Privacy Policy

GullakParty is a product owned and operated by Manivora Technologies ("we", "us", "our"). This Privacy Policy explains how we collect, use, share and protect your information when you use the GullakParty mobile application and related services (together, the "Service"). By using the Service you agree to this policy.

1. Information We Collect

a) Information you provide

• Account details: your name, mobile number (verified via OTP), optional profile photo or avatar, and language preference.
• Financial records you enter: udhar (lending/borrowing) entries, personal expenses, budgets, savings goals, group expenses, splits, settlements and repayment records. These are amounts and notes you type in yourself — GullakParty does not connect to your bank account, UPI apps, or read your SMS.
• Feedback: messages you send us through the in-app "Send Feedback" option.

b) Contacts (with your permission)

• If you grant the Contacts permission, the app reads names and phone numbers from your phone's address book on your device, so we can show familiar names for the people you split expenses or record udhar with. Before we ask for this permission, the app shows you an explanation of exactly what it does.
• Your address book is never uploaded. The app first asks our server which numbers you already have an udhar or a group with, matches that list against your contacts on the device, and sends back only the names for those people. Everyone else in your phone stays on your phone — we never receive them.
• Contact names saved this way are visible only to you (WhatsApp-style per-viewer naming) — they are not shown to other users, and a name you typed yourself is never overwritten.
• The Contacts permission is optional. If you deny it, the app still works; people are shown by their phone number until you name them manually.
• We never use your contacts for marketing, and we never contact people in your address book.

c) Chat messages

• The app lets you send text and image messages to a person you have an udhar with, or to the members of a group you belong to. Chat is tied to that shared ledger — there is no public feed, no stranger matching and no discovery of people you have not added.
• Messages are stored on our servers so they can be delivered to the recipient and stay available on your devices. We store the message content, who sent it, the conversation it belongs to, and timestamps.
• You can edit or delete your own text message for a limited period after sending it. Deleting a message removes it from the conversation for everyone.
• We do not read your conversations for advertising or profiling. Message content is accessed by our staff only when a message is reported to us (see Section 4) or where the law requires it.

d) Receipt images

• You can attach a photo of a bill or receipt to an entry, or share an image into GullakParty from another app.
• Receipts are stored on your own device first. When you choose to share one with the other person in an udhar or with a group, a compressed copy is placed on a temporary relay on our servers purely so the other side can download it.
• That relay copy is deleted as soon as everyone it was meant for has received it, and in any case automatically within 7 days. Download links are short-lived. We do not keep a permanent library of your receipts.
• Text recognition (OCR) runs entirely on your device. When the app reads a receipt to pre-fill an amount or a date, the image is never uploaded to us or to any third-party or AI service to be read.

e) Information collected automatically

• Device information: a device identifier, platform (Android/iOS) and a push-notification token (Firebase Cloud Messaging) so we can deliver reminders and updates. If you sign in on more than one device, we keep one record per device so notifications reach the right one.
• Usage and activity logs: basic in-app activity (e.g. entries created, last-seen time) used for the app's own features, security and abuse prevention.
• Advertising identifiers: if ads are enabled in the app, Google AdMob may collect your device's advertising ID to show ads. See Section 5.

2. How We Use Your Information

• To create and operate your account (OTP login, profile).
• To provide core features: recording udhar, splitting group expenses, settlements, budgets, savings goals and reports.
• To deliver your chat messages and shared receipts to the people you send them to.
• To send push notifications such as udhar reminders, due-date alerts, new messages and group activity updates. You can control notifications from your device settings.
• To respond to your feedback and support requests.
• To review reports of abusive content and to keep the Service secure — rate limiting, fraud/abuse prevention and account protection.
• To show ads (only when ads are enabled) and measure basic app performance.

3. What Other Users Can See

GullakParty is a shared-ledger app. When you record an udhar entry or a group expense with someone, that person can see the shared transaction details (amounts, dates, notes) and your profile name/photo. Messages you send in a conversation, and receipts you choose to share, are visible to the other person or to the members of that group. Nicknames you set for others, your own private notes, and receipts you have not shared remain private to you.

4. Staying Safe: Blocking, Reporting & Moderation

• Blocking. You can block another user from the app. Once blocked, you stop seeing that person's messages and they can no longer raise notifications for you. You can unblock them at any time.
• Reporting. You can report a message you believe breaks our rules. When you do, we receive a copy of the reported message, the reason you selected, and the accounts involved, so that we can review it.
• Your identity as a reporter is protected. If we warn or act against the reported user, that notice does not tell them who reported them.
• What we may do. After review we may take no action, remove content, warn the account, or suspend it. Reports and the actions we take are retained so we can recognise repeat behaviour.
• The rules for acceptable content are set out in our Terms & Conditions.

5. Sharing of Information

We never sell your personal information. We share data only with:

Recipient	What & why
Google Firebase Cloud Messaging	Push-notification token and message payloads, to deliver notifications to your device.
Google AdMob	Advertising ID and ad-related signals, to serve ads when ads are enabled. See Google's Privacy Policy.
Other users you transact with	Shared transaction details, messages you send them, receipts you share, and your profile name/photo (see Section 3).
Legal authorities	Only if required by applicable law, regulation or valid legal process.

Chat messages and receipt relay files are held on our own servers. They are not passed to any advertising, analytics or AI service.

6. App Permissions We Request

• Contacts (read/write): to show familiar names for people you transact with (optional — see Section 1b).
• Photos / Camera (via system picker): only when you choose to set a profile photo, attach a receipt, or send an image in a chat.
• Shared content: when you share an image or text into GullakParty from another app, we receive only what you chose to share, at the moment you share it.
• Notifications: to deliver reminders, messages and updates.

7. Data Security

We protect your data using industry-standard measures: OTP-based authentication, session tokens stored in your device's secure storage, token rotation and revocation, request rate limiting, and input sanitisation on our servers. Data is transmitted to our servers over encrypted connections in production, and receipt downloads use short-lived links. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

8. Data Retention & Account Deletion

You can delete your account at any time, in two ways:

• In the app: Profile → Delete Account.
• On the web (no app needed): use our account deletion page below — verify with an OTP on your registered mobile number.

Request Account Deletion

While your account is active:

• Your ledger entries, messages and settings are kept for as long as needed to provide the Service.
• Receipt files on the temporary relay are deleted once delivered, and automatically within 7 days regardless.

When you delete your account:

• Your account is immediately deactivated and a 30-day grace period begins. If you change your mind, simply log back in within 30 days to restore your account.
• After 30 days, your personal data — name, mobile number, profile photo, devices and notifications — is permanently deleted or anonymised.
• Udhar entries, group expenses and messages shared with other users remain in their records in anonymised form (it is their data too). Minimal transactional records, and records of any abuse reports, may be retained where required for legal, safety or anti-fraud purposes.

9. Children

GullakParty is a personal-finance app intended for adults. It is not directed at children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

10. Your Choices & Rights

• Edit your name, photo and language anytime from the Profile screen.
• Revoke the Contacts permission from your device settings anytime.
• Turn off notifications from your device settings.
• Block or report another user from within a conversation (Section 4).
• Choose whether to share any given receipt — receipts you do not share never leave your device.
• Request account deletion (Section 8) or ask us questions about your data via the contact below.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Service after changes means you accept the updated policy.

12. Contact Us

For any questions about this Privacy Policy or your data:
Company: Manivora Technologies — manivora.in
Email: support@gullakparty.com · info@manivora.in
App: GullakParty (com.gullakparty.app)

GullakParty, Manivora Technologies ("hum", "humara") ka product hai. Ye Privacy Policy batati hai ki hum aapki information kaise collect, use, share aur protect karte hain jab aap GullakParty mobile app aur related services (milke, "Service") use karte ho. Service use karne ka matlab hai aap is policy se agree karte ho.

1. Hum Kya Information Collect Karte Hain

a) Jo aap khud dete ho

• Account details: aapka naam, mobile number (OTP se verified), optional profile photo ya avatar, aur language preference.
• Financial records jo aap enter karte ho: udhar entries, personal kharche, budgets, savings goals, group expenses, splits, settlements aur repayment records. Ye amounts aur notes aap khud type karte ho — GullakParty aapke bank account ya UPI apps se connect nahi hota, aur aapke SMS bhi nahi padhta.
• Feedback: jo messages aap app ke "Send Feedback" option se bhejte ho.

b) Contacts (aapki permission se)

• Agar aap Contacts permission dete ho, toh app aapke phone ki address book se naam aur phone numbers aapke device par hi padhta hai — taaki jin logon ke saath aap udhar ya kharcha split karte ho, unke jaane-pehchaane naam dikhein. Permission maangne se pehle app aapko saaf-saaf batata hai ki ye sab kya karta hai.
• Aapki address book kabhi upload nahi hoti. App pehle server se poochta hai ki kin numbers ke saath aapka udhar ya group pehle se hai, phir us list ko device par hi aapke contacts se milata hai, aur sirf unhi logon ke naam bhejta hai. Baaki sab aapke phone me hi rehte hain — wo humare paas aate hi nahi.
• Is tarah save hue naam sirf aapko dikhte hain (WhatsApp jaisa per-viewer naming) — dusre users ko nahi. Aur jo naam aapne khud likha hai wo kabhi overwrite nahi hota.
• Contacts permission optional hai. Deny karne par bhi app chalta hai — log phone number se dikhte hain jab tak aap manually naam nahi dete.
• Hum aapke contacts ko marketing ke liye kabhi use nahi karte, aur aapke contacts ko khud contact nahi karte.

c) Chat messages

• App me aap us insaan ko text aur image messages bhej sakte ho jiske saath aapka udhar hai, ya apne group ke members ko. Chat usi shared ledger se judi hai — na koi public feed hai, na ajnabiyon se milne ka koi tareeka, aur na hi un logon ko dhoondhne ka jinhe aapne add nahi kiya.
• Messages humare servers par store hote hain taaki wo saamne wale tak pahunch sakein aur aapke devices par bane rahein. Hum message ka content, kisne bheja, kis conversation ka hai, aur time store karte hain.
• Bhejne ke baad thodi der tak aap apna text message edit ya delete kar sakte ho. Delete karne par wo message sabke liye conversation se hat jaata hai.
• Hum aapki baatcheet ko ads ya profiling ke liye nahi padhte. Message content humari team tabhi dekhti hai jab koi message report kiya jaye (Section 4 dekhiye) ya kanoon ki zaroorat ho.

d) Receipt images

• Aap kisi entry ke saath bill ya receipt ki photo laga sakte ho, ya doosri app se koi image GullakParty me share kar sakte ho.
• Receipts sabse pehle aapke apne device par store hoti hain. Jab aap use kisi udhar wale saathi ya group ke saath share karna chunte ho, tabhi uski ek compressed copy humare server ke temporary relay par jaati hai — sirf isliye ki saamne wala use download kar sake.
• Wo relay copy tab hi delete ho jaati hai jab sabhi log use paa lete hain, aur har haal me 7 din ke andar apne aap. Download links thodi der ke liye hi kaam karte hain. Hum aapki receipts ki koi permanent library nahi rakhte.
• Text pehchanne ka kaam (OCR) poori tarah aapke device par hota hai. Jab app receipt padh kar amount ya date bhar deta hai, tab bhi wo image na humare paas aati hai, na kisi third-party ya AI service ke paas.

e) Automatically collect hone wali information

• Device information: device identifier, platform (Android/iOS) aur push-notification token (Firebase Cloud Messaging) — taaki reminders aur updates deliver ho sakein. Ek se zyada device par login karne par har device ka alag record rehta hai, taaki notification sahi jagah pahunche.
• Usage aur activity logs: basic in-app activity (jaise entries banana, last-seen time) — app ke features, security aur abuse prevention ke liye.
• Advertising identifiers: agar app me ads on hain, toh Google AdMob aapke device ki advertising ID collect kar sakta hai. Section 5 dekhiye.

2. Hum Aapki Information Kaise Use Karte Hain

• Aapka account banane aur chalane ke liye (OTP login, profile).
• Core features ke liye: udhar record karna, group expenses split karna, settlements, budgets, savings goals aur reports.
• Aapke chat messages aur shared receipts saamne wale tak pahunchane ke liye.
• Push notifications bhejne ke liye — udhar reminders, due-date alerts, naye messages aur group activity updates. Notifications aap device settings se control kar sakte ho.
• Aapke feedback aur support requests ka jawab dene ke liye.
• Galat content ki reports dekhne ke liye, aur Service ko secure rakhne ke liye — rate limiting, fraud/abuse prevention aur account protection.
• Ads dikhane ke liye (sirf jab ads on hon) aur basic app performance measure karne ke liye.

3. Dusre Users Kya Dekh Sakte Hain

GullakParty ek shared-ledger app hai. Jab aap kisi ke saath udhar entry ya group expense record karte ho, toh wo person shared transaction details (amounts, dates, notes) aur aapka profile naam/photo dekh sakta hai. Conversation me bheje gaye messages aur jo receipts aap share karna chunte ho, wo saamne wale ya us group ke members ko dikhte hain. Jo nicknames aap dusron ke liye set karte ho, aapke apne private notes, aur jo receipts aapne share nahi ki — wo sirf aapke liye private rehte hain.

4. Surakshit Rehna: Block, Report aur Moderation

• Block. Aap kisi bhi user ko app se block kar sakte ho. Block karne ke baad aapko uske messages dikhna band ho jaate hain aur wo aapko notification bhi nahi bhej sakta. Aap jab chaho unblock kar sakte ho.
• Report. Agar koi message aapko humare niyamon ke khilaf lage toh aap use report kar sakte ho. Tab humein us message ki ek copy, aapka chuna hua kaaran, aur juda hua account milta hai — taaki hum use dekh sakein.
• Report karne wale ki pehchan chhupi rehti hai. Agar hum saamne wale ko warning dete hain ya action lete hain, to us notice me kabhi nahi likha hota ki report kisne ki thi.
• Hum kya kar sakte hain. Dekhne ke baad hum kuch na karein, content hata dein, account ko warning dein, ya use suspend kar dein. Reports aur liye gaye actions record rehte hain taaki baar-baar galti karne walon ko pehchana ja sake.
• Content ke niyam humari Terms & Conditions me likhe hain.

5. Information Sharing

Hum aapki personal information kabhi bechte nahi. Data sirf inke saath share hota hai:

Kiske saath	Kya & kyun
Google Firebase Cloud Messaging	Push-notification token aur message payloads — aapke device tak notifications pahunchane ke liye.
Google AdMob	Advertising ID aur ad-related signals — ads serve karne ke liye (jab ads on hon). Google ki Privacy Policy dekhiye.
Jin users ke saath aap transact karte ho	Shared transaction details, aapke bheje messages, share ki gayi receipts, aur aapka profile naam/photo (Section 3 dekhiye).
Legal authorities	Sirf tab jab applicable law, regulation ya valid legal process require kare.

Chat messages aur receipt relay files humare apne servers par rehti hain. Wo kisi advertising, analytics ya AI service ko nahi di jaatin.

6. App Kaunsi Permissions Maangta Hai

• Contacts (read/write): jin logon ke saath aap transact karte ho unke jaane-pehchaane naam dikhane ke liye (optional — Section 1b dekhiye).
• Photos / Camera (system picker se): sirf jab aap profile photo set karo, receipt lagao, ya chat me image bhejo.
• Shared content: jab aap doosri app se koi image ya text GullakParty me share karte ho, tab humein sirf wahi milta hai jo aapne us waqt share kiya.
• Notifications: reminders, messages aur updates deliver karne ke liye.

7. Data Security

Hum aapka data industry-standard measures se protect karte hain: OTP-based authentication, device ki secure storage me session tokens, token rotation aur revocation, request rate limiting, aur servers par input sanitisation. Production me data encrypted connections se transmit hota hai, aur receipt download ke links thodi der ke liye hi kaam karte hain. Koi bhi transmission ya storage method 100% secure nahi hota, lekin hum aapki information ko protect karne ki poori koshish karte hain.

8. Data Retention & Account Deletion

Aap apna account kabhi bhi delete kar sakte ho, do tareeke se:

• App me: Profile → Delete Account.
• Web par (app ki zaroorat nahi): niche diye gaye account deletion page se — registered mobile number par OTP se verify karke.

Account Deletion Request Karo

Jab tak aapka account active hai:

• Aapki ledger entries, messages aur settings utne samay tak rehte hain jitna Service chalane ke liye zaroori hai.
• Temporary relay par padi receipt files delivery hote hi delete ho jaati hain, aur har haal me 7 din ke andar.

Jab aap account delete karte ho:

• Aapka account turant deactivate ho jata hai aur 30-din ka grace period shuru hota hai. Mann badal jaye toh 30 din ke andar wapas login karke account restore kar sakte ho.
• 30 din ke baad aapka personal data — naam, mobile number, profile photo, devices aur notifications — permanently delete ya anonymise ho jata hai.
• Dusre users ke saath shared udhar entries, group expenses aur messages unke records me anonymised roop me rehte hain (wo unka bhi data hai). Legal, safety ya anti-fraud reasons ke liye minimal transactional records aur abuse reports ke records retained reh sakte hain.

9. Bacchon Ke Liye

GullakParty ek personal-finance app hai jo adults ke liye bana hai. Ye 18 saal se kam umar ke bacchon ke liye nahi hai, aur hum jaan-boojh kar bacchon ki personal information collect nahi karte. Agar aapko lagta hai kisi bacche ne humein personal information di hai, toh humein contact kariye — hum use delete kar denge.

10. Aapke Choices & Rights

• Profile screen se apna naam, photo aur language kabhi bhi edit karo.
• Device settings se Contacts permission kabhi bhi revoke karo.
• Device settings se notifications off karo.
• Kisi bhi conversation se doosre user ko block ya report karo (Section 4).
• Har receipt ke liye khud tay karo ki share karni hai ya nahi — jo share nahi ki, wo aapke device se bahar jaati hi nahi.
• Account deletion request karo (Section 8) ya apne data ke baare me niche diye contact par sawaal poochho.

11. Policy Me Changes

Hum ye policy samay-samay par update kar sakte hain. Material changes is page par updated effective date ke saath post honge. Changes ke baad Service use karte rehne ka matlab hai aap updated policy se agree karte ho.

12. Humse Contact Karo

Is Privacy Policy ya apne data ke baare me koi bhi sawaal ho toh:
Company: Manivora Technologies — manivora.in
Email: support@gullakparty.com · info@manivora.in
App: GullakParty (com.gullakparty.app)