Privacy Policy

Mess Ledger — by Jubaer Apps

Effective Date: April 4, 2026 | Last Updated: August 12, 2026

Jubaer Apps ("we", "us", or "our") operates the Mess Ledger mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App.

1. Information We Collect

1.1 Account Information

Name — your display name (required)
Email address — used for login and password recovery (optional)
Phone number — alternative login credential (optional)
Password — securely hashed before storage; we never store plaintext passwords
Google account ID — if you sign in with Google

1.2 Expense & Ledger Data

The App tracks shared meal expenses within messes you create or join. This includes:

Expense amounts, descriptions, and dates
Deposit and payment records
Member balances within messes

This data is only visible to members of the same mess.

1.3 Subscription & Payment Data

If you purchase a subscription, we collect:

Which wallet you paid from (bKash or Nagad)
The last 4 digits of the mobile number you sent from — never the full number
Payment amount

We do not process payments directly. Payments are made through bKash or Nagad, and we manually verify transactions.

1.4 Device Information

Push notification token — to deliver notifications to your device
Device platform — (Android/iOS) to send platform-appropriate notifications

2. Information We Do NOT Collect

Location or GPS data
Contacts or address book
Photos, camera, or microphone
SMS or call logs
Browsing history
Advertising identifiers — the App displays no advertisements and does not use the Android Advertising ID
We do not perform behavioral analytics or user tracking

3. How We Use Your Information

To create and manage your account
To provide the meal expense splitting functionality
To send push notifications (e.g., when expenses are added to your mess)
To send password reset emails
To process and verify subscription payments
To monitor and fix errors in the App

4. Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

Service	Purpose	Data Shared
Google Sign-In	Authentication	Google ID token, email, name
Sentry	Error monitoring	Error details, stack traces, environment info
Brevo	Transactional email delivery	Email address (for password reset only)
Expo Push Notifications	Push notification delivery	Push token, device platform

5. App Permissions

The App requests the following Android permissions:

INTERNET — to communicate with our servers
ACCESS_NETWORK_STATE — to detect network connectivity
VIBRATE — for notification vibration
RECEIVE_BOOT_COMPLETED — to restore scheduled notifications after device restart

6. Data Security

Passwords are hashed using industry-standard algorithms before storage
Authentication uses JWT (JSON Web Tokens) with short-lived access tokens and rotating refresh tokens
All communication between the App and our servers is encrypted via HTTPS
Database access is restricted and protected

While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure.

7. Data Retention

Your account data is retained as long as your account is active
Access tokens expire after a short period; refresh tokens expire after 90 days
Password reset codes expire after 10 minutes
If you delete your account, your profile data is soft-deleted (marked as deleted) and may be retained for record-keeping purposes

8. Account Deletion

You may delete your account at any time through the App settings. Upon deletion:

Your profile information will be deactivated
You will no longer be able to log in
Historical financial records within messes may be retained to maintain accurate accounting for other mess members

9. Children’s Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will take steps to delete such information promptly. If you believe a child under 13 has provided us with personal data, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Developer: Jubaer Apps
App: Mess Ledger
Email: jubaerapps.dev@gmail.com