Privacy Policy

Introduction

This Privacy Policy describes how MyHutang handles your information when you use our mobile application.

Your data stays on your device. We do not transmit your personal or financial data to external servers.

Data Collection

MyHutang does not transmit, share, or track your data externally. All information you enter is stored locally on your device.

We do not collect or transmit:

• •Personal information: name, email, phone number, or address
• •Financial information: debt amounts, payment history, or transaction details
• •Device information: device ID, IP address, or location data
• •Usage analytics: app usage patterns, crash reports, or telemetry
• •Advertising data: no ads, no ad tracking, no third-party advertising

Data Storage

• •All data is stored locally on your device in an encrypted database
• •Your debt records, contacts, and payment history remain on your device
• •App settings and preferences are stored in encrypted local storage
• •No data is sent to external servers unless you enable Google Drive backup
• •If you enable Google Drive backup, encrypted backups are stored in your Google Drive
• •Uninstalling the app deletes all local data permanently

Security Measures

The app implements the following security measures to protect your data:

• •Database Encryption: SQLCipher with AES-256 encryption for all stored data
• •Cloud Backup Encryption: AES-256-GCM encryption for Google Drive backup files
• •PIN Protection: PBKDF2-SHA256 hashing with salt for PIN security
• •Biometric Lock: Optional fingerprint or face recognition for app access
• •Privacy Controls: Optional screenshot blocking and amount hiding

App Features & Privacy

The following features operate locally on your device without requiring internet access:

• •Home Screen Widget: Displays a debt summary on your home screen without transmitting data externally
• •Payment Reminders: Local notifications scheduled on your device
• •WhatsApp Reminders: Opens WhatsApp with a pre-filled message — no data sent to any server
• •Split Bill: Split expenses locally — bill data stored only on your device
• •Monthly Commitments: Recurring bills and subscriptions tracked locally — commitment data stored only on your device
• •Interest Calculations: Flat, simple, and compound interest computed locally
• •Data Export: Export to CSV or JSON files stored on your device
• •Receipts & Statements: PDF receipts and statements are generated on your device and kept in the app's private cache. A file leaves the app only when you choose to share it.

Google Drive Backup (Optional)

MyHutang provides an optional Google Drive backup feature for data protection.

This feature is disabled by default. When enabled, the app stores encrypted backups in your Google Drive appDataFolder, a hidden folder accessible only by this application.

Backup Contents:

• •Encrypted backup files containing debt records, contacts, payments, and app settings

Backup Security:

• •All data is compressed and encrypted with AES-256-GCM before upload
• •Backups are stored in your Google Drive appDataFolder (hidden folder)
• •Only this application can access the appDataFolder
• •Backup files are not visible in your Google Drive interface

Data Usage:

• •Data is used only to provide backup and restore functionality
• •Backup data is not shared, sold, or transferred to third parties
• •The app accesses only the appDataFolder, not other Google Drive files

User Control:

• •You can switch Google accounts or sign out at any time
• •You can choose between Google Drive or local storage for backups
• •You can create, restore, or delete backups manually

Data Deletion:

Backup data in Google Drive appDataFolder persists even after uninstalling the app, allowing you to restore your data on a new device. You can delete backups manually from within the app settings, or revoke app access through your Google Account settings to remove all backup data.

Google OAuth Scopes:

When you enable Google Drive backup, the app requests the following permissions:

• •openid—Required for Google Sign-In authentication
• •.../auth/userinfo.email—To see your primary Google Account email address
• •.../auth/userinfo.profile—To see your personal info (name) for display in the app
• •drive.appdata—To store and retrieve backup files in a hidden app-specific folder. No access to other Drive files.

This app complies with the Google API Services User Data Policy, including the Limited Use requirements. Data obtained from Google APIs is used only for backup and restore functionality visible in the app interface.

Local Backup Storage

You can store backups locally on your device instead of Google Drive.

• •You can save backup files to any folder on your device
• •Local backup files are unencrypted for easy portability (.mhb format)
• •You are responsible for securing your local backup files
• •Local backups remain on your device even after uninstalling the app

Biometric Authentication

You can enable biometric authentication for app access.

• •Supports fingerprint and face recognition
• •Authentication is handled by the Android system
• •No biometric data is stored or transmitted by this app
• •The app only receives success or failure results from the system

Background Services

When automatic backups are enabled, the app schedules background tasks.

• •Backup schedule options: daily, weekly, or monthly
• •Tasks follow system battery optimization guidelines
• •Automatic backup can be enabled or disabled at any time
• •Background tasks can be cancelled from settings

Data Export

You can export your data to CSV or JSON format.

• •CSV format can be opened in spreadsheet applications
• •JSON format contains complete debt, contact, and payment data
• •You are responsible for securing exported files
• •Exported files can be read by anyone with file access

Third-Party Services

MyHutang does not integrate third-party analytics, advertising, or tracking services.

• •No analytics services (Firebase Analytics, Google Analytics, etc.)
• •No advertising networks or ad tracking
• •No crash reporting services (Crashlytics, Sentry, etc.)
• •No social media SDKs or integrations

The only external service is Google Drive, used for optional cloud backup. This requires explicit user action to enable. Google Drive backup can be disabled at any time.

Your Rights

You have full control over your data:

• •All data remains on your device unless you enable cloud backup
• •Uninstalling the app removes all local data
• •You can delete cloud backups from within the app
• •You can export your data at any time

Data Deletion Instructions

MyHutang is designed with privacy in mind. You have full control over your data and can delete it at any time using the following steps.

How to delete your data:

• •Local Data: To permanently delete all local debt records and settings, simply uninstall the app from your device. Alternatively, go to Android Settings > Apps > MyHutang > Storage > Clear Data.
• •Cloud Backups (Google Drive): If you have enabled Google Drive backup, you can delete your backup data by going to Settings > Data > Backup Data > Backup History > Tap the Delete (trash can) icon on your backup > Confirm deletion. You can also revoke the app's access through your Google Account Security settings.
• •Manual Request: If you need assistance or want to ensure all data associated with your Google ID is removed from the app's hidden backup folder, you can email us at asyrafhussin4@gmail.com.

Changes to This Policy

This Privacy Policy may be updated periodically. Changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

For questions about this Privacy Policy, contact us at:

Email: asyrafhussin4@gmail.com