Privacy Policy

1. Who we are

Asan Saraf is a digital notebook for money records. It helps people and small businesses track balances, customers, expenses, and related notes in one place — similar to a personal budget book or ledger app. Asan Saraf does not send, receive, or hold real money on your behalf, and it is not a bank, remittance provider, or licensed payment service.

Privacy questions: admin@asansaraf.com.

2. Scope

This policy applies to:

• Our marketing website and related landing pages
• The Asan Saraf web application
• The Asan Saraf Android and iOS mobile applications
• Backend services that power sign-in, workspaces, and the records you save in the app

If you use a shared workspace (for example a shop or exchange-office notebook), the workspace owner may also control records entered by staff. We process that information to provide the notebook features to that workspace.

3. Information we collect

3.1 Account and sign-in data

• Name, email address, and optional phone number
• Password (stored as a secure hash) or Google account identifier if you sign in with Google
• Email one-time codes for signup, login, or password reset
• Optional authenticator-app (TOTP) two-factor secrets and backup codes
• Session details such as device description, IP address, and user-agent

3.2 Notebook and budget records you enter

Depending on the features you use, the Services may store the records you choose to keep, such as:

• Workspace or business profile details (name, contact info, logo)
• People you track (for example customers or contacts), including name, phone, optional photo, ID note, address, and notes
• Accounts, balances, expenses, loans, and other ledger-style entries you create
• Optional hawala-style notes, receiver details, and attachments you attach to a record
• Locations and related contact numbers you save
• Subscription or plan records for using the app
• In-app notifications and optional push-device tokens
• Security logs of important account actions

These entries are your notes and bookkeeping records. Saving them in Asan Saraf does not move cash through our systems.

3.3 Device and app data

• Device name/model/OS, app version, and similar technical details used for sessions and notifications
• Language and display preferences
• Push notification tokens and a device identifier when notifications are enabled

3.4 Information stored on your device

• Access and refresh tokens and a cached session snapshot in secure device storage
• Biometric lock preferences (we do not store fingerprint or Face ID templates; your device handles biometric matching)
• Local preferences such as language and receipt sharing options
• Temporary image cache for faster loading

3.5 Information we do not collect by default

• Precise GPS location
• Payment card numbers for moving money (the app is not a money transfer service)
• Third-party product analytics or crash-reporting SDKs such as Firebase Analytics, Crashlytics, or Sentry in the current apps

4. Mobile app permissions

The mobile apps may request the following permissions only when needed for features you use:

• Camera — add photos or document images to your records
• Photos / media — select or save images and receipts for your notebook
• Contacts — optionally pick a phone number when adding a person to your records
• Notifications — optional reminders and app alerts
• Biometrics — unlock the app locally with fingerprint or Face ID
• Network access — sync your notebook with Asan Saraf servers

You can deny or revoke permissions in your device settings. Some features will not work without the related permission.

5. How we use information

• Create and manage your account and workspaces
• Sign you in, verify email, reset passwords, and support optional two-factor authentication
• Store, display, search, and report on the notebook records you enter
• Store photos, logos, and attachments you upload
• Send transactional emails (for example verification or security messages) and optional push notifications
• Protect accounts with access controls, rate limits, and basic abuse prevention
• Operate app subscriptions and customer support
• Keep the Services reliable and secure

6. How we share information

We do not sell personal information. We share information only as needed to run the notebook Services, including with:

• Google — if you use Google Sign-In
• Firebase Cloud Messaging — to deliver push notifications when enabled
• Resend — transactional email delivery
• Cloudflare R2 — storage for photos, logos, and attachments
• Infrastructure providers that host our databases, cache, and application servers
• Other members of your workspace who are granted access by the workspace owner
• Authorities or other parties when required by law or to protect rights, safety, and security

7. Storage and security

We use safeguards appropriate for a cloud notebook app, including HTTPS, hashed passwords, short-lived access tokens with refresh sessions, encrypted authenticator secrets where used, and workspace access controls. No method of transmission or storage is 100% secure; we work to protect information but cannot guarantee absolute security.

8. Retention

We retain information for as long as needed to provide the Services and meet operational, security, and legal requirements. Sign-in codes and session tokens expire on a schedule. Notebook records (balances, people, notes, attachments) generally remain available while your account or workspace is active unless you delete them or we can fulfill a valid deletion request.

9. Your choices and rights

• Update profile and workspace information inside the Services where available
• Enable or disable optional biometrics and push notifications in app or device settings
• Revoke Google access through your Google account settings if you used Google Sign-In
• Request access, correction, or deletion of personal information we control by contacting admin@asansaraf.com. For a step-by-step deletion request, see our Delete Account page.

If your information was entered by someone else’s workspace, we may redirect your request to that workspace owner so they can respond.

10. Children’s privacy

The Services are intended for adults managing personal or business records. We do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction). If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

11. Where information is processed

We may process and store information on cloud servers and with service providers in countries other than where you are located. Where required, we take steps designed to protect information consistent with this policy.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. If changes are material, we may provide additional notice through the Services or by email where appropriate.

13. Contact us

For privacy requests or questions about this policy, contact Asan Saraf at admin@asansaraf.com.