Account & security

Lekhita signs you in with your email address and a six-digit one-time code (OTP) sent to that inbox. There is no password — nothing for someone to guess, steal, or find written on a slip under the counter. Whoever can open that inbox can sign in to Lekhita, which is what the rules below are about.

Sign-in by mobile number is being built and is not available today. If you are used to number-and-SMS on other business apps, this will feel different for now.

• Never share an OTP with anyone — not staff, not family, not anyone claiming to be from Lekhita. We will never call and ask for a code.
• Protect the email account itself. Turn on two-step verification with your email provider (Gmail, Outlook, whoever you use) and use a screen lock on the phone that inbox is signed into. That inbox is now the key to your business record.
• Turn on Lekhita's PIN lock if the counter phone is shared. In the app, set a PIN so anyone who picks the device up cannot simply read your sales and customer list. On phones that support it, a fingerprint unlocks it.
• Do not let a staff member sign in as you on their own phone. There are no separate staff logins yet, so your sign-in is the whole business — hand over a PIN-locked shop device instead, never your email and OTP.

The honest answer is: nothing, because they cannot sign in. Lekhita has two levels in code — owner (the account that created the business) and staff (anyone else signed in) — and payment settings, revenue reports and the operations agent show an owner-only wall to a non-owner. But there is no way to give a staff member their own account yet, so today every session is the owner's and that wall never comes up.

What that means for you in practice: if someone else runs your counter, they are running it as you, seeing everything you see. Use the PIN lock, keep billing on one shop device, and do not share your email and OTP. There are also no finer roles — no cashier, manager or stockist — and no activity log showing who did what. All of it is on the roadmap; see Staff & permissions for exactly what ships today and what does not. Until per-person permissions land, treat access as trust: only add people you would hand the till to.

Your data lives on our servers, not in the handset. Lose the phone and you sign in on another one with the same email and a fresh code — nothing is lost. If the phone is gone and you have not set a PIN lock, assume whoever has it can open the app until you sign out, so tell us straight away.

If you are moving to a different email address entirely, write to support@lekhita.com before you lose access to the old one — we move the business across by hand.

Bills you did not make, staff you did not add, settings you did not change — remove any staff member you no longer trust, then write to support immediately with your business name and registered email. Say plainly what you noticed and when; we can look at server-side records even though the app does not yet show you an activity log.

You can request deletion of your account and personal data at any time. The process, timelines, and what tax law requires us to retain are all documented on one page: Delete your account. For how we store and protect data in general, see Security at Lekhita.