Privacy Policy

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how No Riba ("Noriba") collects, uses, and protects your information when you use our mobile app and web services at noriba.in to track interest-free finances, manage trust records (Qard Hasan), and identify ribā.

Account Information: When you sign in, we collect your email address via Firebase Authentication (Google sign-in or email/password) to manage your account and sync your data. We never collect bank passwords or net-banking credentials.

Trust Records (Informal Loans): When you track personal loans (Qard Hasan), we store the record details you enter: counterparty name, amount, due date, category, notes, and repayment history.

Agreement Links & Phone Numbers: If you create a shareable agreement link (noriba.in/a/:token), we collect the counterparty's mobile phone number to secure the record. The recipient must verify their phone number to unlock and confirm the agreement terms. We record the verified phone number, recipient name, and confirmation timestamp.

Statement PDFs: Statement PDFs you upload are processed directly on your device to detect interest amounts. Your PDF files are never uploaded to our servers for extraction or storage.

Extracted Statement Summaries: We store only the resulting metadata: bank name, interest date, extracted interest amount, and paid or unpaid status so you can track your progress over time.

Optional PDF Passwords: If you choose to save statement open passwords, they are encrypted on your device before being synced. We do not store plaintext PDF passwords on our servers.

Optional Email Statement Access: If you optionally connect your Google account to view e-statements, we access only relevant bank statement emails with read-only permissions. We do not read personal correspondence.

Due Date Reminders: If you enable reminders, notification permissions are used strictly to schedule local reminders on your device for upcoming debt due dates.

We use your information simply and transparently to:

• Authenticate your account and sync your records across your devices • Store and organize your Trust Records, repayments, and ribā summaries • Secure and authenticate mutual agreement links via phone verification • Schedule local device reminders for upcoming due dates • Process statement PDFs locally on your device • Support, maintain, and improve the app

We use industry-standard security measures, including HTTPS encryption, Firebase Authentication, on-device statement processing, client-side password encryption, and phone verification gates for shared agreements. While no method of electronic transmission is 100% secure, we design every feature to minimize data exposure.

We do not sell, rent, or monetize your personal information. We do not share your financial records with advertisers or third parties. When you share an agreement link, only the recipient who verifies the authorized mobile phone number can access the agreement details. Service providers (such as Firebase for hosting and authentication) only process data necessary to operate the application.

You have full control over your data. You can delete individual trust records, statement summaries, or saved PDF passwords at any time. You can permanently delete your entire account and all associated data directly from Account Settings.

You can sign out at any time, toggle notification permissions in your device settings, manage connected email permissions in your Google security settings, or export and delete your data from within the app.

No Riba is intended for adults aged 18 and older. We do not knowingly collect information from minors.

We may update this Privacy Policy as we introduce new features. When we do, we will update the "Last Updated" date. Continued use of the app signifies acceptance of any updates.

If you have questions or concerns about this Privacy Policy, please contact us at: