Shared Khata ("we", "our", "us") is a mobile app for Android and iOS that keeps a shared record of money between two people: bills, IOUs and who owes whom. This policy explains what information the app collects, how it is used and how you can control it.
1Information we collect
Account information
You can sign in with your phone number (a one-time code is sent by SMS), with your Google account, or with your Apple ID (iOS). Depending on the method we receive your phone number, or your name and email address from Google or Apple. If you use Apple's "Hide My Email", we receive the relay address Apple creates. You can also add a name, an email address and an optional profile photo in the app. This information forms your profile, which is shared with the people in your ledgers.
Ledger information you enter
- Ledger names, entries (title, amount, category, date, note), who paid, and balances.
- The name and phone number or email address of the person you add to a ledger, whether you pick them from your contacts or type them in. We store these so that person can join the ledger through your invite link.
Contacts (permission)
With your permission, the app shows your contacts so you can pick the other person quickly. Only the selected person's name and phone number or email are saved to the ledger. The rest of your address book stays on your phone and is never uploaded. You can deny this permission and type the details instead.
Photos (permission)
With your permission, the picture you choose as your profile photo is uploaded to our storage. No other photos are accessed.
Information collected automatically
- Device and app details: device model, operating system version, app version and language.
- Push notification token: an identifier that lets us send notifications to your device, stored with your profile.
- Usage data: which screens you open and actions you take (for example, adding an entry), collected by Google Analytics for Firebase together with an app-instance identifier.
- Crash reports: if the app crashes, Firebase Crashlytics sends details of the crash, device information and your user ID, so we can fix the problem.
- Approximate location: Google Analytics derives a rough location (country or city) from your IP address. We do not collect precise location.
The app shows no ads and does not collect the advertising identifier of your device.
2How we use information
- To run the app: your account, your ledgers, syncing between your devices, shared ledgers, invite links and notifications when the other person changes an entry.
- To keep the service secure: verifying your phone number or sign-in, and preventing abuse.
- To fix crashes and improve the app, using usage data and crash reports.
- To answer your questions when you contact us.
We do not sell your personal data, and we do not use it for advertising or marketing.
4Where data is stored and how it is protected
Your data is stored on Google Firebase servers, which may be located outside your country, and a copy is kept on your device so the app works offline. Data travels over encrypted connections (HTTPS), and server access is restricted by security rules so that only the people in a ledger can read it. No system is completely secure, but we take reasonable steps to protect your information.
5How long we keep information
We keep your profile and ledgers for as long as your account exists. Usage data and crash reports are kept for a limited time set by Google and then deleted or anonymised. When you delete an entry, it is marked as deleted and hidden, so both people's records stay consistent.
6Deleting your account
You can delete your account inside the app: Settings → Delete Account. You will be asked to confirm your identity (a one-time code, or your Google or Apple sign-in).
What happens: your profile, profile photo and sign-in are removed, and your name, phone number and email are removed from shared ledgers, where you appear as "Deleted user". Entries you added stay visible to the other person as part of their record. Deleted entries are kept as hidden records.
If you can no longer open the app, email waqas.devhub@gmail.com from the phone number or email address linked to your account, and we will delete it for you.
7Your choices
- Profile: edit your name, email and photo in the app at any time.
- Notifications: turn transaction notifications off in Settings, or in your phone's notification settings.
- Permissions: contacts and photos are optional. You can refuse or withdraw them in your phone's settings; the related feature then works manually.
- Invite links: anyone who has an invite link can see the ledger name and join it, so share links only with the person you mean. The invite page only opens the app or the app store; the store link carries parameters that let us count how many installs come from invites.
8Children
Shared Khata is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
9Changes to this policy
We may update this policy when the app changes. The current version is always on this page, with the effective date at the top.
10Contact
Email: waqas.devhub@gmail.com
App: Shared Khata (Android and iOS)