Privacy Policy

Introduction

This Privacy Policy describes how MyHutang handles your information when you use our mobile application.

Your data stays on your device. We do not transmit your personal or financial data to external servers.

Data Collection

MyHutang does not transmit, share, or track your data externally. All information you enter is stored locally on your device.

We do not collect or transmit:

• •Personal information: name, email, phone number, or address
• •Financial information: debt amounts, payment history, or transaction details
• •Device information: device ID, IP address, or location data
• •Usage analytics: app usage patterns, crash reports, or telemetry
• •Advertising data: no ads, no ad tracking, no third-party advertising

Data Storage

• •All data is stored locally on your device in an encrypted database
• •Your debt records, contacts, and payment history remain on your device
• •App settings and preferences are stored in encrypted local storage
• •No data is sent to external servers unless you enable Google Drive backup
• •If you enable Google Drive backup, encrypted backups are stored in your Google Drive
• •Uninstalling the app deletes all local data permanently

Security Measures

The app implements the following security measures to protect your data:

• •Database Encryption: SQLCipher with AES-256 encryption for all stored data
• •Cloud Backup Encryption: AES-256-GCM encryption for Google Drive backup files
• •PIN Protection: PBKDF2-SHA256 hashing with salt for PIN security
• •Biometric Lock: Optional fingerprint or face recognition for app access
• •Privacy Controls: Optional screenshot blocking and amount hiding

App Features & Privacy

The following features operate locally on your device without requiring internet access:

• •Home Screen Widget: Displays a debt summary on your home screen without transmitting data externally
• •Payment Reminders: Local notifications scheduled on your device
• •WhatsApp Reminders: Opens WhatsApp with a pre-filled message — no data sent to any server
• •Split Bill: Split expenses locally — bill data stored only on your device
• •Monthly Commitments: Recurring bills and subscriptions tracked locally — commitment data stored only on your device
• •Interest Calculations: Flat, simple, and compound interest computed locally
• •Data Export: Export to CSV or JSON files stored on your device
• •Receipts & Statements: PDF receipts and statements are generated on your device and kept in the app's private cache. A file leaves the app only when you choose to share it.
• •Receipt Photos: Photos you attach to payments are kept in the app's private storage. They go with your backup only while Include receipt photos is on: encrypted in your Google Drive on Android, in your own iCloud on iPhone.
• •Recently Deleted: Records you delete are kept on your device for 30 days so you can restore them, then removed for good. They are not included in backups.
• •Change History: Edits to a debt, such as a new amount or due date, are recorded on your device so you can see what changed. They are kept with the debt and included in your backups.
• •Payment Details: The bank details you save for yourself or a contact are stored on your device. They leave the app only on a receipt or message you choose to share.

Google Drive Backup (Optional)

MyHutang provides an optional Google Drive backup feature for data protection.

This feature is disabled by default. When enabled, the app stores encrypted backups in your Google Drive appDataFolder, a hidden folder accessible only by this application.

Backup Contents:

• •Encrypted backup files containing debt records, contacts, payments, and app settings

Backup Security:

• •All data is compressed and encrypted with AES-256-GCM before upload
• •Backups are stored in your Google Drive appDataFolder (hidden folder)
• •Only this application can access the appDataFolder
• •Backup files are not visible in your Google Drive interface

Data Usage:

• •Data is used only to provide backup and restore functionality
• •Backup data is not shared, sold, or transferred to third parties
• •The app accesses only the appDataFolder, not other Google Drive files

User Control:

• •You can switch Google accounts or sign out at any time
• •You can choose between Google Drive or local storage for backups
• •You can create, restore, or delete backups manually

Data Deletion:

Backup data in Google Drive appDataFolder persists even after uninstalling the app, allowing you to restore your data on a new device. You can delete backups manually from within the app settings, or revoke app access through your Google Account settings to remove all backup data.

Google OAuth Scopes:

When you enable Google Drive backup, the app requests the following permissions:

• •openid—Required for Google Sign-In authentication
• •.../auth/userinfo.email—To see your primary Google Account email address
• •.../auth/userinfo.profile—To see your personal info (name) for display in the app
• •drive.appdata—To store and retrieve backup files in a hidden app-specific folder. No access to other Drive files.

This app complies with the Google API Services User Data Policy, including the Limited Use requirements. Data obtained from Google APIs is used only for backup and restore functionality visible in the app interface.

Local Backup Storage

You can store backups locally on your device instead of Google Drive.

• •You can save backup files to any folder on your device
• •Local backup files are unencrypted for easy portability (.mhb format)
• •You are responsible for securing your local backup files
• •Local backups remain on your device even after uninstalling the app

Biometric Authentication

You can enable biometric authentication for app access.

• •Supports fingerprint and face recognition
• •Authentication is handled by the Android system
• •No biometric data is stored or transmitted by this app
• •The app only receives success or failure results from the system

Background Services

When automatic backups are enabled, the app schedules background tasks.

• •Backup schedule options: daily, weekly, or monthly
• •Tasks follow system battery optimization guidelines
• •Automatic backup can be enabled or disabled at any time
• •Background tasks can be cancelled from settings

Data Export

You can export your data to CSV or JSON format.

• •CSV format can be opened in spreadsheet applications
• •JSON format contains complete debt, contact, and payment data
• •You are responsible for securing exported files
• •Exported files can be read by anyone with file access

iPhone App

MyHutang for iPhone is available on the App Store. It follows the same principles as the Android app: no account, no analytics, no ads, and your records stay on your device. Where the iPhone app works differently, the points below apply.

• •Data Storage: Your records are kept in the app's private storage on your iPhone, protected by iOS Data Protection, which encrypts them with a key tied to your device passcode.
• •App Lock: Your PIN is stored only as a salted PBKDF2-SHA256 hash in the iOS Keychain. Face ID and Touch ID are handled by iOS; the app receives only success or failure.
• •iCloud Backup (Optional): Off until you back up or choose a schedule. The backup, with any receipt photos you include, is kept in the app's own iCloud Drive folder in your Apple Account. Apple encrypts it in iCloud, end to end if you turn on Advanced Data Protection. We cannot see or access it. This is the only external service the iPhone app uses.
• •Siri, Shortcuts and Spotlight: Contact names and amounts are added to your iPhone's on-device search index so Siri and Spotlight can find them. The index is emptied while App Lock is on. Nothing is sent to us.
• •Contacts and Camera: Used only when you pick a contact from your phone, or take a contact photo or a receipt photo, after iOS asks for your permission. Only what you choose is saved, in the app.
• •Widget: The home screen widget reads a summary the app shares with it on your iPhone only.
• •Apple Watch: The watch app shows a summary your iPhone sends to it directly, between your own devices. It follows App Lock and Hide Amounts, and a payment you record on the watch is sent back to your iPhone to save. The watch keeps only that summary, and nothing goes through us.
• •Backup Files: Backup files are the same on Android and iPhone, so you can move your records between them. Files you export or save yourself are not encrypted.
• •Deleting Your Data: Delete the app to remove its data from your iPhone. To delete the iCloud backup, open Settings > [your name] > iCloud > Manage Storage (or Storage) > MyHutang and delete its data.

Third-Party Services

MyHutang does not integrate third-party analytics, advertising, or tracking services.

• •No analytics services (Firebase Analytics, Google Analytics, etc.)
• •No advertising networks or ad tracking
• •No crash reporting services (Crashlytics, Sentry, etc.)
• •No social media SDKs or integrations

The only external service is Google Drive, used for optional cloud backup. This requires explicit user action to enable. Google Drive backup can be disabled at any time.

This Website

myhutang.com does not use cookies, analytics or tracking, and sends nothing about your visit to us or to third parties. Your browser keeps two small things on your own device: your light or dark theme choice, if you pick one, and your scroll position, so the back button returns you to where you were. The scroll position is cleared when you close the tab. You can clear both at any time in your browser settings.

Your Rights

You have full control over your data:

• •All data remains on your device unless you enable cloud backup
• •Uninstalling the app removes all local data
• •You can delete cloud backups from within the app
• •You can export your data at any time

Data Deletion Instructions

MyHutang is designed with privacy in mind. You have full control over your data and can delete it at any time using the following steps.

How to delete your data:

• •Local Data: To permanently delete all local debt records and settings, simply uninstall the app from your device. Alternatively, go to Android Settings > Apps > MyHutang > Storage > Clear Data.
• •Cloud Backups (Google Drive): If you have enabled Google Drive backup, you can delete your backup data by going to Settings > Data > Backup Data > Backup History > Tap the Delete (trash can) icon on your backup > Confirm deletion. You can also revoke the app's access through your Google Account Security settings.
• •Manual Request: If you need assistance or want to ensure all data associated with your Google ID is removed from the app's hidden backup folder, you can email us at asyrafhussin4@gmail.com.

Changes to This Policy

This Privacy Policy may be updated periodically. Changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

For questions about this Privacy Policy, contact us at: