Privacy Policy

FlatFund ("we", "our", "the app") is an apartment management platform that helps residents and administrators manage maintenance billing, water billing, expenses, and community communication. This Privacy Policy explains what data we collect, why we collect it, how we store it, and your rights over it.

By using FlatFund, you agree to the practices described in this policy.

2.1 Account & Identity

• Full name
• Email address
• Phone number
• Flat number, floor, and apartment ID
• Role within the apartment (Admin, Owner, or Tenant)

2.2 Authentication

• One-time passwords (OTPs) — stored as hashed values, auto-expire in 5 minutes
• JWT access tokens — short-lived, stored in device secure storage (Android Keystore / iOS Keychain), never shared with third parties
• Refresh tokens — stored in device secure storage to maintain your session

2.3 Billing & Financial Records

• Monthly maintenance payment status (paid / unpaid, amount, due date)
• Water meter readings and calculated bill amounts
• Apartment-level expense records (e.g. security salary, generator diesel)
• UPI payment details configured by the apartment admin (display only — no payment processing happens in-app)

2.4 Notifications

• Firebase Cloud Messaging (FCM) tokens — used to deliver push notifications to your device
• Notification preferences — your opt-in/opt-out settings per notification type

2.5 Media & Uploads

• Profile photo (optional) — uploaded by you via camera or gallery, stored on our own file server (flatfund-storage.nulltheory.in)
• Water meter reading photos — uploaded by admin
• Expense receipt photos — uploaded by admin

2.6 Community Directory

Resident names, phone numbers, and profile photo URLs are cached locally on your device to enable the community directory feature. This is personal data of your fellow residents and is used solely within the app.

2.7 Device & Usage

• Device integrity tokens — verified via Google Play Integrity API to confirm the app is genuine and unmodified. The token is verified server-side and not stored.
• Anonymous app usage events via Firebase Analytics (see Section 4) — no personally identifiable information is included
• Crash reports via Firebase Crashlytics — includes stack traces, device model, OS version, and app version. No personal data is attached.
• IP address and basic request metadata — retained temporarily in server logs for security and debugging

2.8 On-Device Storage

The app stores the following data locally on your device:

Encrypted (Android Keystore / iOS Keychain):

• JWT access token and refresh token

App preferences (shared preferences):

• User ID, role, flat details, apartment details, email, phone number, login state, theme preference, FCM token

Offline cache (SQLite):

• Billing summaries, payment history, maintenance and water records, expense records, security contact, community directory (floor/flat structure, resident names, phone numbers, profile photo URLs)
• All cached data originates from our own backend and is cleared on logout

FlatFund uses Firebase Analytics to track anonymous in-app events. No user identity (setUserId) is set — all events are device-level and contain no personally identifiable information.

Events tracked include: login, logout, tab navigation, admin billing actions (dues generation, water reading updates, expense logging), resident directory interactions, and notification screen views.

FlatFund uses the following third-party services to operate:

Each of these services operates under their own privacy policies.

You have the right to request deletion of your account and associated personal data.

How to request

• Use the "Delete My Account" option within the app, or
• Submit a request via the data deletion form at the link provided in your app store listing

What happens

• Your request is logged with a 30-day processing window (as required by Google Play)
• After 30 days, your user record, FCM tokens, notification preferences, OTP records, and refresh tokens are permanently deleted
• Billing history records associated with your flat may be retained for apartment administrative purposes

• All data is transmitted over HTTPS (TLS)
• OTPs are stored as one-way hashes (SHA-256) — we cannot recover the original code
• JWT tokens are stored in device secure storage (Android Keystore / iOS Keychain) and signed server-side
• Biometric authentication (if enabled) uses Android BiometricPrompt / iOS LocalAuthentication — biometric data never leaves your device OS; the app only receives a pass/fail result
• Database access is restricted to the application server only
• File storage is access-controlled and not publicly listable

FlatFund is designed for use by apartment residents and administrators. We do not knowingly collect data from children under 13. If you believe a child has submitted personal information, contact us at team.nulltheory@gmail.com.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information (via profile settings or by contacting us)
• Delete your account and personal data (see Section 8)
• Object to processing — contact us and we will review your request

We may update this policy from time to time. Significant changes will be communicated via in-app notification or email. Continued use of the app after changes constitutes acceptance.