Privacy Policy

1. Who we are & what this policy covers

Wasoolo is a digital khata (credit ledger) app for small businesses. Shopkeepers use it to record udhaar, installment (qist) plans, products and stock, and to share invoices and statements. Customers can use a free companion view to see their own ledger, chat with the shop, and submit payment proof.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It covers the Wasoolo app on iOS and Android and the wasoolo.com website.

Who is responsible: the data controller for Wasoolo is Wasoolo. You can reach us any time at help@wasoolo.com.

One important thing to understand up front: Wasoolo is a record-keeping tool. We are not a bank, not a lender, we do not give loans, and we do not move money. Payments happen outside the app, directly between the shop and the customer. The app only records those payments and lets customers submit proof (for example, a screenshot).

2. Information you provide

When you create an account and use Wasoolo, you may give us:

• Account details: your name, email address, and phone number.
• Optional profile fields: father name, national ID / CNIC number, address, city, date of birth, gender, and WhatsApp number. These are optional — the app works without them.
• Business details: business name, logo, address, and payment method details (like a bank account title and account number) that you choose to show on your invoices and receipts.
• Photos: product photos, bill photos, ID document photos, and payment screenshots that you or your customers upload.
• Chat messages: messages sent between the shop and the customer inside the app.
• Records you create: khatas, entries, installment plans, guarantor details, groups, notes, and anything else you type into the app.
• If you join the referral or affiliate program: your invite code and who used it; and, only when you ask to be paid in cash, your legal name, a photo ID (CNIC in Pakistan, or a passport or national ID elsewhere — with a photo of you holding a passport), your payout account (bank / Easypaisa / JazzCash, or a crypto wallet address and network for an affiliate outside Pakistan), and, for an affiliate, where you plan to promote Wasoolo. Section 8a explains all of it, including how long it is kept and how to have it removed.

You decide how much of the optional information to add. If you do not want to store an ID number or photo, simply leave those fields empty.

3. Information about your customers that shopkeepers enter

Wasoolo lets a shopkeeper keep records about their own customers: names, phone numbers, addresses, ID details, khata amounts, and guarantor details. Here is how responsibility works, in plain language:

• The shopkeeper is responsible for having the right to enter and keep this information. If you are a shopkeeper, only enter customer details you collected honestly for your business, and respect your customers' wishes about their data.
• Wasoolo processes these records only to provide the service — storing them, syncing them across the shopkeeper's devices, showing the customer their own ledger, sending reminders the shopkeeper triggers, and generating documents. We do not use customer records for anything else, and we never sell them.
• If you are a customer of a shop that uses Wasoolo and you want a record corrected or removed, the fastest path is to ask the shop directly, because the shop controls its own khata records. You can also contact us at help@wasoolo.com and we will help.

In legal terms: for these records the shopkeeper acts as the controller and Wasoolo acts as a processor on their behalf.

4. Information collected automatically

To make the app work reliably, we automatically collect a small amount of technical information:

• Device push token and device type / operating system — needed for sync and push notifications.
• App diagnostics and error logs — so we can find and fix crashes and sync problems.
• Subscription status and store transaction identifiers from Apple or Google — so we know which plan your account has.
• Coarse usage events — for example a last-active time, used to show presence and keep sync healthy.
• A per-install identifier — when the app is installed it creates a random identifier for that install. It is attached to the entries you sync (so two phones on one business can be told apart when the same record is edited on both) and to the record that holds your device's push token. It is not the Android or Apple hardware identifier, it holds no personal details, it is never used for advertising, and it is deleted with your account (except the referral record described in section 8a).
• A device identifier, only if you join up an invite — when you use someone's invite code, the app also sends one identifier that stays the same on your phone: on Android the device ID Android gives to apps, on iPhone and iPad Apple's "identifier for vendor". If neither can be read, the per-install identifier above is used instead. We keep it so that one phone cannot earn the same reward again and again. This second identifier is sent only when you join up an invite and is never used for advertising. Section 8a says how long it is kept.
• Advertising identifier — on the free plan, our advertising partner Google AdMob uses it to show and measure ads (a paid plan or a Remove ads purchase removes the ads). On Android this is your device's advertising ID, and it is also used to measure our own advertising on every plan (see section 7b). On iPhone and iPad, Apple's advertising ID (IDFA) is used only if you tap Allow when the app asks for tracking permission; if you do not allow it, it is never read. See sections 7a and 7b.
• Ad-measurement events (Android app only) — Google Analytics for Firebase and the Meta (Facebook) SDK receive app usage information (such as installs, opens and the app screens shown), general device information, and three milestones: a new shop was created, its first customer was added, and its first entry was saved. Never names, phone numbers, amounts or any khata, customer or business record. See section 7b.

Just as important is what we do not collect:

• No precise location tracking. The app never asks for or collects your GPS or exact location. For ads on the free plan, Google may work out a rough (city-level) location from your IP address so the ad suits your region. That is only a rough area, not a profile of you.
• No behavioral ad profiling by us. On the free plan Google AdMob shows the ads, and Google may personalize them only as far as your choices allow (section 7a); we do not build an advertising profile of you. Paid plans and Remove ads remove ads entirely. (How Google and Meta measure our own ads is in section 7b.)
• No contact upload without your action. We do not read or upload your phone contacts in the background.
• We never sell your personal data.

5. How we use information

We use the information above to:

• Provide the service: keep your khatas, udhaar records, qist plans, stock, and documents working and synced across your devices.
• Sign you in securely: verify your email or phone, support Google and Apple sign-in, PIN lock, and two-factor authentication.
• Send notifications: payment reminders, chat messages, approval requests, and important account alerts — you can control these in the app's notification settings. Shop owners may also get occasional tips from Wasoolo (see section 5a).
• Generate documents: invoices, receipts, and statements with your business branding.
• Manage subscriptions: check your plan with Apple or Google and apply the right features.
• Keep the service safe: prevent abuse, enforce our security rules, and verify dangerous actions (like account deletion) with an OTP code.
• Improve the app: use diagnostics and error logs to fix bugs and make Wasoolo faster.
• Meet legal obligations where the law requires us to keep or share certain records.

5a. Emails and notifications from Wasoolo

Now and then we send shop owners a short message about using Wasoolo — for example, how to add a first udhaar entry, a useful tip, or a feature worth knowing, such as Invite & Earn or sharing your shop's story. They come by email from hello@wasoolo.com, as a notification on your phone, or as a message from the Wasoolo Team inside the app.

• Only shop owners get them — never your customers or your staff, and never an email address that has not been confirmed.
• Never more than: one email a week and three a month; one notification every three days and two a week; one in-app message a week; and never more than one message of any kind in two days.
• Only in the daytime: 10 am to 7 pm Pakistan time, and never during Friday prayers (12:30 to 2:30 pm).
• They stop when they have done their job — for example, a "come back" message stops as soon as you open the app again.

How to stop them: tap Unsubscribe at the bottom of any of these emails (it works at once — one click, no login), or simply reply STOP. For notifications and the Wasoolo Team messages in the app, turn off Tips from Wasoolo in the app (More → Notifications; one switch stops both). That switch does not stop announcements from Wasoolo, such as news of an app update — those may still reach you. Stopping these tips never affects your account, your khata, or the emails you need to use Wasoolo, such as login codes.

We never sell or share your contact details for anyone's marketing, and Wasoolo never sends WhatsApp or SMS messages to your customers by itself.

What we keep: a record of which of these messages we sent you and when (so we can keep to the limits above), and — if you unsubscribe, or an email to you bounces or is reported as spam — your email address on a do-not-email list, so it is never emailed again. That list is kept even if you later delete your account, because it is the only way to keep that promise. (If an account has already been deleted when its Unsubscribe link is used, there is nobody left to send to, and nothing new is stored.)

6. Legal bases for processing (GDPR)

If you are in a region where the GDPR or similar laws apply, our legal bases are:

• Contract: most processing is needed to provide the service you signed up for — storing your ledger, syncing it, and sending the notifications the service depends on.
• Legitimate interest: keeping the service secure, preventing abuse, and fixing bugs using diagnostics.
• Legitimate interest (messages to our own users): the occasional tips in section 5a, sent only to shop owners who use Wasoolo, with a one-click way to stop them in every message.
• Consent: optional things like adding optional profile fields, push notifications where your device asks for permission, or a story video you choose to send us (section 7c). You can withdraw consent at any time.
• Legal obligation: where we must keep or disclose information to comply with the law.

7. Sharing & service providers

We do not sell personal data. Apart from showing ads on the free plan (via Google — see section 7a below) and measuring our own advertising with Google and Meta (section 7b), we do not share your data with advertisers, and we never share your khata, customer, or business records for advertising. We share data with the service providers (processors) that run the app for us, each for a specific purpose:

Provider	Purpose	Data involved
Supabase	Cloud database and authentication	Account details, khata and business records, chat messages, sync data
Cloudflare R2	Photo and media storage	Product photos, bill photos, ID document photos, payment screenshots, logos, and the shop story videos you choose to send us (section 7c)
Firebase Cloud Messaging (Google)	Push notifications	Device push token, notification content
Apple App Store	Subscription billing on iOS	Subscription status and transaction identifiers (Apple handles all payment details)
Google Play	Subscription billing on Android	Subscription status and transaction identifiers (Google handles all payment details)
Transactional email provider	Sending OTP verification codes	Your email address and the one-time code
Email hosting (Hostinger)	Sending the tip emails in section 5a, from a separate mailbox	Your email address, your first name, and the message
Sign in with Google / Sign in with Apple	Optional sign-in methods	The name and email your Google/Apple account shares when you choose that sign-in
Google AdMob	Showing ads on the free plan, and asking for your ad choices where the law requires it	Advertising ID (on Android; on iPhone and iPad only if you allow tracking), your ad consent choices, general device information, and a rough city-level location worked out from your IP address — no khata, customer or business data
Google Analytics for Firebase	Counting installs and measuring our own ads on Google and YouTube (Android app only)	App installs and opens, the three milestones in section 7b, plan purchases made through Google Play, advertising ID, general device information, and a rough location worked out from your IP address — no khata, customer or business data
Meta (Facebook) SDK	Measuring our own ads on Facebook and Instagram (Android app only)	The same as the row above — no khata, customer or business data

These providers may only use your data to provide their service to us. We may also disclose information if the law genuinely requires it, or to protect the safety of our users and the service.

7a. Advertising (free plan)

On the free plan, Wasoolo shows ads supplied by Google AdMob. A new shop sees no ads in its first 30 days, and the app never shows ads on a computer. To serve and measure ads, Google processes general device and app information — such as device type, operating system, language, and a rough location (usually your city or country) worked out from your IP address — and your device's advertising ID where it is available, as described in Google's advertising & measurement policies.

Your choices. Before any ad is requested, the app shows Google's consent message where the law requires it (for example in the European Economic Area, the UK and Switzerland). There you can agree to personalized ads, refuse them, or pick exactly what Google may do; if you refuse, Google shows only non-personalized or limited ads. You can change your answer at any time in More → Ad privacy choices. On iPhone and iPad, the app also asks for Apple's tracking permission: only if you tap Allow can Google use Apple's advertising identifier (IDFA) to personalize and measure ads. You can change it any time in Settings → Privacy & Security → Tracking.

You can remove ads entirely at any time — shopkeepers with a paid plan or a Remove ads purchase (a shop owner's Remove ads covers every phone in the shop), and customers with their own Remove ads purchase. Inviting a friend or sharing your story can also remove ads for a while, as the app explains under More → Remove ads. On Android you can also reset or delete your advertising ID in Settings → Google → Ads. We never share your khata, customer, chat, or business records with any advertiser.

7b. Measuring our own ads (Android app)

Wasoolo advertises itself on Google, YouTube, Facebook and Instagram. To learn which of those ads bring shopkeepers who really use the app, the Android app includes Google Analytics for Firebase (Google) and the Meta (Facebook) SDK (Meta Platforms). The iPhone, iPad, Mac, web and Windows apps include neither.

What they receive is app usage information of this kind: that the app was installed, opened, updated or removed; how long and how often it is used and which app screens are shown; general device and app information (model, operating system, app version, language); a rough location worked out from your IP address; your device's advertising ID and the SDK's own random app-instance identifier; if the Facebook app is on your phone, Meta's own attribution identifier from that app (so Meta can tell whether one of our ads led to the install); plan purchases made through Google Play; on the free plan, when an AdMob ad was shown or tapped; and three milestones — a new shop was created, its first customer was added, and its first entry was saved. They never receive names, phone numbers, email addresses, amounts, or any khata, customer, chat or business record.

Google and Meta use this to count installs, tell us which ad led to them, and show our ads to people likely to find Wasoolo useful, under their own policies (Google, Meta). This information is tied to your device's identifiers, not to your Wasoolo account, so deleting your Wasoolo account does not remove it; Google and Meta keep it under their own retention rules. On Android you can limit it by resetting or deleting your advertising ID in Settings → Google → Ads (on some phones Settings → Privacy → Ads).

7c. Your shop's story (videos you choose to send us)

A shop owner can choose to send us a short video about their shop from the app (More → Share your story). Nothing is sent unless you pick a video and tick the permission yourself. Before sending, you agree in the app that Wasoolo may use the video — your face, your voice and your shop's name — in ads and posts on Google, YouTube, Facebook, Instagram, TikTok and on Wasoolo's website, and that you made the video yourself and everyone in it agrees.

• What we keep: the video file (stored with Cloudflare R2), the exact permission text you agreed to and when, and whether our team used it. The Wasoolo team watches it to decide whether to use it; if we use it, your shop gets 45 days of Pro Lite once.
• Taking your permission back: at any time in the app: More → Share your story (called Your story once it is approved) → Stop using my video. We then stop making new ads with it within 7 days; posts that are already public may stay. To have the file itself deleted as well, email help@wasoolo.com from your account email.
• Customers can send one too: in the customer app, More → Remove ads → Share your story. The same permission, the same way to take it back from that page; if we use the video, that customer gets 45 days without ads, once.
• Deleting your account deletes your story videos too (section 12).

8. Payments & subscriptions

All paid plans and packs are billed entirely by Apple (App Store) or Google (Google Play) — as auto-renewing subscriptions, except the customer No-Ads Lifetime pack, which is a one-time purchase. This means:

• Wasoolo never sees or stores your card number or banking credentials. Payment details stay with Apple or Google.
• We store only your entitlement (which plan you have) and store transaction identifiers so the right features stay unlocked.
• Prices are shown inside the app and in the store. You can cancel a subscription any time in your App Store or Google Play account settings. Deleting the app does not cancel a subscription. The one-time No-Ads Lifetime pack has nothing to cancel.
• Refunds are handled by Apple or Google under their policies.
• Downgrading never deletes your existing data — plan limits only block adding new items.

8a. Referral rewards & identity check

Wasoolo has a referral program: invite another shopkeeper, and when he really starts using the app you earn free Pro months — and, in Pakistan, a cash reward. There is also an affiliate role for people who promote Wasoolo publicly — they sign up on wasoolo.com/affiliate, earn cash only, and may live anywhere in the world. The rules are on the Referral rules page. This section says what we collect for both.

• To join up a referral we store your invite code, which account used it, when, and a check from Google Play or Apple that the phone is a real phone. That check itself returns only a yes/no answer about the device — but alongside it we also store one identifier for the phone (section 4), together with the account that used it and the date. This is what stops one person from inviting himself many times.
• The device record outlives a deleted account, on purpose. The row that says "this phone has already earned a referral reward" is kept even after the account that earned it is deleted, and it is the one exception to section 12. If it went with the account, the same phone could delete and register again to claim the same reward. The row holds the phone identifier, the date, and the id of the account that first claimed it — no name, no number, no ledger data, and nothing another user can read. If you want it removed anyway, write to help@wasoolo.com and we will remove it once the reward it guards is settled.
• To pay a cash reward we must know who you are. Before your first payout you send us your full legal name and a photo ID. In Pakistan that is your CNIC number and a photo of its front and back. Outside Pakistan we accept a passport or a national ID card, and for a passport we also ask for a photo of you holding it, so we can see the document belongs to the person being paid. You send these on our own web page — no other company is involved.
• Where they are kept. ID photos — CNIC, passport, national ID and the photo of you holding it — go into private storage that is not public and cannot be opened by a link. Only Wasoolo staff can view them, one at a time, through a short-lived link, and every view is written to our internal audit log.
• What they are used for. Only to check that a payout is going to the real person named on the payout account, and to meet our own record-keeping duties. They are never used for advertising, never sold, and never shared with another shopkeeper or with your customers.
• Payout details. We also store the account name and number you give us, so the money can be sent — a bank, Easypaisa or JazzCash account, or, for an affiliate outside Pakistan, a crypto wallet address and its network (for example USDT on TRC20). A wallet address is stored exactly as you typed it, because a mistyped one cannot be recovered.
• If you sign up as an affiliate we also store what you told us about where you plan to promote Wasoolo (your own free text — a channel name, a page, a description). It is kept with your affiliate account, is used only to decide and review your application, and is removed when that account is removed.
• How long. We keep the identity check and payout records while your account is active and afterwards for as long as the law requires us to keep records of money we have paid. If you never ask for a cash payout, you never have to send any of this.
• Withdrawing. You can ask us to remove your ID photos at help@wasoolo.com. Removing them stops future cash payouts until you send them again; it does not take away Pro months you have already earned. Deleting your account removes them with everything else (see section 12). An affiliate account has no app, so section 12's in-app route does not apply to it: email help@wasoolo.com from the address on your affiliate account with the subject "Delete my account", and we remove it the same way.

9. Offline data on your device

Wasoolo is offline-first. The app keeps a local database on your device so you can keep working without internet, and it syncs your records to the cloud when a connection is available. This local copy stays on your device until you sign out, delete the app's data, or delete your account. If you use the optional PIN app lock, opening the app requires your PIN.

10. Data retention

• Active accounts: we keep your data while your account is active, so your khata history is there when you need it.
• Trash: deleted items go to Trash first, so mistakes can be undone. Trashed items are permanently purged after about 30 days.
• Plan-based history limits: some history retention limits vary by plan — details are shown inside the app.
• Backups: you can create your own backups from the app (local file, or a complete backup with photos). Backups you save on your own device or storage are under your control.
• Account deletion: when you delete your account, deletion is permanent and completed across our systems and backups within 30 days (see section 12). Ad-measurement data held by Google and Meta is tied to your device, not your account (see section 7b).
• Do-not-email list: if you unsubscribe from Wasoolo's emails, or an email to you bounces or is reported as spam, we keep your email address and the reason on a do-not-email list for as long as we send email, so we never email you again — even after an account is deleted.

11. Your rights & choices

You are in control of your data. With any account you can:

• Access and correct your information directly in the app (profile, business details, records).
• Export your data from the app (CSV/Excel exports, PDF statements, and full backups).
• Delete individual records, all your data, or your whole account (see section 12).
• Control notifications in the app's notification settings and your device settings.
• Stop tips from Wasoolo at any time: the Unsubscribe link in any of those emails, a reply saying STOP, or the "Tips from Wasoolo" switch in the app (the switch does not stop announcements, such as news of an app update).

If GDPR or UK GDPR applies to you, you also have the rights to: access a copy of your data, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and the right to withdraw consent at any time. You may also complain to your local data protection authority.

California (CCPA/CPRA) note: we do not sell personal information. The Android app does send device identifiers and app events to Google and Meta to measure our own advertising (section 7b), which California law may treat as "sharing" for cross-context behavioral advertising; you can limit it by resetting or deleting your advertising ID in your Android settings. California residents may request access, correction, or deletion, and we will not discriminate against you for exercising these rights.

How to exercise any right: use the in-app tools, or email help@wasoolo.com from your account email. We will respond within a reasonable time and may verify your identity first to protect your account.

12. Account deletion

You can permanently delete your Wasoolo account and its data from inside the app:

1. Open the app and go to More → Danger zone → Delete account.
2. Confirm with the OTP code sent to your account email.

This permanently deletes your account and its data, including cloud data and any shop story videos you sent us. There is also a separate "Delete all data" option in the same Danger zone if you want to erase your data but keep the account.

If you cannot access the app, email help@wasoolo.com from the email on your account and we will delete it for you. The page wasoolo.com/delete-account.html explains the full process.

Deletion is permanent and is completed within 30 days across our systems and backups. It cannot be undone, so consider exporting a backup first.

One thing is deliberately kept: if the phone has ever earned a referral reward, the record that says so — a device identifier, the date, and the id of the account that claimed it — is kept after deletion, because removing it would let the same phone claim the same reward again. It holds no ledger data and no personal details beyond that. Section 8a explains it, and how to ask us to remove it.

13. Security

We take security seriously and build it in from the start:

• Encryption in transit: all traffic between the app and our servers uses HTTPS/TLS.
• Row-level security, default-deny: the database refuses access unless a rule explicitly allows it, so one account can never read another account's records.
• Permission system: employee logins have fine-grained permissions, and sensitive actions can require owner approval.
• PIN lock and 2FA: optional PIN app lock and optional two-factor authentication with an authenticator app.
• OTP-verified dangerous actions: risky operations like deleting all data or deleting the account require an email OTP code.

An honest note: no method of storage or transmission is 100% secure. We work hard to protect your data, and we recommend you use a strong device passcode, the PIN lock, and 2FA.

14. International transfers

Wasoolo is operated from Pakistan and available worldwide. Our service providers host data on cloud infrastructure that may be located outside your country. Wherever your data is processed, this policy and the safeguards described in it apply, and we choose providers with strong security practices. Where laws like the GDPR apply, transfers rely on appropriate safeguards such as the providers' standard contractual protections.

15. Children

Wasoolo is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us at help@wasoolo.com and we will delete it.

16. Changes to this policy

We may update this policy as the app grows or laws change. When we make a meaningful change, we will update the effective date at the top of this page and, for important changes, tell you inside the app or by email. Continuing to use Wasoolo after a change means you accept the updated policy.

17. Contact us

Questions, requests, or concerns about privacy? We are happy to help.

• Email: help@wasoolo.com
• Contact page: wasoolo.com/contact.html