Privacy Policy

BC Tracker (Android package com.xflashcloud.bctracker) is an app operated by XFlash ("we", "us"). It helps people run a committee (also called BC or ROSCA) by keeping a shared record of payments, turns and draws. Contact: [email protected].

BC Tracker does not hold, move, collect or process money, and does not offer loans, interest or credit scores. Members pay each other directly (for example JazzCash, EasyPaisa, bank transfer or cash). The app only stores a record of those payments. We never ask for bank account passwords, card numbers, PINs or wallet credentials.

• Google sign-in: your name, email address and profile picture from your Google account. Your email is used only to sign you in and is not shown to other members.
• Profile: the name and Pakistani mobile number you enter, and your language (Urdu or English).
• Profile photo: your Google profile picture is used as your photo until you upload your own or remove it in the app. Photos you upload are resized to a small square image.
• Committee data: committees you create or join; the amount, number of members, dates and payout order; and member names and phone numbers that an organizer adds — including people who do not use the app.
• Payment records: the month, amount, payment method, optional note, optional screenshot of the payment that you upload, its status (submitted, confirmed or rejected) and the time.
• Draw records: the members included, the result and the random numbers used, so the draw can be verified.
• Bids, late fees and notes: bids in bidding committees, late fees an organizer adds or waives, and private notes an organizer keeps about a member (only organizers of that committee see notes).
• Installment sales (Qist Khata, optional): if you use the app to record items you sell on installments, the details you enter about each sale: the customer's and guarantor's name, mobile number, address and CNIC number (optional), the product and its identifying details (for example engine/chassis number or IMEI), the prices, advance, schedule and each payment, and any later change the seller makes to the price or plan together with the reason given.
• Notifications: a push notification token for your device and whether you turned notifications on or off.
• Technical logs: standard server logs kept by our infrastructure providers (such as IP address and request time) for security and troubleshooting.

We do not collect your location, contacts, SMS messages, call logs, or any financial account credentials.

• To run the app: show committees, schedules, payment status, draws and history to their members.
• To send push notifications you can turn off: payment reminders, confirmations, draw results and payouts.
• To keep the service secure and fix problems.

We do not sell your data, show advertising, or use your data to train AI models.

• Members of the same committee can see member names and profile photos, the schedule, each member's payment status, payment screenshots, draw results and the committee history.
• The organizer of a committee can also see members' phone numbers so they can contact them.
• Installment sales are visible only to the seller who recorded them, and to the customer if the seller shares a link code with them. The customer sees their own account only and cannot change it. The cash price and profit are shown to the seller only.
• Nobody outside a committee can see that committee. There are no public lists, ratings or "defaulter" labels.

If you are an organizer adding someone who does not use the app, please tell them you are recording their name, phone number and payments in BC Tracker. If you record installment sales, you are responsible for telling your customers and guarantors that you keep their details in BC Tracker, and for only recording details you are allowed to keep.

• Supabase — database, sign-in and file storage, hosted in the Southeast Asia (Singapore) region. Data is encrypted in transit and at rest. Payment screenshots are private to the committee. Profile photos are stored at a long, random web address so they load quickly; the address is only shown inside your committees, but anyone who has that exact address could open the photo.
• Google — Google Sign-In, and Firebase Cloud Messaging to deliver push notifications on Android.
• Expo — delivers push notifications to Firebase Cloud Messaging.
• Cloudflare and Hostinger — host this website.

These providers process data only to provide their service to us.

• All connections use HTTPS/TLS.
• Database access rules ensure you can only read committees you belong to.
• Payment screenshots are stored privately and shown only through short-lived links to members of that committee.
• Draw results and the committee history cannot be edited or deleted, so records stay trustworthy.

We keep your data while your account exists. A committee's records are kept so its members can rely on them, including after the committee ends.

You can delete your account at any time in the app: Settings → Delete my account, or by following the steps on the account deletion page. When you delete your account:

• Your sign-in, profile, phone number in your profile, profile photo and push token are deleted immediately.
• Installment sales you recorded as a seller are deleted with your account. If you were linked to a seller's account as a customer, the link is removed.
• In committees you were part of, your past payments stay in that committee's record under the name the organizer saw, as an offline member, so other members' accounts stay correct. Your account is no longer linked to them.
• If you want payment screenshots you uploaded removed as well, email us and we will remove them within 30 days.

• Edit your name, phone number and profile photo in the app (Settings → Edit profile).
• Turn notifications on or off in Settings.
• Ask for a copy of your data, a correction, or deletion by emailing [email protected]. We reply within 30 days.

BC Tracker is meant for adults (18+) who take part in committees. It is not directed at children. If you believe a child has created an account, contact us and we will delete it.

If we change this policy, we will update the date at the top and, for important changes, tell users in the app before they take effect.

Questions or requests about your privacy: [email protected].