Privacy Policy

1In short

If you don’t have time for the whole document, this is the part that matters:

• We do not sell your personal data or pass it to advertising networks.
• You sign in with Google — we never see or store your password.
• Debt records, chat messages and images you attach are stored so the service can work at all.
• Payment details are hidden by default: you decide who gets to see them.
• Ask us to delete your account and your data is cleared.

Qarzer does not move money. It is a ledger: it records who owes whom and how much.

2What this document covers

This policy applies to the Qarzer Android app, the qarzer.app website and the servers behind them. By using the app you agree to the processing described here.

Services outside the app — your banking app or your Google account, for example — follow their own policies, which we do not control.

3What we collect

We collect only what the service needs to function:

• Account: name, @username, profile picture and the email address attached to your Google account.
• Debt records: amount, currency, due date, note, status and the times these changed.
• Chat: the messages you write and any image you attach to an offer (a transfer screenshot, for example).
• Payment details: the card information you enter yourself.
• Notification token: so push messages reach your device.
• Technical data: device type, system and app version, and crash reports.

The app does not ask to read your phone contacts and does not collect your location.

4Why we use it

• To do the job the service exists for: record a debt, have both sides confirm it, track the due date and send reminders.
• To deliver messages and notifications.
• To find faults, keep the service secure and prevent abuse.
• To meet legal obligations.

We do not use your data for advertising and we do not build an advertising profile of you.

5Signing in with Google

Sign-in goes through your Google account. We never see or store your password — we receive only the identifier, name, email address and profile picture needed to recognise you.

Processing on Google’s side is governed by Google’s own privacy policy.

6Chat and images

Messages and debt offers are stored on our server so they can be delivered to the other person. Our staff do not routinely read conversations; access happens only to fix a technical fault or to meet a lawful request, and then only to the smallest extent needed.

If you attach an image — a transfer screenshot, say — it is stored as part of the message. Everything visible in that image is visible to the other person, so avoid capturing personal details you did not mean to send.

A declined or expired offer stays in the chat as history: who proposed what should not disappear.

7Notifications

To send push messages we store your device’s notification token. The token alone does not identify you as a person — it exists only to deliver a message to the right device.

Turn notifications off in your system settings and the token goes stale, so nothing is delivered. Reminders are sent at most once a day per debt, and only during daytime hours.

8Payment details

You add card information to your profile yourself. It is hidden from others by default — you switch sharing on, and you can switch it off again at any time.

We never take a payment with this information, never charge the card and never pass it to payment providers. It is stored purely so the other person knows where to send the money.

9Qarzer Pro and Google Play

The Qarzer Pro subscription is purchased through Google Play. Payment happens on Google’s side: we see neither your card number nor your payment details.

All that reaches us is the subscription status and how long it runs — enough to unlock the Pro features for you.

10Who we share it with

We do not sell personal data. It goes to a third party only in these cases:

• Technical providers that keep the service running: server infrastructure, notification delivery, error monitoring.
• Google Play, when a subscription is purchased.
• A lawful request from an authorised body.
• Where it is necessary to protect the safety of the service or its users.

Every technical provider is bound by confidentiality obligations and may not use the data for its own purposes.

11How long we keep it

Data is kept while your account is active — the whole point of a debt history is that it survives.

Once you ask us to delete your account, personal data is cleared within a reasonable period. Copies of messages held by the other participant and records we must keep by law may remain, as may anonymised statistics.

12Your rights

• Access your data and request a copy of it.
• Correct information that is wrong.
• Ask for your account and its data to be deleted.
• Opt out of notifications.
• Complain to a supervisory authority if we fail to respond.

For any request: [email protected]. We may ask for extra details to confirm your identity — so that nobody else can make a request in your name.

13Security

All traffic between the app and the server travels over an encrypted connection. Access to servers is restricted and granted only where needed.

Even so, no system on the internet is absolutely secure. Protect your Google account and keep your device locked.

14Children

Qarzer is not intended for anyone under 16 and we do not knowingly collect their data. Any such account we find is removed.

15When this policy changes

We give advance notice of significant changes, in the app or by email. The date and version number at the top of the document show the latest revision.

Continuing to use the service after a change means you accept the new version.