Privacy Policy

Effective Date: September 1, 2026  |  Last Modified: October 8, 2026

This Privacy Policy applies to the mobile application صندوق العمارة (Sandooq El-Amara), package name com.amrem.sandooqelamara (hereinafter referred to as the "Application" or "App"), developed and published by Amr Emam ("we", "our", or "us").

We are committed to safeguarding your privacy and protecting the financial and administrative data of your residential building. This Privacy Policy comprehensively discloses how our Application collects, uses, stores, and protects user data, as well as your rights regarding data retention and permanent deletion in compliance with Google Play Developer Policies and global privacy standards.

1. Information We Collect

Depending on how you use the Application, we may collect or process the following categories of information:

• User Account Information: Your email address and optional display name when you register or log in using Google Sign-In or Firebase Authentication. This is used solely to authenticate your identity and synchronize your building data across authorized devices.
• Property & Building Management Data: Information entered by you as a building manager, treasurer, or property owner. This includes apartment/unit numbers, resident/tenant names, optional phone numbers, monthly maintenance subscription rates, dates of occupancy, and notes.
• Financial & Accounting Records: Records of monthly maintenance fee collections, expense disbursements, receipts, custody balances, special maintenance projects, mosque fund contributions, and treasury accounts (cash, bank, electronic wallets).
• Technical & Diagnostic Data: Anonymized diagnostic logs, app performance metrics, and crash stack traces collected automatically via Firebase Crashlytics to resolve bugs, optimize stability, and improve user experience.

2. Device Permissions & Specific Purposes

The Application requests explicit device permissions only when strictly necessary to deliver specific user-requested features. Below is the detailed breakdown of declared permissions and their purpose:

• RECORD_AUDIO — Microphone / Speech Recognition:
  Used solely on-demand when you interact with the built-in smart assistant ("Uncle Amin" / عم أمين) via voice commands. Audio input is captured only while the microphone button is pressed, converted into text for query processing, and is never recorded in the background, never stored permanently on our servers, and never shared or sold.
• READ_EXTERNAL_STORAGE / WRITE_EXTERNAL_STORAGE — Storage & Documents:
  Used exclusively on compatible Android versions to save exported PDF financial statements, Excel (.xlsx) accounting spreadsheets, and payment receipt images to your device's download folder so you can print them or share them with residents via WhatsApp or email.
• POST_NOTIFICATIONS — Notifications:
  Used to deliver timely reminders regarding monthly maintenance collection due dates, automated daily/nightly cloud backup confirmations, and critical administrative announcements.
• USE_BIOMETRIC / USE_FINGERPRINT — Biometric Authentication:
  Used strictly for the optional on-device app lock feature. Biometric authentication is handled entirely by Android's BiometricPrompt framework. We do not have access to, nor do we store, your biometric identifiers or fingerprint data.
• BILLING — Google Play In-App Purchases:
  Used to facilitate optional premium feature subscriptions and annual licenses. All financial transactions and payment card processing are securely executed by Google Play. We never collect, process, or store your credit card or banking details.
• REQUEST_IGNORE_BATTERY_OPTIMIZATIONS — Scheduled Cloud Backups:
  Optionally requested to ensure scheduled automated nightly cloud backups run reliably without being terminated by device battery saver protocols.

3. How We Use Your Information

We use the collected information strictly for legitimate operational purposes:

• To calculate monthly maintenance fees, arrears, and cumulative balances automatically.
• To generate professional Arabic financial reports, debt lists, and digital payment vouchers.
• To provide encrypted cloud synchronization and disaster recovery backups via Google Firebase.
• To deliver responsive customer support and troubleshoot reported issues.

4. Third-Party Services & SDKs

To provide secure cloud infrastructure and error monitoring, the Application incorporates industry-standard SDKs provided by Google. Each third party handles data under its own privacy policy:

• Google Firebase Authentication: Provides secure account registration and token validation. (Google Privacy Policy)
• Google Cloud Firestore & Firebase Storage: Stores encrypted building databases and attached expense invoice photos in secure cloud storage.
• Firebase Cloud Messaging (FCM): Dispatches administrative push notifications.
• Firebase Crashlytics: Collects anonymized crash logs and device metrics to detect and resolve crashes.
• Google Play In-App Billing: Processes digital subscription purchases.

5. Data Sharing & Strict Zero-Sale Policy

Your data is strictly yours. It is accessed solely by you and authorized users with whom you intentionally share exported reports. We do not access your private financial records except when explicitly requested by you for technical support.

6. Data Retention & Permanent Account Deletion

We retain your data only for as long as your account remains active. In full compliance with Google Play's User Data & Account Deletion policies, you have complete authority to delete your data at any time:

• Instant In-App Deletion: Open the Application → Tap your Profile icon at the top → Open Settings & Backup (الإعدادات والنسخ الاحتياطي) → Scroll down to the Danger Zone (منطقة الخطر) → Select Delete Account Completely (حذف الحساب بالكامل). Confirming this action immediately and irreversibly wipes your account credentials and all cloud databases.
• Web Deletion Portal: You can request complete account and data removal online through our dedicated webpage:
  https://sandoqalemara.com/delete-account.html
• Direct Email Request: Send an email from your registered account to amr@sandoqalemara.com with the subject "Account Deletion Request". We will permanently erase all associated cloud data within 24 to 48 hours and send you a confirmation.

7. Data Security Safeguards

We employ robust technical and organizational security measures to protect your information against unauthorized access, loss, or alteration. All communication between the Application and cloud databases uses industry-standard HTTPS/TLS encryption. Cloud assets are protected by rigorous Firebase Security Rules ensuring that each user can only read and write their own data.

8. Children's Privacy

The Application is designed exclusively for adult property managers, treasurers, and homeowners (aged 18 and above). We do not knowingly collect or solicit any personal information from children under the age of 13 (or under 16 in applicable jurisdictions). If we become aware that personal information from a child has been collected, we will take immediate steps to delete that data from our servers.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect new features or regulatory requirements. Any modifications will be posted directly to this URL (https://sandoqalemara.com/privacy.html) with an updated "Last Modified" date. We encourage you to review this page regularly.

10. Contact Us & Developer Information