Privacy Policy - Sahmly

1) Who we are

Sahmly is provided by Saifullah Ahad ("we", "us", "our"). Sahmly is a non-custodial coordination and record-keeping app for a shared cause fund. It does not hold, transfer, or process money.

2) Information Sahmly collects

Sahmly collects and stores the information needed to operate a shared fund:

• An anonymous Firebase user ID created automatically on first use.
• The display name you enter.
• Fund records, including title, cause description, target, currency, deadline, invite membership, and status.
• Pledges, collected contributions, spending records, recipients, receipt notes, timestamps, and tamper-evident ledger hashes.

Sahmly does not collect payment-card details, bank credentials, contacts, precise location, photos, audio, or advertising identifiers.

3) How information is used

We use this information only to authenticate the anonymous account, enforce fund access, synchronize the shared record, calculate reconciled totals, validate the ledger chain, and provide local deadline reminders.

4) Who can see fund information

Display names and fund records are shared only among authenticated members of that specific fund. Joining requires the fund's invite code. Sahmly has no public feed, public profiles, or public member search.

5) Service provider

Sahmly uses Google Firebase Authentication and Cloud Firestore to authenticate anonymous accounts and store and synchronize fund records. Google processes this data as our service provider under its applicable terms and privacy protections.

6) Local offline cache

Cloud Firestore keeps an encrypted app-sandbox cache on your device so previously loaded fund records remain available and new entries can wait for synchronization during a temporary connection loss. Pending entries are sent to Firebase after connectivity returns. Clearing Sahmly's app storage or uninstalling the app removes this local cache but does not by itself delete cloud records. Deleting your account in the app (see section 8) clears this cache and also updates the cloud records.

7) Advertising, analytics, and selling

Sahmly contains no advertising or analytics SDK. We do not sell personal information and do not share it for advertising, profiling, or cross-app tracking.

8) Retention and deletion

Delete your account in the app. Open You, choose Delete my account, and confirm. Sahmly then:

• changes your member entry in every fund you belong to into "Former member" with a pledge of 0, so your display name no longer appears in those funds;
• deletes your anonymous Firebase account, so its ID can no longer be used to sign in; and
• clears Sahmly's data on your phone, the same as clearing its storage in Android settings, which includes the local cache.

Money already recorded stays in each fund's shared record for the other members. Contribution and spending entries keep their amounts, dates, the notes typed with them, and the anonymous ID of the person who recorded them, which appears as "Former member" once that account is deleted. Each entry is linked to the one before it, so removing one would break the record the other members rely on. Your former member entry also stays, without your name or pledge: it keeps the anonymous ID, your role, the invite code you used, and the date you joined. The fund itself, with its title and description, stays as well. If you organize a fund, nobody can record spending in it or close it after your account is deleted.

Otherwise, fund records remain in Firebase while needed to provide the shared record. To request deletion of account-linked cloud data, you can also email [email protected] and include enough fund information for us to locate the relevant record. We may need to verify the request against the anonymous account or fund context to protect other members' records.

9) Security

Data is encrypted in transit by Firebase. Deployed Firestore Security Rules restrict reads to fund members, restrict spending records to organizers, and prevent ledger events from being edited or deleted through the app. No system can guarantee absolute security.

10) Your choices

• You choose the display name and fund content you enter.
• You can deny or revoke notification permission; fund records and synchronization still work.
• You can clear local app storage or uninstall Sahmly to remove the on-device cache.
• You can delete your account in the app: open You and choose Delete my account (see section 8).
• You can contact us to request access, correction, or deletion where applicable.

11) Children's privacy

Sahmly is intended for adults coordinating a fund with people they know and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information.

12) International processing

Firebase infrastructure may process information in countries other than your own. We use the service only to provide authentication, storage, and synchronization for Sahmly.

13) Changes to this policy

We may update this policy when Sahmly or its legal obligations change. The current version will remain available at https://privacy.saifullah.ai/sahmly.html with its effective date.

14) Contact

For privacy questions or requests, contact Saifullah Ahad at [email protected].

Developer location: Dhaka, Bangladesh.