Privacy policy

1. Data we collect

Qəpik stores only what the app needs in order to work:

• —Account data: the name, email address and unique user identifier provided when you sign in with Google or Apple.
• —Expense entries: the amount, currency, category, date and note you type in yourself.
• —Budget setting: the monthly limit you choose.
• —Notification token: a device token used to deliver general announcements.

2. Data we do not collect

The app contains no analytics or behavioural tracking package. No ad network is integrated. We do not read your location, contacts, photo library, address book or device identifiers. There is no connection to your bank account, card or payment history — you enter every amount by hand.

3. Where data is stored

Entries are written first to a local database on your device (Hive), then synced to Google Firebase (Cloud Firestore and Firebase Authentication) under your own account. Firestore rules scope every document to its owner, so no other user can read your entries.

The app works fully without a connection; entries stay on the device and are sent once you're back online.

4. Third-party services

Qəpik relies on these services and no others:

• —Google Firebase — authentication, data sync and notification delivery.
• —Google Sign-In and Apple Sign-In — sign-in itself. We store no passwords, because there is no email/password sign-in at all.
• —cbar.az — the Central Bank's public daily exchange rate feed. That request is anonymous; no user data is sent with it.

5. Notifications

The only notification channel is a general announcement topic (Firebase Cloud Messaging, "all_users"), which means every message we send goes to everyone identically. Nothing is triggered by your spending, your budget or your behaviour — doing that would require processing your data, and we don't.

6. Deleting your data

You can delete your account from inside the app. Deletion is complete and irreversible; all of the following happen:

• —Your Firestore user document is deleted.
• —All subcollections (expenses, settings) are deleted.
• —The local Hive database on the device is cleared.
• —Your Firebase Authentication account is deleted.

7. Children

Qəpik is not intended for people under 13, and we do not knowingly collect data from them.

8. Changes

When this policy changes, the "last updated" date on this page changes with it. Significant changes are announced through the app's general announcement channel.

9. Contact

For privacy questions or a data deletion request: kafandi.dev@gmail.com