Privacy Policy - Sahmly

1) Who we are

Sahmly is provided by Saifullah Ahad ("we", "us", "our"). Sahmly is a non-custodial coordination and record-keeping app for a shared cause fund. It does not hold, transfer, or process money.

2) Information Sahmly collects

Sahmly collects and stores the information needed to operate a shared fund:

• An anonymous Firebase user ID created automatically on first use.
• The display name you enter.
• Fund records, including title, cause description, target, currency, deadline, invite membership, and status.
• Pledges, collected contributions, spending records, recipients, receipt notes, timestamps, and tamper-evident ledger hashes.

Sahmly does not collect payment-card details, bank credentials, contacts, precise location, photos, audio, or advertising identifiers.

3) How information is used

We use this information only to authenticate the anonymous account, enforce fund access, synchronize the shared record, calculate reconciled totals, validate the ledger chain, and provide local deadline reminders.

4) Who can see fund information

Display names and fund records are shared only among authenticated members of that specific fund. Joining requires the fund's invite code. Sahmly has no public feed, public profiles, or public member search.

5) Service provider

Sahmly uses Google Firebase Authentication and Cloud Firestore to authenticate anonymous accounts and store and synchronize fund records. Google processes this data as our service provider under its applicable terms and privacy protections.

6) Local offline cache

Cloud Firestore keeps an encrypted app-sandbox cache on your device so previously loaded fund records remain available and new entries can wait for synchronization during a temporary connection loss. Pending entries are sent to Firebase after connectivity returns. Clearing Sahmly's app storage or uninstalling the app removes this local cache but does not by itself delete cloud records.

7) Advertising, analytics, and selling

Sahmly contains no advertising or analytics SDK. We do not sell personal information and do not share it for advertising, profiling, or cross-app tracking.

8) Retention and deletion

Fund records remain in Firebase while needed to provide the shared record. To request deletion of account-linked cloud data, email www.saifullah.ai@gmail.com and include enough fund information for us to locate the relevant record. We may need to verify the request against the anonymous account or fund context to protect other members' records.

9) Security

Data is encrypted in transit by Firebase. Deployed Firestore Security Rules restrict reads to fund members, restrict spending records to organizers, and prevent ledger events from being edited or deleted through the app. No system can guarantee absolute security.

10) Your choices

• You choose the display name and fund content you enter.
• You can deny or revoke notification permission; fund records and synchronization still work.
• You can clear local app storage or uninstall Sahmly to remove the on-device cache.
• You can contact us to request access, correction, or deletion where applicable.

11) Children's privacy

Sahmly is intended for adults coordinating a fund with people they know and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information.

12) International processing

Firebase infrastructure may process information in countries other than your own. We use the service only to provide authentication, storage, and synchronization for Sahmly.

13) Changes to this policy

We may update this policy when Sahmly or its legal obligations change. The current version will remain available at https://privacy.saifullah.ai/sahmly.html with its effective date.

14) Contact

For privacy questions or requests, contact Saifullah Ahad at www.saifullah.ai@gmail.com.

Developer location: Dhaka, Bangladesh.