Publisher and data fiduciary: ARISHIMETO Technologies Private Limited (CIN U58200TN2026PTC196842), No. 3/9 (2/9), Flat No. 9, II Floor, Unique Apartment, Nehru Nagar 1st Street, Adyar, Chennai – 600 020, Tamil Nadu, India.
Grievance Officer: Subramani S, grievance@bookson.in.
In short
- The app works offline and needs no account. Your search text, bookmarks and recently viewed codes stay on your phone; if you allow usage statistics, they note the codes you open, never what you typed.
- The app has no advertising, no advertising ID and no ad SDKs, and we do not sell personal data.
- This website shows no ads. Only if you choose Accept in the cookie banner does it load the Google tag, which uses Google Ads cookies to count how many people who come from our Google ads go on to tap a Google Play link. Before you accept, and if you decline, the Google tag is not loaded and nothing is sent to Google Ads. No remarketing and no Google Analytics (see section 9).
- The app itself sends nothing you type about yourself (if you allow usage statistics, they note only outcomes such as which tax regime came out lower, never your figures). The optional "About you" details stay on your phone; a BooksOn sign-up request or a suggestion reaches us only as an email that you send from your own email app, and we keep such emails (section 6). The Data safety sections of Google Play and Galaxy Store declare what these emails carry: name, email address, phone number and emails (on Google Play also the suggestion text, as other user-generated content). Google Play marks them as optional data; Galaxy Store lists them as shared with your email app and email provider, which send them.
- Usage statistics and crash reports (no name, contact details or search text) are sent only if you allow them: the app asks once, when you first open it (after an update, too), and sends nothing until you tap Allow. If you had switched them off in an earlier version of the app, they stay off and you are not asked. You can switch them on or off at any time in About → Your data.
- About → Your data → Delete my data clears your "About you" and "Prepared by" details, ratings and suggestions from the phone and resets the analytics identifier; to have emails you sent us deleted, write to grievance@bookson.in (see Delete your data).
1. What the app processes, and why
| Data | When | Purpose | Shared with |
|---|---|---|---|
| Dataset update check (app version, in the app's own user-agent; downloading an update also shows which dataset version the phone has) | Daily on any network (a full new dataset only on Wi-Fi), or when you tap "Check for updates now" | Fetch a newer signed rate dataset. No identifier is attached. | BooksOn servers |
| Due-date extensions check (app version, in the app's own user-agent) | Twice a day on any connection | Fetch the nationwide due-date extensions issued by CBIC (GST) and CBDT (income tax) as a small signed file, so the alerts and calculators use the extended dates. No identifier is attached. | BooksOn servers |
| App-usage analytics (screens viewed, codes looked up, features used, which tax regime came out lower in the income tax calculator and the return-filing status (never the amounts or dates), device model, OS version, Firebase app-instance ID) and approximate (city-level) location that Google derives from the IP address | While you use the app, only if you have allowed usage statistics (the app asks when you first open it, after an update too, and you can switch them on or off later in About → Your data; if you had switched them off in an earlier version of the app, they stay off) | Understand which features matter, fix problems and detect modified copies of the app; and, from the install's campaign and the Firebase app-instance ID only, see which of our ads bring installs. Your search text, name, email and phone are never sent as analytics; for a share, only the profession shown as "Prepared by" is noted, never the name or firm. The advertising ID is not collected. | Google Firebase Analytics (Google LLC), as our processor |
| Crash reports and Firebase Sessions events (stack traces, device model, OS version, the time a session starts, the Crashlytics installation ID, the Firebase installation ID, the session ID and the app-instance ID) | If the app crashes, and when a session starts, only if you have allowed usage statistics; a crash report from before you answer the usage-statistics question stays on the phone and is sent only if you then tap Allow ("Not now" deletes it) | Fix defects | Google Firebase Crashlytics (Google LLC), as our processor |
| Play Install Referrer (the campaign string Google Play attaches to the install) | Once, after first launch | Attribute BooksOn sign-ups made through BooksOn links to the app and campaign; and, in the usage statistics, see which of our ads bring installs | BooksOn, only if you tap a BooksOn link (it is added to the link, with the app version and, from a rate card, the code you were viewing); and Google Firebase Analytics (Google LLC), as our processor, which reads the install's campaign for install attribution only if you have allowed usage statistics |
| "About you": name, profession, place (each optional) | Only if you fill in the "About you" screen (offered once after your third lookup, skippable) or About → About you | Used only on your phone, for example to fill "Prepared by" on the income tax report in one tap. Editable in About. | Nobody. Stored only on your phone and never included in Android backups |
| Star rating | Only if you tap a rating | See how the app is doing. Kept on your phone; the number is also counted in the usage statistics above (if they are switched on). | Google Firebase Analytics, as part of the usage statistics; and BooksOn, in a suggestion email if you send one |
| Suggestion, with your email address (and anything else you write in the email) | Only if you write a suggestion and then send the email from your own email app | Improve the app and reply to you. The app adds its version, the dataset version and your rating to the message so that we can check the problem. | BooksOn, as an email to support@bookson.in; your email app and email provider send it, not BooksOn HSN |
| BooksOn sign-up request: name, email, phone (optional), app and dataset versions | Only if you send the email that the BooksOn sign-up form prepares in your own email app | Contact you about BooksOn and set up your BooksOn access | BooksOn, as an email to support@bookson.in; kept as a sales lead |
| Bookmarks and recent searches | While you use the app | Convenience | Nobody. Stored only on your phone (and in your Android backup if enabled) |
Your "About you" details, the "Prepared by" details and the ratings and suggestions saved in the app are kept only on your phone and are never included in Android backups. The app itself never transmits your name, email address or phone number. To send a sign-up request or a suggestion, it only opens your email app with the message filled in (Android's standard "send email" request); your email app and email provider then send the email under their own terms, and only if you send it. This needs no permission. An email you send us reaches BooksOn and is kept as sections 4 and 6 describe, which is why the Data safety sections of Google Play and Galaxy Store declare name, email address, phone number and emails as collected (on Google Play as optional data, together with the suggestion text as other user-generated content; on Galaxy Store as shared with your email app and email provider). The only permission the app asks for is to show notifications (Android 13 and later), and only for due-date alerts or for updates to codes you saved (when a rate update changes a saved code's rate, rules or notification; the comparison is made on your phone and nothing is sent). The due-date alerts are worked out on your phone from the filing type you choose, and those settings stay on your phone. Otherwise it uses internet and network-state access (so that a full new dataset downloads only on Wi-Fi, and the daily dataset check and the due-date extensions check run only when a connection is available) and background scheduling for these two checks and for the twice-daily due-date alerts check on your phone. It does not access your contacts, files, camera, microphone or precise location.
2. Legal basis
We process personal data on the basis of your consent under the Digital Personal Data Protection Act, 2023: you give it by sending us a sign-up request or a suggestion by email, and by tapping Allow when the app asks about usage statistics, or by switching them on later in About → Your data. You can withdraw consent at any time: switch off usage statistics in About → Your data, use Delete my data, or write to grievance@bookson.in to have the emails you sent us deleted. Withdrawal does not affect processing already done. On this website, the Google tag and its Google Ads cookies are used only if you consent by choosing Accept in the cookie banner; you can withdraw that consent at any time by choosing Decline under "Cookie settings" at the bottom of any page. Without that consent, the Google tag is not loaded and nothing is sent to Google Ads (see section 9).
3. Who we share it with
We do not sell or rent personal data and do not share it for advertising, except that, if you choose Accept in the cookie banner, the Google tag on this website sends Google Ads the messages described in section 9 (the pages you open here and whether you tap a Google Play link), so that taps after a click on one of our ads can be counted. We use these service providers, bound by their terms, only to run the service and to measure our own Google ads:
- Google LLC — as our processors, Firebase Analytics and Crashlytics (usage statistics and crash reports), Firebase Hosting (this website) and Google Workspace (the BooksOn mailboxes, such as support@bookson.in and grievance@bookson.in, that receive the emails you send us); YouTube, for the video thumbnails on some pages of this website and the video when you press play; and Google Ads, through the Google tag on this website, which measures whether people who come from our ads tap a Google Play link (section 9). Google uses the data it receives through the Google tag and YouTube under its own Privacy Policy.
- Google Play and Samsung Galaxy Store — distribute the app and its updates under their own privacy policies. Google Play also provides the install referrer and the optional in-app review prompt on Play installs.
We may disclose data where Indian law requires it, for example to a court or government authority acting under law.
4. Where data is stored
Emails you send us, including sign-up requests and suggestions, are kept in BooksOn's email mailboxes (Google Workspace). The "About you" details and the feedback saved in the app stay on your phone. Google's services may process data in other countries under Google's safeguards. We do not transfer personal data to any country restricted by the Government of India under section 16 of the DPDP Act.
5. Security
Everything the app itself sends or fetches goes over HTTPS only; the app refuses unencrypted connections. Dataset updates are verified with a digital signature before use. Copies of the app that fail its integrity check (for example a modified copy) show a warning and do not install dataset updates. Emails you send us travel through your own email app and email provider.
6. Retention
Emails you send us (sign-up requests, suggestions and other messages): until you ask us to delete them (grievance@bookson.in), or 24 months after our last contact with you, whichever is earlier. "About you" and "Prepared by" details and the feedback saved in the app: on your phone only, until you use Delete my data or uninstall the app. Usage statistics: per the retention set in Google Analytics for Firebase (14 months for user-level data). Crash reports: Firebase Crashlytics keeps them, with the Crashlytics installation ID and the Firebase installation ID, for 90 days, after which Google starts deleting them. Delete my data resets only the usage-statistics identifier (the Firebase app-instance ID), so statistics sent afterwards are not linked to those sent before; it does not change the IDs that crash reports carry. Bookmarks and recent searches: until you clear them or uninstall the app.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask for access to, correction of, or erasure of personal data you sent us, may withdraw consent, and may nominate another person to exercise these rights.
- In the app: About → Your data → Delete my data erases your "About you" and "Prepared by" details, ratings and suggestions on the phone at once and resets the analytics identifier (the Firebase app-instance ID). It needs no connection. BooksOn holds no copy of your "About you" details or your "Prepared by" name, designation and firm, because the app never sends them. Delete my data does not reach a suggestion or sign-up request you sent us by email; BooksOn keeps such emails as section 6 says: until you ask us to delete them (by email, below) or 24 months after our last contact with you, whichever is earlier. A star rating is counted in the usage statistics (if you have allowed them), and is also written into a suggestion email if you send one.
- Analytics and crash reports: nothing is sent unless you allow it; switch them on or off at any time in About → Your data → "Share usage statistics and crash reports".
- By email: grievance@bookson.in to see, correct or delete the emails you sent us (such as a sign-up request or a suggestion), or for anything else. We act within 30 days. To delete a BooksOn account we set up for you, see Delete your BooksOn account.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
8. Children
The app and this website are not directed at children under 18, and we do not knowingly collect their personal data.
9. This website
www.bookson.co.in shows no advertising, runs no Google Analytics or other visitor statistics, and loads no fonts from other websites. Everything it loads from other websites comes from Google: the Google tag, for the Google Ads conversion measurement described below, but only after you choose Accept in the cookie banner; and, on pages with a video, the video's thumbnail picture from YouTube (i.ytimg.com). The YouTube player (www.youtube-nocookie.com) loads only when you press play, and YouTube's own privacy policy then applies to the video. Our hosting provider (Google Firebase Hosting) records standard server logs, such as IP address, time, page requested and browser type, which are used only for security and troubleshooting and kept for a limited period under Google's policy. Emails you send to us are used only to answer you and, for a BooksOn sign-up request, to contact you about BooksOn and set up your BooksOn access.
- Before you choose, and if you choose Decline: the Google tag is not loaded. Nothing is sent to Google Ads, your taps on Google Play links are not counted, and no advertising cookies are set or read. (This choice does not affect the YouTube thumbnails or the hosting server logs described above.)
- If you choose Accept: the Google tag is loaded at once, and on the pages you open later until you choose Decline. It may set and read Google Ads cookies (and similar entries in your browser's storage): on this website, cookies such as
_gcl_auand_gcl_aw, kept for up to 90 days, and Google's own cookies on Google's websites. They let Google Ads link a click on one of our ads to a later tap on a Google Play link on this website, so that the tap is counted for that ad. When a page opens, and the first time you tap a Google Play link on that page, the Google tag sends Google a short message. It can include the page address (without any text you typed into the code search), the address of the page you came from, the time, your browser and device type (the user agent), your cookie choice, the ad-click identifier if you came from one of our ads, the cookie identifiers and a random number. Like every request on the internet, these messages reach Google with your IP address. - Whatever you choose: no remarketing (showing ads later to people who visited this website), no personalised ads (that setting stays off even if you accept) and no Google Analytics. We never send Google your name, email address, phone number, a GSTIN you check or the figures you enter in a calculator (Google Ads' enhanced conversions are switched off). In Google Ads we see only totals, such as how many taps came from an ad, not who made them.
- Your choice: on your first visit, a small banner at the bottom of the page asks you to choose Accept or Decline; the website works the same either way. Your choice is kept in your browser's local storage on this device, not in a cookie. To change it, use Cookie settings at the bottom of any page. If you choose Decline after accepting, the Google tag already running on that page is told at once that you have declined, so it stops setting and reading Google Ads cookies and no further tap on that page is counted; the Google Ads cookies and similar browser-storage entries kept for this website (such as
_gcl_auand_gcl_ls) are deleted, and the pages you open later do not load the Google tag. Google's own cookies on its websites stay until you clear them in your browser. Without JavaScript, neither the Google tag nor the banner loads. - Google: Google LLC receives this data and uses it under its own Privacy Policy; how Google uses information from websites that use its services is explained at policies.google.com/technologies/partner-sites. Google may process it outside India (section 4).
10. Reference only
Rates shown in the app are compiled from CBIC notifications for reference and are not tax or legal advice. Check the notification and circular cited on each card before any decision. See the Terms & Conditions and Sources & disclaimer.
11. Changes
We update this page and the effective date above when the policy changes. Material changes also change the app's Terms version, and the app asks you to accept the new version.
Change history:
- 9 November 2026, app version 1.0.5 (Terms version 1.3): the app no longer sends anything you type about yourself. The "About you" details stay on your phone; a BooksOn sign-up request or a suggestion reaches us only as an email that you send from your own email app to support@bookson.in, and the optional reply-email field is gone. Delete my data now clears the "About you" details, ratings and suggestions on your phone and resets the analytics identifier; emails you sent us are deleted on request to grievance@bookson.in. Usage statistics and crash reports are now sent only if you allow them, on a new install and after an update alike: the app asks once, when you first open this version ("Not now" keeps them off), sends nothing before you answer, and About → Your data switches them on or off at any time. If you had switched them off in an earlier version of the app, they stay off and you are not asked. Usage statistics that an earlier version of the app had already handed to Google Play services on your phone (before this update or a reinstall) may still be delivered by Google Play services. App versions before 1.0.5 tried to send the profile, feedback, sign-up form and deletion requests to a BooksOn server address that was never in service, so none of the profile, suggestion text, reply email, sign-up details or deletion requests reached BooksOn, and BooksOn holds none of them (star ratings were counted in the usage statistics, as they are now). Sections 1 to 7 are updated to match, and the app asks you to accept Terms version 1.3.
- 2 November 2026: usage statistics from the app are also used to see which of our ads bring installs (section 1).
- 1 November 2026, website: this website now uses the Google tag from Google LLC to measure whether visits from our Google ads lead to taps on a Google Play link (Google Ads conversion measurement), with a cookie banner. The Google tag is loaded, and Google Ads cookies are used, only if you choose Accept; before you choose, or if you decline, nothing is sent to Google Ads. There is no remarketing and no Google Analytics. The summary and sections 2, 3 and 9 are updated, and section 9 now also names the YouTube video thumbnails and player. The app is not affected, so the Terms version stays 1.2.
- 1 November 2026: section 1 now also lists the due-date extensions check that app version 1.0.4 makes twice a day (a small signed file from this website, with no identifier attached), and the usage statistics are no longer called anonymous, because they carry the Firebase app-instance ID. What the app does has not changed, so the Terms version stays 1.2.
- 26 October 2026, app version 1.0.4 (on Google Play from 1 November 2026): the app adds due-date alerts and, with them, the notification permission (Android 13 and later). It is the only permission the app asks for, and only when you turn the alerts on. The alerts come from a check on your phone twice a day, using the filing type you choose (section 1). Version 1.0.4 is also the first app version that sends the usage statistics and crash reports described in section 1 (Google Firebase; you can switch them off in About → Your data). This policy has described them since its first version, so the Terms version stays 1.2.
- 28 September 2026: first version, with app version 1.0.0.
12. Contact
Privacy questions and requests: grievance@bookson.in (Grievance Officer: Subramani S). General support: support@bookson.in. Post: ARISHIMETO Technologies Private Limited, No. 3/9 (2/9), Flat No. 9, II Floor, Unique Apartment, Nehru Nagar 1st Street, Adyar, Chennai – 600 020, Tamil Nadu, India.
