Privacy Policy.

1. Publisher and data controller

Sandouq is an Android app published by an independent developer:

• Publisher: Sandouq, an independent publisher based in Morocco
• Country: Morocco
• Location: Casablanca, Morocco — full postal address available on request at [email protected]
• Contact email: [email protected]

Within the meaning of the EU General Data Protection Regulation (GDPR, EU 2016/679) and applicable Moroccan personal data protection law, Sandouq acts as the data controller for the limited technical data that transits through the third-party services described below. The legal identity of the data controller can be provided on request at [email protected] for the exercise of your rights.

2. Scope of this policy

This policy covers: (a) the Sandouq Android app distributed through app stores, and (b) the sandouq.app website, including its legal pages, Premium pricing page, and Nisab calculator.

3. Android permissions used by the app

The app declares the following permissions in its Android manifest. Each one is listed here transparently, with its purpose and opt-in status. All data captured or produced via these permissions is stored locally on your device and is never transmitted to any server.

• CAMERA — take a photo of a receipt to attach to a transaction. The photo is saved locally to Paths.document/tx-photos/ on your device. Triggered only on your explicit action (the "Take a photo" button). Never transmitted.
• READ_MEDIA_IMAGES (Android 13+) — pick an existing image from your gallery to attach to a transaction. Same guarantees: stored locally, never transmitted.
• POST_NOTIFICATIONS — local reminders for: recurring transactions (bills, rent), start of the Hijri month, Zakat anniversary. Opt-in: you choose to enable each reminder type. These are local notifications scheduled by your phone, never push messages from a server.
• USE_BIOMETRIC / USE_FINGERPRINT — optional app lock via fingerprint or Face Unlock, through the standard Android API (expo-local-authentication). Biometric data never leaves your device; the app only receives a binary "authenticated / not authenticated" signal from Android. Opt-in.
• RECEIVE_BOOT_COMPLETED + WAKE_LOCK — standard Android permissions required to re-schedule your local reminders after a phone restart. No network activity involved.
• VIBRATE — light haptic feedback on specific interactions (amount confirmation, budget alert).
• INTERNET — standard runtime permission required by React Native / Expo. In practice, the app opens a network connection only in four cases: (a) refreshing gold/silver prices for the Zakat calculation, if you allow it, (b) anonymous crash reports to Sentry only if you've explicitly turned the option on, (c) opening an external link (this legal page, for example) in your browser via Linking.openURL, (d) once Sandouq Premium becomes available, verifying your Premium status via secure sign-in (Premium users only, after purchase on sandouq.app/en/pricing).
• READ_EXTERNAL_STORAGE / WRITE_EXTERNAL_STORAGE — standard permissions to export your data as CSV/JSON to the folder of your choice and to restore a manual backup file.

Sandouq does not request: contacts, GPS location, microphone, SMS, phone calls, calendar, or any advertising identifier.

4. Data we do not collect

Sandouq has no application server. We do not collect or store server-side:

• None of your transactions, accounts, categories, budgets, goals, Zakat amounts, or Hijri dates.
• No name, email, phone number, address, persistent device identifier, or advertising ID (AAID).
• No analytics usage data (no Google Analytics, no Firebase Analytics, no Mixpanel, no Amplitude, no Facebook SDK).
• No biometric template. No photos. No media files.

All data you enter in the app (transactions, accounts, categories, budgets, savings goals, Zakat amounts, Hijri dates, attached receipt photos) is stored only in your device's internal memory (SQLite database + the app's private folder), in a sandboxed area isolated by the Android system.

5. Sentry crash reports (opt-in)

Sandouq may, only if you explicitly enable the option, transmit anonymized crash reports via Sentry. These reports contain:

• The technical crash trace (file, line, error type).
• The Android version and device model (e.g. "Android 13 / Nokia G22").
• The app version.

These reports never contain your transactions, account names, amounts, photos, or any data you've entered. Crash reporting is disabled by default and can be turned on or off at any time from Settings → Privacy → Help improve Sandouq. Sentry is configured to use its EU servers (de.sentry.io). See Sentry's privacy policy.

6. Sandouq Premium purchase via Paddle (coming — autumn 2026)

Once Sandouq Premium becomes available (planned for autumn 2026 — until then, all features are unlocked for free), the app will offer an optional one-time "Sandouq Premium" purchase (planned launch price $7.99 USD, adjusted to your region), processed exclusively by Paddle acting as Merchant of Record. Payment will happen on sandouq.app/en/pricing — Sandouq will never see, process, or store any payment information (card number, IBAN, bank details). No banking data will pass through the app or our servers.

To validate your Premium status inside the app, Paddle will transmit only your purchase email and a transaction identifier. These will be stored in a license database (Cloudflare KV) and used only to verify your unlock when you sign in from the app. See Paddle's privacy policy.

Paddle appears as "Paddle.com Market Ltd" or "Paddle.com Ireland Ltd" on your bank statement. For any payment or refund question, see our refund policy.

7. Cookies and logs on sandouq.app

The sandouq.app website (which you're reading right now) uses no marketing cookies, no ad pixels, no third-party analytics. It is hosted on Cloudflare Pages and benefits from Cloudflare's minimal anonymous technical logs (partial IP address, browser type, HTTP status code) for security (anti-DDoS) and performance purposes, as described in Cloudflare's privacy policy.

8. Your rights

Because your data never leaves your device, you have full control at all times:

• Access: all your data is visible inside the app.
• Rectification: you can edit any data from within the app.
• Portability: export your data as CSV or JSON from Settings → Backup.
• Erasure: uninstall the app, or use Settings → Reset all data.
• Objection / restriction: turn Sentry off in settings to stop any third-party processing.

Pursuant to Article 13 of the GDPR, you can exercise these rights or ask any question by writing to [email protected]. We reply within 30 days.

You also have the right to lodge a complaint with a supervisory authority:

• In Morocco: with the competent personal data protection authority, namely the National Commission for the Control of Personal Data Protection (CNDP).
• European Union: the data-protection authority of your country of residence (ICO in the UK, CNIL in France, AEPD in Spain, BfDI in Germany, etc.).

9. Children

Sandouq is not intended for users under the age of 13 and knowingly collects no data about them.

10. Changes to this policy

If we update this policy, the new version will be published at this address with an updated date and an incremented version number. Substantial changes will be announced inside the app via an info screen on the next launch.

11. Contact

For any question, exercise of rights, or complaint regarding this policy:

• Email: [email protected] (main channel — reply within 7 business days)
• Postal mail: address available on request by email for any official correspondence

— The Sandouq team

See also: Sandouq home page · Sandouq Zakat Calculator · Terms of use