Privacy policy

1. Who operates Bahagi

Bahagi is operated by Llenard Carl T. Alcayna in Ifugao, Philippines. Contact supportbahagi@gmail.com for privacy questions or requests.

2. Information you provide

Account information includes your name, email, optional username and profile photo. Firebase Authentication manages sign-in credentials. If you choose Google or Facebook sign-in, that provider authenticates you and supplies the account information you authorize.

We store groups, membership, bills, shares, balances, repayment requests, confirmations, references and receipts you choose to provide. Optional payment details can include GCash or Maya numbers, bank name, account holder and account number. These are stored to help group members identify where to repay you. They do not connect your bank or wallet to Bahagi.

We store chat messages, images, voice notes, group photos, reminders, notification preferences, blocked-user choices and abuse reports. Only upload information you have the right to share.

3. Device information and permissions

Push tokens identify app installations for notifications. Service providers process technical information such as network addresses, device/app information and security or delivery logs to operate their services. Camera and microphone permissions are requested for scanning, photos and voice notes. You can deny or change these permissions in your device settings. Receipt text recognition runs on the device; a receipt image is uploaded only when you attach it to a repayment. Bahagi disables Facebook automatic app-event logging and advertising ID collection and does not use your data for advertising.

4. Who can see your information

Current group members can see shared bills, balances, repayments, group messages and payment details you provide for that group. Your sign-in password and private profile document are not shared with group members. Account lookup can reveal your display name to someone who already knows your registered email or username. Community posts and their displayed author identity are visible to signed-in Bahagi users. Notifications can show message or bill details on a device’s lock screen, depending on its settings. Media is delivered using provider-hosted URLs; anyone who receives a media link may be able to view it. Group data is not end-to-end encrypted.

5. Why we use data and our providers

We use data to sign you in, split bills, preserve payment history, deliver notifications, prevent duplicate or unauthorized changes, handle reports and answer support requests. We do not sell personal data.

Google Firebase provides authentication, database storage and push messaging. Google and Meta/Facebook provide their respective optional sign-in services. Cloudflare processes financial-change authorization, notification delivery and privacy-support services; its queues store the references needed to perform those tasks. Cloudinary stores and delivers uploaded images and voice notes. Opening a bank or wallet app hands control to that provider and its own policy. Service providers may process information outside your country.

6. Money and payment credentials

Bahagi records payments that users report and confirm. It does not hold, send or collect money and cannot verify a transfer directly with a bank or wallet. We do not ask for wallet passwords, bank passwords, card security codes, PINs or one-time authentication codes. Do not include them in messages, receipts or support requests.

7. Retention and deletion

Profile and app data are kept while needed to provide the service. Use Profile > Security & privacy > Delete account for self-service deletion. Self-service requires settled incoming and outgoing balances to protect other members’ records. You can request deletion through support even if you cannot complete that step.

Deleting your account removes your sign-in, private profile, payment details shared with groups, and your public Community messages. Shared bills, confirmed payments and group history may remain so other members keep an accurate record. Media removal can take additional time while provider cleanup is completed.

Shared financial history is retained while the group needs it to account for bills and repayments. You may request removal or de-identification of personal information from retained records. Support will explain any specific retention needed for a dispute, fraud prevention or a legal obligation. Reports and support evidence are retained only as needed to handle the issue and applicable obligations. Provider caches and backups may expire later than the live record. Copies downloaded or saved by other users are outside Bahagi’s control.

If a balance, sign-in problem or another issue prevents deletion, you can still request account or data deletion from support. Email supportbahagi@gmail.com from your registered email when possible. We will verify ownership and explain any records that must be retained. Never send your password, PIN or one-time code.

8. Your choices and requests

You can edit your profile and payment details, change notification preferences, block chat users, and request access, correction or deletion of your information. The public deletion-request instructions are available at https://bahagi-notify-poc.llenardcarl0826.workers.dev/delete-account without requiring the app. Contact supportbahagi@gmail.com. Requests require appropriate ownership verification; we will not ask for your password or payment credentials.

9. Age and policy changes

Bahagi is intended for adults aged 18 and over. Contact support if you believe a child’s information has been provided. Material policy changes are published with an updated date in the app and on the public privacy page.