Terms & Conditions

Khatamel is a shared ledger. It records credits, debits and withdrawals that you and the people in your groups enter, and shows the running balance and reports from those entries. It is operated by Sharnam Info (“we”, “us”), and in these terms “you” means the person using it.

Creating an account, or using one that was created for you, means you accept these terms. If you do not accept them, please do not use Khatamel. If you use Khatamel on behalf of a business, you confirm you are allowed to accept these terms for that business.

You must be old enough to enter a contract where you live, and you must give a working mobile number you control.

You sign in with your mobile number and a PIN. One account per mobile number. Keep your PIN to yourself — anyone who has it can read and change the ledgers you can reach, and entries made from your account are treated as made by you.

• Change your PIN in Settings the moment you think someone else knows it.
• You can be signed in on several devices at once, up to the limit of your plan. Signing out removes that device; changing your PIN signs out every device except the one you changed it on.
• Sessions expire after 7 days of the cookie's life and can be ended by you, by your manager or by us at any time.
• Tell us straight away if you believe your account has been used by someone else.

A group has one owner — the person who created it. The owner adds and removes members and decides, per member, whether they may credit, debit, withdraw, edit, delete, or post on another member’s behalf. Those permissions are enforced on our servers, not just hidden in the app.

• Everyone in a group can see that group's entries, amounts, notes, tags, custom fields and who made each one. Do not put anything in a group that you would not want every member of it to read.
• A single user is a ledger you keep for someone who does not log in. Only you and the people you share that group with see it.
• If you add someone to a group, you are confirming you have their agreement to record entries about them.
• Removing a member stops their access; entries they already made stay in the ledger, because removing them would change everybody's balance.

• For anything unlawful, or to record or support unlawful activity, including money lending or collection that breaks the law where you are.
• To store another person's private information without their consent.
• To harass, threaten or defraud anyone.
• To break into, overload, probe or reverse-engineer the service, or to bypass a limit, a permission or a paid plan.
• To copy the service with automated tools, resell it, or run it as your own product.

We may suspend or close an account that does any of this, and we will tell you why where we are allowed to.

Khatamel has a free plan and four paid plans. Each paid plan is sold for 30 days, 6 months or 1 year. Current prices, in Indian Rupees:

• A plan starts on the day it is activated and runs for its full period — 30 days means 30 days, and it is not added on top of a plan you are already on.
• While a plan is running you cannot buy the same plan again. You will see a message telling you when it ends.
• You can switch to a different plan at any time. The new plan starts that day and replaces the remaining days of the old one, so switching part-way through a period gives up those days.
• There is no auto-renewal and nothing is charged automatically. When a plan ends the account simply returns to the free plan.
• Plans are bought on the Khatamel website (khatamel.in). You pay there through Razorpay, our payment provider — card, UPI, net banking or wallet. Your plan switches on automatically once the payment is confirmed. Prices include any taxes unless stated otherwise at the time.
• Card and bank details are entered on Razorpay's own secure page and never reach us — we only receive confirmation that a payment succeeded, its amount and a reference.
• Where online payment is unavailable, you can still pay by UPI or bank transfer to the details shown on the website and the administrator activates the plan by hand.
• The Android app does not sell plans. It shows the plan you are on and what each plan includes; a plan bought on the website is active in the app straight away.

Refunds. Please check the plan and the period on the payment screen before you pay. If the wrong plan or period is activated, or a payment is taken in error, contact us within 7 days and we will correct it or refund it — a refund is returned to the method you paid with and can take a few working days to reach you. We do not otherwise refund a period that has already started.

When a plan ends. Nothing is deleted. The account returns to the free plan’s limits, so features above those limits — such as PDF export, or more groups than the free plan allows — stop until a plan is active again. Entries you already have stay readable.

We may change prices or what a plan includes. A change never affects a period you have already paid for, and the prices on the website are always the current ones.

We keep the smallest set of information the service needs to work:

• Your name, mobile number and display preferences (language, currency).
• A one-way cryptographic hash of your PIN — never the PIN itself.
• The entries you and your group members create: amount, type, date, note, tag, custom fields, payment method, status, and who created them.
• Your groups, their members and each member's permissions; your tags.
• A record of each device that is signed in, so a device can be signed out and so notifications reach the right one.
• A record of each plan payment recorded against your account: the plan, the period, the amount and the reference you gave.
• Ordinary server logs (such as IP address and time of request) kept for security and troubleshooting.

What we do not store or do:

• No card numbers, CVVs, UPI PINs, bank passwords or OTPs — we never ask for them, and no card details ever reach our servers.
• No contacts, photos, files or location data.
• No advertising, no selling or renting your data, and no sharing it with third parties for their own use.
• No third-party analytics or session recording. An analytics tool was trialled in September 2026 and removed; nothing of the kind runs today.

These are the actual measures in the product, not intentions:

• Your PIN is stored only as a bcrypt hash. Nobody — including us — can read it back, which is why a forgotten PIN is reset rather than recovered.
• Traffic to the hosted service runs over HTTPS. The session cookie is HttpOnly (JavaScript on the page cannot read it), SameSite-protected against cross-site use, and marked Secure in production.
• Every request is authorised on the server against your session, and against your permissions in the specific group. Hiding a button in the app is never the only check.
• Each signed-in device holds its own session id. Signing out, changing your PIN, being removed by an admin, or exceeding your plan's device limit ends that device's access immediately, even while the app is closed on it.
• Sign-in attempts are rate-limited (6 wrong attempts locks that number for 15 minutes) and new sign-ups are capped per network address per hour, which blunts guessing and bulk-account attacks.
• API responses are not plain-readable JSON, so a ledger is not casually readable over someone's shoulder or from a browser's network panel.
• Data is stored in MongoDB Atlas in the Mumbai (India) region, with the application's servers in the same region. Access to production data is limited to the people who operate the service.

We may access your data where it is needed to run the service — to fix a fault you report, to activate a plan you paid for, or where the law requires it. We do not read ledgers for any other reason.

• Edit or delete any entry you have permission to change; deleting a ledger entry removes it from every total.
• Rename or delete your tags at any time.
• Sign out any device from Settings.
• Delete your account yourself, at any time, from Settings → Delete account. On deletion we remove your account and the ledgers you own. Entries you made in someone else's group stay in that group's history, because removing them would silently change that group's balances for everyone else.
• Ask us for a copy of your data.
• We keep payment records for as long as tax and accounting rules require, even after an account is closed.

If you allow it, your browser can show a notification when something changes in a group you are in. The permission is your browser’s own and you can withdraw it in your browser’s site settings at any time; notifications also stop on a device as soon as it is signed out. We use them only for activity in your own ledgers — never for marketing.

We work to keep Khatamel running and correct, but it is provided “as is”. We do not promise uninterrupted service, and we may take it down for maintenance, change features, or retire ones that are not used. We are not able to guarantee that an entry someone else typed is accurate.

Keep your own record of anything that matters. Khatamel has a PDF export on the paid plans for exactly this reason.

To the extent the law allows, we are not liable for indirect or consequential loss, for lost profits, or for a loss that follows from an entry being wrong, missing or disputed between the people in a group. Where we are found liable, our total liability is limited to what you paid us for Khatamel in the twelve months before the claim.

Nothing here limits liability that cannot be limited by law, including for fraud.

You may stop using Khatamel and ask us to close your account at any time. We may suspend or close an account that breaks these terms, that is used to harm someone, or where we are required to by law. If we close a paid account without cause, we refund the unused part of the period.

We may update these terms as the product changes. The date at the top always shows the current version, and a material change will be announced in the app before it applies. Continuing to use Khatamel after that means you accept the updated terms.

These terms are governed by the laws of India, and the courts of Gujarat, India have jurisdiction over any dispute.

Questions about these terms, your data, or a payment: write to the Khatamel team through the Khatamel website (khatamel.in).