Privacy Policy

What we collect

• Your phone number or email address — the only way to sign in. There are no passwords.
• A display name, if you provide one. It is optional and you can remove it at any time.
• The content you enter yourself: transactions, wallets, budgets, tasks, habits, events, and notes.
• For each sign-in, a session record with the time, IP address, and browser/device user agent — so you can see active devices and sign them out remotely.

What we do not collect

• No third-party analytics — no Google Analytics, no Firebase, no external service of any kind. No advertising trackers, no advertising cookies.
• The Android app requests no permission beyond internet access and checking whether you are online — no contacts, no location, no camera, no storage.
• Your data is never sold or shared with anyone.

How it is used

Only to run the app itself: authenticating you, showing you your own data, and computing things like a wallet balance or a habit streak. There is no other use.

Crash reports and usage statistics

If the app hits an error, a crash report (the error text, stack trace, app version, and OS version) is stored on your device and sent to our own server on the next launch. A small, fixed set of events — such as "app opened" or "transaction created" — is also sent so we can tell which parts of the app are used. None of your own content (amounts, notes, task titles) appears in this data.

You can turn this off at any time in Settings, after which nothing is collected or sent.

Storage and security

Data is stored on our own server in a PostgreSQL database. One-time codes and refresh tokens are never stored in raw form — only their hashes. Access tokens are short-lived, and you can revoke any session immediately.

Your choices

• You can view and edit all of your data inside the app.
• You can sign out any active device from Settings.
• To delete your account and all its data, contact us at the address below.

Contact

For any privacy question or an account-deletion request: privacy@maaleto.ir