Privacy Policy for Msroofy (مصروفي)
01Introduction
Msroofy ("the App", "we", "us") is a personal and shared expense-tracking app developed by MSA SMART. This policy explains what information the App collects, how it's used, who it's shared with, and the choices you have.
By creating an account or using the App, you agree to the collection and use of information as described here. If you don't agree, please don't use the App.
02Information we collect
We only collect what the App's own features need to work. Nothing here is used for advertising, and we never sell your data.
Account information
Email address, display name, and password (handled by Firebase Authentication — we never see or store your raw password). Your display name is visible to other users you interact with inside associations (جمعيات) or groups.
Financial data you enter
Expenses, categories, budgets, savings goals, and reminders you create manually. Msroofy does not connect to your bank, card, or any financial institution — every figure is typed in by you.
Associations (جمعيات) & group data
If you create or join a رقم شهري association, other members can see your display name, payment status, and — only if you choose to add them — your CliQ alias and phone number. An association admin can also add a phone number for a member, without it being saved to that member's own account.
Optional phone number
Entirely optional. Used only so an association admin can reach you (or another member) directly on WhatsApp about a payment reminder.
Device & diagnostic data
A push-notification token (so we can deliver reminders), and crash/error reports via Firebase Crashlytics, which may include device model, OS version, and app state at the time of a crash — never your financial data.
03How we use it
- To create and secure your account, and keep your data in sync across your devices.
- To power the features you use directly: expense tracking, budgets, reminders, savings goals, and association management.
- To send you notifications you've asked for — bill reminders, association nudges, and (for admin accounts only) system alerts.
- To detect, diagnose, and fix crashes or bugs.
- To keep the App secure — for example, rate-limiting login attempts and enforcing two-factor authentication on the admin account.
04Sharing & third parties
We don't sell your data, and we don't share it with advertisers. Your information is only shared in these cases:
| Who | What they process | Why |
|---|---|---|
| Google Firebase / Google Cloud | Account data, app data, crash reports | Our hosting, authentication, database, and crash-reporting infrastructure |
| Expo (push notifications) | Push token, notification content | Delivers reminder and nudge notifications to your device |
| Other association members | Display name, payment status, CliQ alias/phone (if added) | Associations only work if participants can see who's paid and how to reach each other |
| Law enforcement | Only if legally required | To comply with a valid legal request |
05Storage & security
Your data is stored on Google Firebase/Firestore infrastructure and encrypted in transit. Access to your personal data (as opposed to what you explicitly share inside an association) is restricted to your own account through server-side security rules — not just app-level checks.
No method of transmission or storage is 100% secure, and we can't guarantee absolute security, but we apply industry-standard practices and keep the App's security posture under active review.
06Retention & deletion
We keep your data for as long as your account is active. You can:
- Clear your expenses, categories, reminders, groups, and savings goals at any time from Settings → Clear All Data inside the App.
- Leave an association at any time, which removes your row from that association's shared data.
- Request full account deletion — including your authentication record and all associated data — by emailing us at the address below. We'll confirm once it's done, typically within a few business days.
07Your choices
- Phone number is entirely optional, both as your own Global setting and per association.
- Notifications can be turned off from your device's system settings at any time.
- Privacy Mode in-app lets you mask amounts on screen from anyone looking over your shoulder.
- You can request a copy or deletion of your data at any time — see Contact below.
08Children's privacy
Msroofy is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we'll remove it.
09Changes to this policy
We may update this policy as the App changes. Meaningful changes will be reflected by updating the effective date above. Continuing to use the App after an update means you accept the revised policy.
10Contact
Questions, data requests, or account deletion — reach us here: