-device via Android SpeechRecognizer. Audio data is ephemeral, processed locally, and never recorded, saved, or uploaded to any server.

3. In-App Purchases & Billing Information

Milk Tracker integrates the official **Google Play Billing API** to offer premium feature tier subscriptions (Normal Premium and Trader Tier) as well as virtual rewarded options.

  • Financial Transactions: All financial payments, credit card details, UPI transactions, and billing operations are handled exclusively by **Google Play Commerce**. Milk Tracker and Gulposh Labs **never store, collect, or process your credit card, debit card, bank account, or payment details**.
  • Purchase Tokens & Subscription Status: The app receives cryptographic purchase tokens, purchase IDs, product identifiers, and expiry timestamps directly from Google Play Services to unlock subscription features and restore past purchases.

4. Cloud Synchronization & Google Drive Backups

Milk Tracker provides integrated online cloud features for multi-device synchronization and offsite backups:

Multi-Household Cloud Sync (Google Cloud Firebase Firestore)Opt-In Only: Data is synchronized to the cloud only if and when you actively enable Cloud Sync and generate or join a 16-character Household Sync ID (`milktracker.gulposhlabs.in/sync?id=...`). No user account, email, or phone number signup is required.

Encrypted Transmission: All data exchanged between your device and Google Cloud Firebase Firestore is protected in-transit using industry-standard HTTPS / TLS 1.3 encryption.

Infrastructure Administration: Data on the standard Cloud Sync cluster is hosted on Firebase Firestore infrastructure maintained and operated by Gulposh Labs. Database administrators at Gulposh Labs manage the server infrastructure; stored records are organized by your Sync ID rather than client-side zero-knowledge encryption.
Private Database Mode (Custom Firebase Project)For organizations or individuals desiring total data isolation, Milk Tracker allows entering custom Firebase configuration keys (Project ID, API Key, App ID) in Advanced Sync settings. When configured, data routes directly to your private Google Cloud console, completely bypassing Gulposh Labs infrastructure.
Google Drive Cloud Backup & RestoreWhen backing up or restoring via the Google Drive REST API, database backups are uploaded directly to your own personal Google Drive app storage. Gulposh Labs never receives, accesses, or stores your Google Drive backup files.

5. Advertising, Web Cookies & Third-Party Services

Milk Tracker uses Google advertising networks including Google AdSense (for web services) and Google AdMob (for the Android application) to display banner, native, interstitial, and responsive advertisements.

Google AdSense Web Advertising & Cookie Disclosures

  • Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites on the Internet.
  • Google's use of advertising cookies (including the DoubleClick DART cookie) enables it and its partners to serve ads to visitors based on their visit to our site and/or other sites on the Web.
  • Users may opt out of personalized advertising by visiting Google Ads Settings or by visiting AboutAds.info.
  • You can also manage cookie preferences through our on-site Cookie Preferences banner or your web browser settings at any time.

Third-party advertising & privacy policies:

  • Advertising Identifiers & Online Requirement: Google AdMob and AdSense process advertising IDs, cookies, IP addresses, and non-sensitive diagnostic details. For free-tier users, an active internet connection is required so that advertisements can load and display properly. Premium mobile app subscribers enjoy a 100% ad-free experience.
  • Online Database Synchronization: When Cloud Sync is activated, transactions sync to an online database (Cloud Firestore). An internet connection is required to keep devices updated and download Remote Config settings.
  • System Permissions: The mobile application requests exact alarm permissions (`SCHEDULE_EXACT_ALARM`), notification permissions (`POST_NOTIFICATIONS`), and audio recording (`RECORD_AUDIO`) solely for the voice assistant. These operate locally on your device with prior prominent disclosure.

6. Data Control, Retention & Automated Server Lifecycle

You maintain control over your data, while automated server-side lifecycle systems ensure database performance and storage hygiene:

  • Month-Wise Rolling 12-Month Retention Window: To ensure fast synchronization and database speed, active cloud servers retain transaction records on a month-by-month 12-month rolling cycle. Automated database cleanup runs on the final day (30th or 31st) of each month. When a household completes 12 full calendar months of syncing and transitions into the 13th month, the oldest 1st month is automatically pruned from the cloud. Local device storage and personal Google Drive backups remain permanent and are never automatically deleted.
  • 3-Month Inactivity Cloud Purge Policy (90 Days): If no new delivery entries or transactions are recorded for 3 consecutive months (90 days), the associated cloud synchronization room and documents are deemed abandoned and are permanently deleted from cloud servers.
  • Manual Cloud Data Deletion & Ownership Verification:
    • Instant In-App Deletion (Recommended): You can immediately purge all synced cloud records directly from the connected device within the application under Settings > Cloud Sync > Delete Cloud Data.
    • Web Deletion Portal & Verification: You can submit a deletion request through our web portal at milktracker.gulposhlabs.in/data-deletion. Requests are verified and processed within 24 to 48 hours.
  • Manual Local Device Wipe: You can completely reset all local app data directly from Settings > Reset App Data or by uninstalling the application.
  • JSON Data Export: All ledger entries, rates, payments, and extra items can be exported into standard JSON files at any time for permanent independent archiving.

7. Children's Privacy (Under 18 Years)

In full compliance with Section 9 of the Digital Personal Data Protection Act, 2023 (DPDP Act, India), Milk Tracker defines a child as any individual who has not completed eighteen (18) years of age.

  • No Knowingly Collected Minor Data: Milk Tracker does not knowingly collect, process, or solicit personal data from children under 18 years of age without verifiable parental or legal guardian consent.
  • Prohibition on Behavioral Tracking & Profiling: We do not undertake any tracking, behavioral monitoring, or profiling of children, nor do we direct targeted advertisements at children.
  • Prompt Deletion: If we discover that personal data of an individual under 18 has been processed without verifiable parental consent, we will permanently delete such data from our records immediately upon notification. Parents or legal guardians may contact us at privacy@milktracker.gulposhlabs.in.

8. Statutory Rights of Data Principals (DPDP Act, 2023)

Under Chapter III of the Digital Personal Data Protection Act, 2023, you as a Data Principal are entitled to the following statutory rights regarding your personal data:

  • Right to Access Summary of Personal Data (Section 11): You have the right to request a summary of the personal data being processed by us, the identities of all data processors with whom the data has been shared, and any other relevant processing details.
  • Right to Correction & Erasure (Section 12): You have the right to rectify, complete, update, or erase your personal data that is no longer necessary for the purpose for which it was processed.
  • Right of Grievance Redressal (Section 13): You have the right to readily available means of grievance redressal in respect of any act or omission by us regarding the performance of our obligations.
  • Right to Nominate (Section 14): You have the right to nominate any other individual who shall, in the event of your death or incapacity, exercise your rights under the DPDP Act.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time as easily as giving consent. Withdrawal terminates cloud synchronization for your profile.

9. Statutory Grievance Redressal Officer

In accordance with Section 8(10) of the DPDP Act 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, Gulposh Labs has appointed a designated Grievance Officer:

Grievance & Data Protection Officer: Owais Lone
Organization: Gulposh Labs
Physical Jurisdiction & Address: Gulposh Labs, Srinagar, Jammu & Kashmir, 190001, India
Dedicated Grievance Email: privacy@milktracker.gulposhlabs.in
Resolution Timelines: We acknowledge every formal grievance within 24 to 48 hours and resolve or provide a formal decision within 15 calendar days from the date of receipt.

10. Official Inquiries & Legal Communications

For general questions regarding app usage, feature requests, or partnerships: