Privacy

What we hold, and why

This describes what the QuickITR app and Eleven Apps Studio Private Limited collect about you, what it is used for, who else can see it, and how long it is kept. It covers the app and this website.

In effect from 22 October 2026.

Who holds it

Eleven Apps Studio Private Limited

We decide why and how your information is used, which under the Digital Personal Data Protection Act, 2023 makes us the data fiduciary for it.

• C/O Janardhan Singh, Road No. 10, Keshri Nagar, Rajiv Nagar, Patna, Bihar 800024
• GSTIN 10AAJCE6165A1Z6
• elevenappstudios@gmail.com
• +918789364071

What we collect

And what each thing is for

What	Why
Your mobile number	It is how you sign in. We verify it with a one-time code.
Your name and email	To address you, and to send invoices and updates about your work. An email address is only ever sent to once you have confirmed it with a code, so a typo cannot deliver your tax affairs to a stranger.
PAN, GSTIN, date of birth	Required to prepare and file a return. Held for you and for anyone you add as an additional taxpayer.
Documents you upload	Form 16s, statements and anything else a return needs. They are stored on our own server, not in a third-party file service.
Your permissions	Which of the three permissions below you gave, when, and the exact wording you were shown. Kept as a record so it can be shown that you asked for what was done.
Your orders and invoices	The work you asked for, its progress, and what was billed.
Device details	App version, platform and time zone, so notifications arrive at a sensible hour and we can tell whether a problem is confined to one version.
A photo, if you add one	Only your profile picture, and only if you choose to set one.

Permissions

Three things we ask separately

Each is asked for on its own, recorded on its own, and can be withdrawn on its own from Settings in the app.

• To file on your behalf. Without this we can prepare a return but not submit one.
• To fetch your AIS. Lets us pull your annual information statement so figures need not be typed in by hand.
• To send you offers. Entirely optional. Refusing it changes nothing about your work, and every such email carries a one-click unsubscribe.

Withdrawing a permission does not erase the record that you once gave it — that record is what protects both sides if a filing is later questioned.

Who else sees it

Only what the work requires

• Our own staff, to do the work.
• The Income Tax Department and other statutory portals, when filing on your behalf with your permission.
• Our hosting and email provider (Hostinger), which runs the servers the app talks to and carries our email.
• Google (Firebase), if push notifications are enabled on your device — it carries the message to your handset.
• Google (Gemini), for the in-app assistant, Munim. What is sent to Google: your question, when you ask one; the office's message, when it writes to you about an order, so that Munim can explain it to you in your language; and, when our staff ask Munim to summarise one of your orders for them, that order's details, the messages you have sent the office since it last wrote, and what you have asked Munim since.
  
  With each of these goes a short summary of your own account — your name and email address, the last four digits of your mobile number, the names of the taxpayers you file for with their PAN and GSTIN masked (shown as ABC•••••F), the services you have ordered and their status, what is outstanding on your bills, any refund position we hold, and what Munim remembers about you (which you can see and remove in the app) — so that it can answer about your work rather than in general.
  
  Your documents are never sent — only their names and whether they have arrived — unless you hand Munim a letter to read: then the text read from it on your phone is sent with your question. A Form 16 you hand Munim is read on your phone, and only what it found — another employer, or another year — reaches our office, never its figures. Your PAN and GSTIN never leave us in full, and nor does your full mobile number.
• Cashfree Payments, to check your PAN and GSTIN with the Income Tax Department and the GST network when you add or change them: that the PAN exists, matches the name and date of birth you gave, and is linked to Aadhaar, and that a GSTIN is registered and active. Only those details are sent — never your Aadhaar number, your documents or your income.
• Anyone you send a share link to. A share link shows the state of a job and the messages on it. It never shows your PAN, your documents, your invoice or your contact details.

How long

Kept for 7 years, then removed

Documents you upload are deleted 7 years after the job they belong to closes — counted from the job closing, not from when the file arrived, so the papers behind a return stay together for as long as that return can be questioned. The Income-tax Act allows a return to be reopened up to six years back, which is why the period is what it is.

Orders, invoices and payments are kept for longer. They are the practice's own accounting records, which we are required to keep and which describe a transaction with two sides.

Your rights

What you can ask for

• See what we hold. Your profile, taxpayers, orders, documents and invoices are all visible in the app.
• Correct it. Editable in the app. If something is wrong that you cannot edit, write to us.
• Withdraw a permission. In Settings, at any time.
• Close your account. From Settings. Closing is not immediate: you have 14 days to sign back in and cancel it, and we email you when it is requested so that somebody else cannot close it quietly. After that your name, contact details, PAN and documents are removed. Invoices and payments remain as accounting records, attached to a row that can no longer name you.
• Complain. To us first, at the address below, and to the Data Protection Board of India if we have not put it right.

Getting in touch

Grievances

For anything about your information — a request, a correction, or a complaint — write to elevenappstudios@gmail.com or call +918789364071. We answer grievances within 30 days.