PRIVACY POLICY FOR MESS MANAGER Effective Date: October 10, 2026 Last Updated: October 10, 2026 Welcome to Mess Manager ("we," "our," or "us"). We provide an all-in-one mobile platform designed to assist shared living spaces, hostels, and bachelor accommodations in managing meal tracking, shared grocery expenses, member deposits, mess accounting, as well as rental listings (To-Let finder) and bachelor essentials store orders. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application (the "App"). By downloading, accessing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. 1. INFORMATION WE COLLECT We collect information directly from you when you use our App, as well as device and operational data necessary to deliver our features. A. Account Information Registration & Profile: When creating an account or updating your profile, we collect your Full Name, Email Address, optional Phone Number, and password (securely handled and salted/hashed via Google Firebase Authentication). Guest Access: If you use the App in guest or browsing mode (e.g., viewing public rental posts or store items), you can browse without an account. Certain actions (posting rentals, placing orders, joining a mess) require registration. B. Mess & Financial Management Data Data entered by mess managers and members to perform mess accounting: Daily meal records and meal allocations (breakfast, lunch, dinner) Shared grocery expense logs (items, costs, dates, assigned purchasers) Member deposit logs and balance accounting sheets Mess membership, roles, and administrative records C. Rental & To-Let Listings (Bachelor Finder) When creating or browsing rental advertisements: Listing Details: Listing title, detailed description, rental and security deposit amounts, utilities/bills included, available date, gender preferences, and category (e.g., seat, single room, sublet, flat). Location Data: Address, city, division, and map pin coordinates (latitude/longitude) provided by you to display property locations on in-app maps. Contact Information: Contact phone numbers and optional WhatsApp numbers provided by property posters to facilitate prospective tenant inquiries. Uploaded Images: Photos of rental rooms or flats uploaded by users (stored securely on Google Firebase Storage). In-App Messaging & Inquiries: Inquiry messages, chat timestamps, and communication between rental posters and interested renters. D. Bachelor Store & Orders When ordering essentials through the in-app Bachelor Store: Order & Delivery Details: Customer name, recipient phone number, shipping address, and optional delivery notes. Payment Information: Selected payment method (e.g., Cash on Delivery, Mobile Financial Services like bKash/Nagad), payment status, and optional transaction reference IDs (trxId) submitted for manual payment verification. We do not store bank account passwords, debit/credit card CVVs, or payment PINs. Order History: Purchased items, pricing, quantities, delivery status, and courier tracking details. E. User Feedback & Support When submitting in-app feedback or bug reports, we collect your feedback category, star rating, feedback text, user identifier, and optional contact info to resolve inquiries and improve app stability. F. Device, Permissions & Third-Party Identifiers Camera Access (QR Scanner & Photo Capture): Used with your permission solely to scan mess invitation QR codes or to take photos for rental listings. Camera frames for QR scanning are processed entirely on-device and are never saved or sent to any server. Photo Library / Storage Access: Used solely when you choose to upload rental pictures from your device gallery. Analytics & Crash Diagnostics: We use Google Firebase Analytics and Firebase Crashlytics to monitor application performance, crash diagnostics, feature usage, and technical crash logs (such as OS version, device model, and crash stack traces). Advertising Identifiers (Google AdMob): We serve in-app advertisements via Google AdMob. AdMob may collect device advertising IDs (e.g., Google Advertising ID / IDFA), IP addresses, and interaction metrics to serve contextual or personalized advertisements. 2. THIRD-PARTY SERVICES We partner with established third-party service providers that adhere to rigorous data security and privacy regulations: Google Firebase (Authentication, Cloud Firestore, Firebase Storage): Used for authentication, cloud database records, and secure media storage. Privacy Policy: https://policies.google.com/privacy Google Firebase Analytics & Crashlytics: Used to detect bugs, monitor stability, and understand aggregate app usage patterns. Privacy Policy: https://firebase.google.com/support/privacy Google Mobile Ads / AdMob: Used to display banner, interstitial, and rewarded advertisements within the App. Privacy Policy: https://policies.google.com/technologies/ads OpenStreetMap / Leaflet (flutter_map): Used to render map tiles and pin markers for rental listing locations. Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy 3. HOW WE USE YOUR INFORMATION We use the collected data strictly to: Calculate meal rates, individual member expenditures, balance sheets, and mess operational ledgers. Publish, search, filter, and display bachelor rental listings and map locations. Facilitate communication between renters and property posters. Process, fulfill, ship, and verify orders placed on the Bachelor Store. Authenticate user accounts, manage security, and prevent fraudulent transactions or abusive posts. Track app stability, resolve bugs, and monitor crash reports via Crashlytics. Display contextual and relevant in-app advertisements via Google AdMob. Maintain transparency and audit trails for mess financial operations. 4. DATA SHARING AND DISCLOSURE We do NOT sell, rent, or trade your personal information to third parties or data brokers. Your data is shared only in the following specific circumstances: Within Your Mess: Members and managers of the same mess can view member names, meal records, and deposit history for accounting transparency. Public Rental Listings: When you publish a rental posting, the listing description, images, location area, map pin, and provided contact numbers are visible to app users seeking accommodation. Store Logistics & Delivery: Customer delivery details (name, shipping address, contact phone) are shared with delivery personnel or third-party courier services solely to deliver ordered items. Service Providers: Technical data is shared with Google Cloud / Firebase and Google AdMob strictly for cloud infrastructure, crash reporting, and ad delivery. Legal Requirements: We may disclose information if required to do so by applicable law, court summons, regulation, or lawful requests by public authorities. 5. ACCOUNT AND DATA DELETION You retain control over your personal data and can delete your account at any time directly within the App: How to Delete Your Account: Open the Mess Manager App. From the Home Hub or profile section, open your Profile Menu (or tap your profile avatar / options menu). Tap "Delete Account" and confirm your decision. What Happens Upon Deletion: Authentication & Profile: Your Firebase Authentication login record, profile document (name, email, phone), and credentials are permanently and irreversibly removed. Rental Listings & Chats: Your personal active listings and direct inquiries are removed or detached from your profile. Shared Mess Financial Records: To maintain financial and accounting integrity for remaining mess members, historical group transactions (such as shared grocery bills and collective meal totals) are retained in anonymized form. If you face any issues deleting your account directly through the App, you may contact us at asadouzzaman@gmail.com with the subject line "Account Deletion Request", and we will manually process your deletion request within 7 business days. 6. DATA SECURITY We enforce robust industry-standard administrative, physical, and technical safeguards—including TLS/HTTPS encryption in transit, Firebase security rules with role-based authorization, and restricted database permissions—to safeguard your data against unauthorized access, alteration, or disclosure. 7. CHILDREN'S PRIVACY Our App is targeted towards university students, professionals, and adults living in hostels or shared accommodations, and is not directed at children under the age of 13. We do not knowingly collect personal identifiable information from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately, and we will promptly delete such records. 8. CHANGES TO THIS PRIVACY POLICY We may revise this Privacy Policy periodically to reflect changes in our services, applicable laws, or app features. The revised policy will be posted within the App and will feature an updated "Last Updated" date. Continued use of the App following any updates signifies acceptance of the revised terms. 9. CONTACT US If you have questions, inquiries, feedback, or data privacy requests regarding this Privacy Policy, please contact: Developer / Publisher: Asaduzzaman Email: asadouzzaman@gmail.com Country: Bangladesh