This privacy policy explains how the IOU mobile app (Android package com.smronju.iou) handles your information. IOU is developed and published by Mohammad Shoriful Islam Ronju, an independent developer (“I”, “me”).
In short: everything you enter into IOU is stored in a database on your phone. IOU has no server, and I never receive or have access to your ledger, account details or attachments. The only data that leaves your device goes to Google services that IOU uses to show ads, measure how the app is used, sell the optional Remove Ads purchase and deliver app updates, as described below. None of them receive your ledger.
1. Information you enter and where it is stored
IOU stores the following in a local SQLite database inside the app’s private storage on your device:
- Your on-device account: your name, your email address and/or phone number, and your password. The password is stored only as a secure one-way hash, never in plain text. The account exists only on your device and is used to lock the app; it is not registered with any server.
- Ledger entries: the name and (optionally) the phone number of each person you lend to or borrow from, the amount, the currency, the direction (lent or borrowed), the due date and any notes.
- Repayments: amounts, dates and notes for full or partial repayments.
- Attachments: photos, videos or voice recordings you choose to attach as proof, along with their file name, type and size.
- Settings: your language, currency, theme, date format, reminder and biometric preferences.
- Purchase status: whether this device owns Remove Ads, so ads can be hidden straight away, even offline.
I do not collect, transmit, sell or share any of this information. It never leaves your device unless you choose to export it (see section 5) or Android backs it up for you (see section 6).
2. Information about other people
When you record a loan you may enter another person’s name and phone number, either by typing it or by picking it from your contacts. This information stays on your device and is used only to show it back to you, and to let you call or text that person from the app if you tap those buttons. Please only record information you have a legitimate reason to keep.
3. Device permissions
IOU asks for a permission only when you use the feature that needs it. You can refuse or revoke any permission in your device settings; only the related feature will stop working.
| Permission | Why IOU uses it |
|---|---|
| Contacts | To fill in a person’s name and phone number when you pick them from your contacts while adding an entry. IOU reads only the contact you select and does not upload your contact list. |
| Camera | To take a photo or video to attach as proof to an entry. |
| Microphone | To record a voice note to attach as proof to an entry. |
| Notifications, exact alarms | To show the daily reminder about overdue entries (on by default at 10:00 AM; you can change the time or turn it off in Settings). Reminders are scheduled and shown on your device. |
| Biometrics (fingerprint / face) | To let you unlock IOU with biometrics if you turn it on. Verification is handled entirely by your device’s operating system; IOU never receives or stores your biometric data. |
| Internet, network state | Used only by the Google services described in section 4 (ads, usage analytics, purchases and app updates). |
IOU does not access your location.
4. Third-party services
Google AdMob (advertising). IOU is free and shows banner and full-screen (interstitial) ads provided by Google AdMob. To serve, measure and limit ads and to prevent fraud, Google may collect information from your device such as your device’s advertising ID, IP address, device and app information, and how you interact with ads. Depending on your settings and location, ads may be personalized. This data goes directly to Google and is handled under Google’s Privacy Policy; see also how Google uses information from apps that use its services. You can reset or delete your advertising ID, or opt out of personalized ads, in your device’s Google / privacy settings. None of your ledger data is shared with AdMob.
Google Play In-App Updates. On Android, IOU uses Google Play’s update service to check whether a newer version is available and to let you install it. This check is handled by the Google Play Store app under Google’s Privacy Policy.
Google Analytics for Firebase (usage analytics). IOU uses Google Analytics for Firebase to understand how the app is used — for example how many people open it, how long they use it, which app version they run and how ads perform — so I can improve it. The Firebase SDK automatically records app opens, sessions and engagement time, app version, device model and Android version, language, in-app purchases (product and price) and ad impressions, together with an app instance ID created by Firebase, your advertising ID and an approximate location (country/region) derived from your IP address. Your precise location is never collected, and nothing you enter into IOU — names, phone numbers, amounts, notes or attachments — is ever sent. This data goes to Google and is handled under Google’s Privacy Policy and the Firebase privacy information. I only see aggregated reports in the Firebase and AdMob consoles, not information that identifies you. Google Analytics’ optional data-sharing settings let Google use this data for benchmarking, technical support and account-specialist help; sharing it to improve Google’s own products is turned off.
Your choices: resetting or deleting your advertising ID in your device settings stops it from being linked to past activity, and reinstalling IOU or clearing its storage creates a new app instance ID.
Google Play Billing (Remove Ads). IOU offers one optional, one-time purchase, Remove Ads, which turns off all ads. Google Play handles the payment and your payment details under the Google Payments Privacy Notice. IOU only receives confirmation of whether this device owns Remove Ads; it never sees your card or bank details.
IOU does not use any crash-reporting or other tracking SDKs beyond the services listed above.
5. Exporting and importing your data
From Settings you can export your ledger to a CSV file and share or save it wherever you choose, and import it again later, including on another phone. Exporting is always an action you take yourself; once you share or save a file, the place you send it is responsible for it.
6. Android backup
If Android backup is turned on for your device, Android may automatically include IOU’s app data in your device backup to your Google account so it can be restored on a new phone. This backup is managed by Google, not by me, and you can turn it off in your device’s system settings.
7. Keeping and deleting your data
Your data stays on your device until you delete it. You can delete your data at any time:
- Delete account in the app: go to Settings → Delete account. This permanently removes your on-device account, all entries, repayments and attachment files.
- Uninstall the app: uninstalling IOU removes its database and files from your device.
- Analytics data: Google keeps detailed analytics events for a limited time (at most 14 months) and then deletes them automatically. Reinstalling IOU or clearing its storage creates a new app instance ID; to delete analytics data tied to your current one, contact me and I will ask Google to delete it.
Because I do not hold a copy of your ledger, there is nothing for me to delete on a server. Export a backup first if you want to keep your records.
8. Security
Your data lives in IOU’s private app storage, which other apps cannot read. Your password is stored only as a hash, and you can add biometric unlock. Please also keep your phone protected with a screen lock, since anyone who can unlock your phone and the app can see your ledger.
9. Children’s privacy
IOU is not directed at children under 13, and I do not knowingly collect personal information from children.
10. Scope
This policy covers the IOU mobile app. The website and web version at iou.haaturey.com is a separate service and has its own privacy policy.
11. Changes to this policy
If this policy changes, I will update it on this page and change the effective date above. Significant changes will also be noted in the app’s release notes.
12. Contact
If you have any questions about this policy or your data, email smronju@gmail.com.