baraka-daftari-privacy-policy

Baraka daftari — Maxfiylik siyosati / Privacy Policy

• O’zbekcha
• English

---

O’zbekcha

Kuchga kirish sanasi: 2026-yil 27-sentabr

Ma’lumotlar egasi (operator): Abdusamad Abdukarimov, aloqa: mobilchi4862@gmail.com

“Baraka daftari” (“Ilova”) — shaxsiy daromad va xarajatlarni yuritish uchun ilova. Ushbu siyosat Ilova qanday ma’lumotlarni to’plashi, nima uchun ishlatishi, qayerda saqlashi va siz ular ustidan qanday nazoratga ega ekaningizni tushuntiradi.

1. Biz qanday ma’lumotlarni olamiz

1.1. Kirish (hisob) ma’lumotlari. Ilovaga hisob bilan kirishingiz mumkin — Google yoki Apple hisobi orqali, yoki email va parol bilan — yoki hisobsiz, mehmon rejimida foydalanishingiz mumkin (1.1d). Google/Apple tanlansa, provayder bizga quyidagilarni beradi: ismingiz, email manzilingiz, profil rasmi havolasi (Google) va Firebase tomonidan berilgan noyob foydalanuvchi identifikatori (uid). Apple bilan kirishda Apple email’ingizni yashirish imkonini beradi — bu holda biz faqat Apple bergan yashirin manzilni olamiz; Google/Apple parolingizni biz hech qachon ko’rmaymiz. Email va parol bilan ro’yxatdan o’tsangiz, biz email manzilingizni, siz kiritgan ism-familiyangizni va (ixtiyoriy) telefon raqamingizni olamiz; parol Firebase Authentication’da faqat xeshlangan holda saqlanadi va bizga ko’rinmaydi. Parolni tiklash havolasi email’ingizga yuboriladi.

1.1a. Profil ma’lumotlari (ixtiyoriy). Profilda ismingizni o’zgartirishingiz, telefon raqamingizni kiritishingiz va o’z rasmingizni yuklashingiz mumkin (Profil → “Profilni tahrirlash”). Bu ma’lumotlar faqat sizning hisobingizda saqlanadi, hech kimga ko’rsatilmaydi va yuborilmaydi; telefon raqami SMS bilan tasdiqlanmaydi va marketing uchun ishlatilmaydi. Ularni istalgan vaqtda tozalashingiz mumkin.

1.1b. Qurilma identifikatori. Hisobingiz qaysi qurilmalardan ishlatilayotganini bilish uchun Ilova har ishga tushganda telefoningizning identifikatorini hisobingizga yozib qo’yadi: Android’da ANDROID_ID (ilovaning imzo kaliti, qurilma va Android foydalanuvchisiga bog’langan; zavod sozlamalariga qaytarilganda o’zgaradi), iOS’da esa identifierForVendor (bizning ilovalarimiz qurilmadan butunlay o’chirilganda o’zgaradi). Qurilma modeli, OS va Ilova versiyasi ham shu bilan birga yoziladi. Bu reklama identifikatori emas, reklama yoki kuzatuv (tracking) uchun ishlatilmaydi, hech kimga berilmaydi va hech qanday ruxsat talab qilmaydi. Maqsadi — texnik qo’llab-quvvatlash va hisoblarni suiste’moldan himoya qilish. Hisobingizni o’chirsangiz, bu yozuvlar ham o’chadi.

1.1c. Bildirishnomalar (push). Ilova yangiliklar va sizga tegishli xabarlarni yuborish uchun Firebase Cloud Messaging’dan foydalanadi. Buning uchun qurilmangizga Google/Apple bergan registratsiya tokeni yuqoridagi qurilma yozuvida saqlanadi (fcmToken) va hisobdan chiqqaningizda o’chiriladi. Token — manzil, ya’ni xabarni aynan shu telefonga yetkazish uchun; u reklama identifikatori emas, kuzatuv uchun ishlatilmaydi va hech kimga berilmaydi. Xabar matnining o’zi bizning serverimizdan chiqadi — unga sizning moliyaviy yozuvlaringiz qo’shilmaydi. Bildirishnomalarni qurilma sozlamalaridan istalgan payt o’chirib qo’yishingiz mumkin; ruxsat so’ralganda rad etsangiz, Ilovaning qolgan qismi o’zgarishsiz ishlayveradi.

1.1d. Mehmon rejimi (hisobsiz). “Ro’yxatdan o’tmasdan davom etish”ni tanlasangiz, siz kiritgan yozuvlar, jamg’armalar, qarzlar, kategoriyalar, sozlamalar va chek rasmlari faqat telefoningizda (ilovaning shaxsiy xotirasida) saqlanadi va bizning serverimizga yuborilmaydi. Ilova sozlamalari, maslahatlar va (xohlasangiz) qo’llab-quvvatlash to’lovi uchun Firebase sizga anonim identifikator beradi — unda ism, email yoki telefon yo’q, moliyaviy yozuvlaringiz unga bog’lanmaydi. Mehmon rejimidagi ma’lumotlar Ilova o’chirilganda yoki telefon almashtirilganda yo’qoladi. Keyin hisob yaratsangiz yoki kirsangiz, ular hisobingizga ko’chiriladi; ko’chirish to’liq tekshirilgandan keyin telefondagi nusxa o’chiriladi, ehtiyot nusxasi esa 7 kun qurilmada turadi va keyin o’chadi.

1.2. Siz kiritadigan moliyaviy yozuvlar. Siz o’zingiz kiritgan ma’lumotlar:

• daromad va xarajat yozuvlari: summa, valyuta (so’m, AQSh dollari, rubl), so’mdagi qiymati va ishlatilgan kurs, sana, kategoriya, zarurlik darajasi, to’lov usuli (naqd / karta / o’tkazma), izoh;
• jamg’arma hamyonlari (nomi, maqsadi, maqsad summasi va muddati, balansi) va ularga qo’shish / olish harakatlari (kimdan-kimga, izoh);
• oylik yig’indilar (yozuvlaringizdan avtomatik hisoblanadi);
• sozlamalar: asosiy valyuta, mavzu, oy boshlanish kuni, oylik kuni, eslatma vaqti, byudjet limitlari, qo’lda kiritilgan valyuta kurslari;
• o’zingiz yaratgan kategoriyalar (nomi, ikonkasi, darajasi);
• qarzlar daftari (“Qarzlar”): kim kimga qarz (siz yoki sizga), shaxsning ismi, ixtiyoriy telefon raqami, summa va valyuta, muddat, izoh va to’lovlar. Bu yozuvlar faqat sizning hisobingizda turadi va hech kimga (shu jumladan o’sha shaxsga) ko’rsatilmaydi; boshqa odamning ismi va raqamini kiritayotganda buni faqat o’zingizning eslatmangiz sifatida kiritasiz.

Biz bank hisoblaringizga, kartalaringizga yoki to’lov tizimlariga ulanmaymiz; Ilova faqat siz qo’lda yozgan narsalarni saqlaydi.

1.3. Rasmlar (ixtiyoriy). Yozuvga chek rasmini biriktirsangiz yoki profilingizga rasm qo’ysangiz, rasm telefoningizda siqiladi (chek < 1 MB, profil rasmi < 512 KB), undagi EXIF metama’lumotlari (jumladan joylashuv va qurilma ma’lumotlari) olib tashlanadi va Firebase Cloud Storage’ga yuklanadi. Kamera va fotogalereyaga faqat siz rasm tanlaganingizda murojaat qilinadi.

1.4. Valyuta kurslari. Ilova O’zbekiston Respublikasi Markaziy bankining ochiq sahifasidan (cbu.uz) kunlik kurslarni yuklab oladi. Bu so’rovda sizning shaxsiy ma’lumotlaringiz yuborilmaydi (internetdagi har qanday so’rov kabi, Markaziy bank serveri IP manzilingizni ko’rishi mumkin).

1.5. Qurilmada saqlanadigan ma’lumotlar. Telefoningizda quyidagilar saqlanadi va bizga yuborilmaydi: keshlangan valyuta kurslari va ular olingan vaqt, rejalashtirilgan mahalliy eslatmalar (bildirishnomalar serverdan emas, telefonning o’zidan chiqadi), hamda Firebase’ning oflayn keshi (internet bo’lmaganda ishlash uchun).

1.6. Xatolik hisobotlari (Firebase Crashlytics). Ilova ishdan chiqsa yoki jiddiy xato yuz bersa, Crashlytics quyidagilarni yuborishi mumkin: qurilma modeli, operatsion tizim versiyasi, Ilova versiyasi, xatoning texnik tavsifi (stack trace), xato vaqti va Firebase uid (taxallusli identifikator). Hisobotlarga summalar, izohlar, kategoriya nomlari, ism yoki email qo’shilmaydi. Hisobotlar faqat reliz versiyalaridan yuboriladi; ular Ilovaning barqaror ishlashi uchun zarur, shuning uchun Ilova ichida alohida o’chirish sozlamasi yo’q. Ma’lum bir hisobotni o’chirishni so’rash uchun quyidagi manzilga yozing.

1.7. Foydalanish statistikasi (Google Analytics for Firebase). Ilovani yaxshilash — qaysi funksiyalar kerakligi va foydalanuvchi qayerda qiynalayotganini tushunish uchun — Ilova Google Analytics for Firebase’ga quyidagilarni yuboradi: qaysi ekranlar ochilgani va qaysi tugmalar bosilgani; qaysi funksiyadan foydalanilgani (masalan, yozuv, jamg’arma yoki qarz qo’shildi, hisobot ochildi) — faqat turi, kategoriyaning standart kaliti (o’zingiz yaratgan kategoriya faqat “custom” deb), valyuta kodi va “ha/yo’q” belgilari bilan; kirish usuli va kirishdagi xato turi; tanlangan sozlamalar (til, mavzu, asosiy valyuta, oy boshlanish kuni, eslatma va ilova qulfi yoqilgan-yoqilmagani, mehmon yoki hisob rejimi); shuningdek Firebase avtomatik yig’adigan ma’lumotlar — Ilova o’rnatilgan nusxaning identifikatori (app instance ID), qurilma modeli, OS va Ilova versiyasi, til, taxminiy mamlakat va sessiya vaqtlari. Hisobingiz bo’lsa, u Firebase uid (taxallusli identifikator) bilan bog’lanadi; mehmon rejimida uid yuborilmaydi. Statistikaga hech qachon summalar, izohlar, ism, email, telefon, jamg’arma/qarz nomlari, kategoriya nomlari yoki boshqa siz yozgan matn qo’shilmaydi. Reklama identifikatori (IDFA / Android Advertising ID) yig’ilmaydi, reklama shaxsiylashtirish signallari o’chirilgan va ma’lumotlar reklama yoki kuzatuv (tracking) uchun ishlatilmaydi. Statistika faqat reliz versiyalaridan yuboriladi; Ilova ichida alohida o’chirish sozlamasi yo’q.

2. Nima uchun ishlatamiz

• hisobingizni aniqlash va ma’lumotlaringizni faqat sizga ko’rsatish;
• yozuvlaringizni saqlash, qurilmalar o’rtasida sinxronlash, hisobot, byudjet va jamg’arma ko’rsatkichlarini hisoblash;
• siz yoqqan eslatmalarni ko’rsatish;
• Ilova barqarorligini yaxshilash (xatolik hisobotlari, 1.6);
• Ilova qanday ishlatilishini umumiy tarzda tushunib, uni yaxshilash (foydalanish statistikasi, 1.7).

Biz ma’lumotlaringizni sotmaymiz, reklama ko’rsatmaymiz, reklama yoki kuzatuv (tracking) xizmatlariga bermaymiz. Foydalanish statistikasi (1.7) faqat Ilovani yaxshilash uchun ishlatiladi va unda moliyaviy yozuvlaringiz yoki siz yozgan matn bo’lmaydi. Ma’lumotlaringiz asosida avtomatlashtirilgan qarorlar qabul qilinmaydi.

3. Qayerda saqlanadi va kimlar qayta ishlaydi

Ma’lumotlar Google LLC tomonidan taqdim etiladigan Firebase xizmatlarida saqlanadi va qayta ishlanadi:

Xizmat	Nima uchun
Firebase Authentication	Google / Apple / email va parol orqali kirish
Cloud Firestore	yozuvlar, jamg’armalar, qarzlar, sozlamalar, kategoriyalar, oylik yig’indilar, profil va qurilma yozuvlari (1.1a–1.1c)
Cloud Storage for Firebase	chek rasmlari va profil rasmi
Firebase Cloud Messaging	push bildirishnomalar (1.1c)
Firebase Crashlytics	xatolik hisobotlari (1.6)
Google Analytics for Firebase	foydalanish statistikasi (1.7)

Firestore va Storage ma’lumotlari Firebase loyihasi uchun tanlangan hududda saqlanadi: Qatar, Doha (Google Cloud me-central1). Google ma’lumotlarni o’z xavfsizlik va maxfiylik shartlariga muvofiq qayta ishlaydi (https://firebase.google.com/support/privacy). Kirish provayderlari (Google, Apple) o’z maxfiylik siyosatlariga bo’ysunadi.

Ma’lumotlaringizni boshqa hech kimga bermaymiz, qonun talab qilgan hollar bundan mustasno.

4. Xavfsizlik

• Ilova va serverlar o’rtasidagi barcha aloqa shifrlangan (HTTPS/TLS).
• Firestore va Storage xavfsizlik qoidalari har bir hujjat va faylni faqat uning egasi (siz kirgan hisob) o’qishi va yozishiga ruxsat beradi; boshqa foydalanuvchilar ma’lumotlaringizni ko’ra olmaydi.
• Chek rasmlari faqat sizning papkangizda, faqat JPEG va 1 MB dan kichik bo’lishi mumkin.
• Ixtiyoriy ilova qulfi (Profil → Xavfsizlik): PIN-kodning o’zi saqlanmaydi, faqat uning tuzli xeshi — va u ham faqat telefoningizning himoyalangan xotirasida (iOS Keychain / Android Keystore), bizning serverlarimizga yuborilmaydi. Barmoq izi va Face ID’ni telefonning o’zi tekshiradi; ilova hech qanday biometrik ma’lumot olmaydi.

Hech bir tizim 100% xavfsiz emas; xavfsizlik muammosini aniqlasangiz, mobilchi4862@gmail.com ga yozing.

5. Saqlash muddati va o’chirish

• Yozuvlar, jamg’armalar, kategoriyalar, sozlamalar va chek rasmlari siz ularni o’chirmaguningizcha yoki hisobingizni o’chirmaguningizcha saqlanadi. Yozuvni o’chirsangiz yoki chekni olib tashlasangiz, chek rasmi ham serverdan o’chiriladi; kamdan-kam hollarda qolib ketgan rasm fayllari hisob o’chirilganda albatta tozalanadi.
• Hisobni o’chirish: Profil → “Hisobni o’chirish”. Ilova qayta kirishingizni so’raydi, so’ng barcha Firestore ma’lumotlaringizni, chek va profil rasmlaringizni va Firebase hisobingizni o’chiradi. Bu amalni qaytarib bo’lmaydi. Ilovaga kira olmasangiz, o’chirishni email orqali ham so’rashingiz mumkin — tartib: https://baraka-daftari.web.app/delete-account/.
• Qurilma identifikatorlari (1.1b) hisobingiz bilan birga turadi va hisob o’chirilganda o’chadi.
• Xatolik hisobotlari Firebase Crashlytics standart muddati davomida (hozirda 90 kun) saqlanadi va keyin avtomatik o’chiriladi.
• Foydalanish statistikasining foydalanuvchi va qurilma darajasidagi ma’lumotlari Google Analytics’da 2 oy saqlanadi va keyin avtomatik o’chiriladi (hech kimga bog’lanmagan umumlashtirilgan hisobotlar qolishi mumkin). Hisob o’chirilganda ular darhol o’chmaydi, lekin shu muddatda o’chadi; oldinroq o’chirishni mobilchi4862@gmail.com orqali so’rashingiz mumkin.
• Qurilmadagi ma’lumotlar Ilovani o’chirganingizda o’chadi.

6. Sizning huquqlaringiz

• Ko’rish va nusxa olish: barcha yozuvlaringizni Ilovada ko’rishingiz mumkin; ularning fayl (CSV) nusxasini olish uchun mobilchi4862@gmail.com ga yozing.
• Tuzatish: har qanday yozuv, jamg’arma, kategoriya yoki sozlamani Ilovada tahrirlashingiz mumkin.
• O’chirish: alohida yozuvlarni yoki butun hisobni Ilovaning o’zida o’chirishingiz mumkin.
• Rozilikni qaytarib olish: eslatmalar, kamera va galereya ruxsatlarini istalgan vaqtda Ilova yoki telefon sozlamalarida o’chirishingiz mumkin.
• Boshqa savollar yoki so’rovlar uchun mobilchi4862@gmail.com ga yozing.

Biz shaxsiy ma’lumotlarni O’zbekiston Respublikasining shaxsiy ma’lumotlar to’g’risidagi qonunchiligi va siz yashaydigan mamlakatda qo’llaniladigan talablarga muvofiq qayta ishlashga intilamiz.

7. Bolalar

Ilova kattalar uchun mo’ljallangan va 16 yoshgacha bo’lgan bolalarga qaratilmagan. Bola bizga ma’lumot bergani ma’lum bo’lsa, mobilchi4862@gmail.com ga yozing — ma’lumotlar o’chiriladi.

8. O’zgarishlar

Siyosat o’zgarsa, yangi tahrir shu sahifada yangi sana bilan e’lon qilinadi. Muhim o’zgarishlar haqida Ilova ichida ham xabar beriladi.

9. Aloqa

Abdusamad Abdukarimov — mobilchi4862@gmail.com — Telegram: https://t.me/baraka_daftari

---

English

Effective date: September 27, 2026

Controller: Abdusamad Abdukarimov, contact: mobilchi4862@gmail.com

“Baraka daftari” (the “App”) is a personal income and expense ledger. This policy explains what data the App collects, why, where it is stored and what control you have over it.

1. Data we collect

1.1. Account data. You can sign in — with a Google or Apple account, or with an email address and a password — or use the App without an account, in guest mode (1.1d). With Google/Apple the provider gives us your name, email address, a profile photo URL (Google) and a unique user identifier issued by Firebase (uid). With Sign in with Apple you may hide your email; we then only receive Apple’s relay address. We never see your Google/Apple password. If you sign up with email and password, we receive your email address, the full name you type in and, optionally, a phone number; the password is stored by Firebase Authentication in hashed form only and is never visible to us. Password-reset links are sent to your email address.

1.1a. Profile details (optional). You can change your name, add a phone number and upload your own picture in Profile → “Profilni tahrirlash” (edit profile). These stay in your own account, are never shown to anyone else or sent anywhere, and the phone number is not verified by SMS or used for marketing. You can clear them at any time.

1.1b. Device identifier. So that your account knows which devices it is used from, the App records your phone’s identifier in your account on every launch: ANDROID_ID on Android (tied to the app’s signing key, the device and the Android user; it changes on a factory reset) and identifierForVendor on iOS (it changes when all of our apps are removed from the device). The device model, OS version and App version are stored with it. This is not an advertising identifier, it is never used for advertising or tracking, it is never shared, and it requires no permission. It exists for technical support and to protect accounts from abuse. Deleting your account deletes these records too.

1.1c. Notifications (push). The App uses Firebase Cloud Messaging to send news and messages meant for you. The registration token Google/Apple issues for your device is stored in the device record described above (fcmToken) and is deleted when you sign out. The token is an address — it only makes it possible to deliver a message to this particular phone; it is not an advertising identifier, it is never used for tracking and it is never shared. The text of a message comes from us and never contains your financial records. You can switch notifications off in your device settings at any time, and declining the permission leaves the rest of the App unchanged.

1.1d. Guest mode (no account). If you choose “continue without an account”, your entries, savings pots, debts, categories, settings and receipt photos are stored only on your phone (in the App’s private storage) and are not sent to our servers. For the App’s settings, the advice posts and (if you choose to) a support payment, Firebase gives you an anonymous identifier — it carries no name, email or phone number, and your financial records are not linked to it. Guest-mode data is lost if you delete the App or change phones. If you later create an account or sign in, it is moved into your account; once the move has been fully verified, the copy on the phone is removed, and a backup copy stays on the device for 7 days and is then deleted.

1.2. Financial records you enter. Only what you type in yourself:

• income and expense entries: amount, currency (UZS, USD, RUB), the amount in so’m and the exchange rate used, date, category, necessity level, payment method (cash / card / transfer), comment;
• savings pots (name, purpose, target amount and date, balance) and deposits / withdrawals (counterparty, note);
• monthly totals (computed automatically from your entries);
• settings: default currency, theme, month start day, salary day, reminder time, budget limits, manually entered exchange rates;
• categories you create (name, icon, level);
• the debts register (“Qarzlar”): who owes whom (you or them), the person’s name, an optional phone number, amount and currency, due date, comment and payments. These records live only in your account and are never shown to anyone (including that person); when you enter another person’s name and number you do so as your own private note.

The App does not connect to your bank accounts, cards or payment services; it only stores what you record manually.

1.3. Photos (optional). If you attach a receipt photo to an entry or set a profile picture, the photo is compressed on your phone (receipts under 1 MB, the profile picture under 512 KB), its EXIF metadata (including location and device details) is removed, and it is uploaded to Firebase Cloud Storage. The camera and photo library are only accessed when you choose to add a photo.

1.4. Exchange rates. The App downloads daily rates from the public website of the Central Bank of Uzbekistan (cbu.uz). No personal data is sent with that request (as with any internet request, the bank’s server can see your IP address).

1.5. Data kept on your device. The following stays on your phone and is not sent to us: cached exchange rates and when they were fetched, scheduled local reminders (notifications are generated on the device, not by a server) and Firebase’s offline cache (so the App works without a connection).

1.6. Crash reports (Firebase Crashlytics). If the App crashes or hits a serious error, Crashlytics may send: device model, operating system version, App version, the technical error description (stack trace), the time of the error and your Firebase uid (a pseudonymous identifier). Reports do not include amounts, comments, category names, your name or email. Reports are only sent from release builds; they are needed to keep the App stable, so there is no separate switch for them in the App. To ask for a particular report to be deleted, write to the address below.

1.7. Usage statistics (Google Analytics for Firebase). To improve the App — to understand which features are needed and where people get stuck — the App sends Google Analytics for Firebase: which screens are opened and which buttons are tapped; which features are used (for example an entry, a savings pot or a debt was added, a report was opened) — only with its type, the built-in category key (a category you created is sent as just “custom”), the currency code and yes/no flags; the sign-in method and the type of a sign-in error; the settings you chose (language, theme, default currency, month start day, whether reminders and the app lock are on, guest or account mode); plus what Firebase collects automatically — an identifier of this App installation (app instance ID), device model, OS and App version, language, approximate country and session times. If you have an account, this is linked to your Firebase uid (a pseudonymous identifier); in guest mode no uid is sent. Usage statistics never include amounts, comments, your name, email or phone number, the names of savings pots, debts or categories, or any other text you type. No advertising identifier (IDFA / Android Advertising ID) is collected, ad personalisation signals are switched off, and the data is never used for advertising or tracking. Statistics are only sent from release builds; there is no separate switch for them in the App.

2. How we use data

• to identify your account and show your data only to you;
• to store your records, sync them across your devices and compute reports, budgets and savings figures;
• to show the reminders you enable;
• to improve stability (crash reports, 1.6);
• to understand, in aggregate, how the App is used and improve it (usage statistics, 1.7).

We do not sell your data, do not show ads and do not share data with advertising or tracking services. Usage statistics (1.7) are used only to improve the App and contain none of your financial records or text you type. No automated decisions are made about you.

3. Where data is stored and who processes it

Data is stored and processed by Firebase services provided by Google LLC:

Service	Purpose
Firebase Authentication	Sign in with Google / Apple / email and password
Cloud Firestore	entries, savings pots, debts, settings, categories, monthly totals, profile and device records (1.1a–1.1c)
Cloud Storage for Firebase	receipt photos and the profile picture
Firebase Cloud Messaging	push notifications (1.1c)
Firebase Crashlytics	crash reports (1.6)
Google Analytics for Firebase	usage statistics (1.7)

Firestore and Storage data are stored in the location selected for the Firebase project: Qatar, Doha (Google Cloud me-central1). Google processes the data under its own security and privacy terms (https://firebase.google.com/support/privacy). Sign-in providers (Google, Apple) are governed by their own privacy policies.

We do not share your data with anyone else, except where required by law.

4. Security

• All communication between the App and the servers is encrypted (HTTPS/TLS).
• Firestore and Storage security rules only allow the owner (the signed-in account) to read or write each document and file; other users cannot access your data.
• Receipt photos can only be stored in your own folder, only as JPEG and under 1 MB.
• The optional app lock (Profile → Security) never stores the PIN itself, only a salted hash of it, and only in your phone’s protected storage (iOS Keychain / Android Keystore); it is never sent to our servers. Fingerprint and Face ID are checked by the phone itself; the App receives no biometric data.

No system is perfectly secure; if you find a security issue, please write to mobilchi4862@gmail.com.

5. Retention and deletion

• Entries, savings pots, categories, settings and receipt photos are kept until you delete them or delete your account. Deleting an entry or removing its receipt also deletes the photo from the server; any photo file left behind in rare cases is always removed when the account is deleted.
• Account deletion: Profile → “Hisobni o’chirish” (delete account). The App asks you to sign in again, then deletes all your Firestore data, your receipt and profile photos and your Firebase account. This cannot be undone. If you can no longer open the App, you can also request deletion by email — see https://baraka-daftari.web.app/delete-account/.
• Device identifiers (1.1b) live with your account and are deleted when the account is deleted.
• Crash reports are kept for Firebase Crashlytics’ standard retention period (currently 90 days) and then deleted automatically.
• User- and device-level usage statistics are kept in Google Analytics for 2 months and then deleted automatically (aggregated reports that identify no one may remain). They are not removed the moment an account is deleted, but expire within that period; you can ask for earlier deletion at mobilchi4862@gmail.com.
• Data on your device is removed when you uninstall the App.

6. Your rights

• Access and portability: view all your records in the App; to receive a copy as a file (CSV), write to mobilchi4862@gmail.com.
• Correction: edit any entry, savings pot, category or setting in the App.
• Deletion: delete individual entries or your whole account in the App.
• Withdrawing consent: turn off reminders, camera and photo access at any time in the App or in your phone settings.
• For any other request, write to mobilchi4862@gmail.com.

We aim to process personal data in line with the personal data legislation of the Republic of Uzbekistan and the requirements that apply in your country of residence.

7. Children

The App is intended for adults and is not directed at children under 16. If you believe a child has provided us with data, contact mobilchi4862@gmail.com and it will be deleted.

8. Changes

If this policy changes, the new version will be published on this page with a new date. Significant changes will also be announced in the App.

9. Contact

Abdusamad Abdukarimov — mobilchi4862@gmail.com — Telegram: https://t.me/baraka_daftari