CashBook mobile app — privacy

What the app stores, what it sends, and what it never does.

CashBook is a business application. It does not have accounts of its own: you sign in to a workspace that your employer or their provider operates, and your data lives in that workspace. The organisation running the workspace decides what is collected there and for how long; SACC supplies the software.

What the app keeps on your device

What	Where	Why
Your workspace address and company name	App settings	So you are not asked for it every time
A session token, your username and display name	The device's secure keystore	To keep you signed in. Your password is never stored — it is used to sign in and discarded
A random device identifier	App settings	So a single lost device's access can be revoked without affecting your other devices. It is generated by the app and is not a hardware, advertising or SIM identifier
Printer settings (address, or a paired printer's name)	App settings	To print receipts without reconfiguring
The web session for your workspace (cookies, cached pages)	The system web view	To display your workspace. Cleared when you sign out or switch workspace

What the app sends, and where it goes

Everything goes to the workspace you entered and nowhere else. There is no intermediate SACC server between the app and your workspace, and no copy of your data is sent to us.

When you sign in: your username and password, plus the random device identifier and a device description (for example "Samsung SM-A155F (Android)") so the session can be listed and revoked.
While you stay signed in: the session token, exchanged periodically for a new one.
When it checks for an update: the platform and the app's build number. Nothing about you.
Everything you do in the workspace: handled by your workspace's own web application, under your organisation's policy.

What the app never does

No analytics, tracking or advertising. The app contains no third-party SDKs at all.
No crash or usage reporting to SACC.
No advertising identifier, and no access to your contacts, photos, call log or messages.
No location access. The app asks for no location permission; printers are found from the list of devices you have already paired, which is why the permission is not needed.
No camera access.
Nothing written outside the app's own private storage.
Nothing sold or shared with anyone. There is no one to share it with — the app talks only to your workspace.

Permissions, and the reason for each

Permission	Why it is needed
`INTERNET`	To reach your workspace
`ACCESS_NETWORK_STATE`	To tell "no signal" from "server down" and word the message correctly
`ACCESS_WIFI_STATE`	To reach a receipt printer on the same Wi-Fi network
`BLUETOOTH_CONNECT` (and the older `BLUETOOTH`, `BLUETOOTH_ADMIN` on Android 11 and below)	To print to a paired Bluetooth receipt printer. Only devices you have already paired are used — the app does not scan for nearby devices, which is why no location permission is requested
`POST_NOTIFICATIONS`	Approvals, credit blocks and overdue collections
`VIBRATE`	To confirm a completed sale by touch
`REQUEST_INSTALL_PACKAGES`	Only on builds distributed outside Google Play, so the app can install its own update from your workspace's server. You are asked before anything installs

How long it is kept, and how to remove it

Signing out deletes the stored session from the device and asks your workspace to revoke it, so the device can no longer be used to reach your data.
Uninstalling removes everything the app kept on the device.
Your business records live in your workspace, not in the app. Requests to access or delete those go to the organisation that operates it — they hold the data and decide its retention.

Children

CashBook is a tool for staff at work. It is not directed at children and has no features intended for them.

Security

Session tokens are held in the operating system's secure keystore, not in ordinary app storage. A stored session can be revoked from your workspace at any time, and changing your password ends every device's session. Connections to workspaces on the internet use HTTPS; a workspace installed on your own premises may be reached over your local network, in which case its security is governed by that network.

Changes to this notice

If what the app collects changes, this page changes with it, and it is published with each release of the app rather than kept separately from it.

Contact

For the app itself: SACC — cashbook.ug, support@getsacc.com.
For your own records held in a workspace, contact the organisation that operates it.