Privacy Policy for OwePay
Effective Date: August 24, 2026
Alferid Hassen ("we", "us", or "our") operates the OwePay mobile application (the "App"). We are committed to protecting your privacy. This Privacy Policy explains our data collection, use, and disclosure practices. Please also review our Terms of Service.
1. Nature of the App
OwePay is a personal financial utility and record-keeping tool designed to help individuals manually track personal debts, loans among acquaintances, and repayment deadlines. OwePay is not a bank, credit provider, money transmitter, or lending institution. The app does not facilitate actual money transfers, process monetary payments, or offer financial credit.
2. Data Collection and Storage
OwePay is built with a "Local-First" and "Privacy-First" architecture:
- Local Storage: By default, all financial records, transaction histories, debtor names, and notes are stored exclusively on your device.
- Database Encryption: Your local database is protected using SQLCipher (AES-256 military-grade encryption).
- Analytics: We use Google Firebase Analytics to collect aggregated, non-personally identifiable diagnostic and usage data (e.g., screen views, feature interactions) to improve app stability and user experience. No personal financial records (debtor names, transaction amounts, or personal notes) are ever transmitted to analytics services.
3. Notifications & Device Permissions
- Push Notifications & Reminders: OwePay uses Firebase Cloud Messaging (FCM) and Android exact alarm scheduling to provide return-date reminders and payment alerts that you configure. FCM tokens are used solely to deliver notifications to your device.
- Contacts Permission: The App may request read access to your device's contacts solely to allow you to easily select and auto-fill debtor names. Contact data is processed exclusively on your device and is never uploaded, stored, or transmitted to any external server.
- Biometrics and PIN: To prevent unauthorized local access, OwePay provides 4-digit PIN protection and optional biometric authentication (Fingerprint / Face ID). Your PIN is stored in your device's secure hardware keystore, and biometric verification is handled natively by the operating system. We never access or store biometric data.
4. Third-Party Advertising (Unity Ads)
To support continuous development and offer free access to premium utilities (such as spreadsheet export and ad-free access passes), OwePay displays advertisements through Unity Ads (Unity Technologies SF).
- Data Collected by Ad Partners: Unity Ads may automatically collect device identifiers, including the Google Advertising ID (AAID), IP address, device model, operating system version, and ad interaction metrics to deliver relevant advertisements and prevent fraudulent traffic.
- Privacy Policy: To learn more about how Unity Technologies processes information, please review the Unity Game Player and App User Privacy Policy.
5. Optional Cloud Backup & Account Management (Supabase)
You may optionally choose to enable Cloud Backups to synchronize data across devices or prevent data loss. If you use this feature:
- Account Data: We collect your email address solely for authentication and account recovery. Passwords are encrypted and managed securely via Supabase Auth; we never have access to your plaintext password.
- Cloud Storage: Your backup snapshot is transmitted securely using HTTPS/TLS encryption and stored on secure cloud database servers tied to your account.
6. Data Retention and Account Deletion
You maintain full control over your data at all times:
- Local Data Deletion: You can instantly delete all local records, debts, and history at any time using the "Wipe All Data" button in the Settings screen.
- Cloud Account & Data Deletion: If you have created a cloud backup account and wish to permanently delete your account and all associated cloud data, you can submit a deletion request by emailing us at mrferidhassen@gmail.com with the subject "Account Deletion Request". We will permanently erase your account and all stored records within 30 days.
7. Children's Privacy
OwePay is intended for a general audience and is not directed to children under the age of 13. We do not knowingly collect or solicit personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information immediately.
8. Changes to This Privacy Policy
We may update our Privacy Policy periodically. Any updates will be published on this page with a revised effective date.
9. Contact Us
If you have any questions, feedback, or data privacy requests, please reach out to us: