Mess Chat App

1. Introduction

ALISON TECH LAB, owned by Abdul Manaf ("we," "our," or "us") operates the Mess Chat App mobile application, available on both Android and iOS. This Privacy Policy explains how we collect, use, and protect your personal information when you use our app.

Mess Chat App is a group expense and chit fund management app that helps users track mess expenses, manage Chitti/Kuri (chit fund) groups, and record financial transactions among group members.

2. Information We Collect

2.1 Personal Information

• Phone Number: Used for OTP-based login and account identification
• Email Address: Used for email verification OTP, account security, and service communications
• Name: Your display name shown to group members
• Device Identifier / User ID: Used solely for secure session management and authenticating app requests
• FCM Token: Firebase Cloud Messaging token for push notifications

2.2 Financial & Group Data

• Transaction Records: Purchases, expenses, advances, and settlements you record
• Group Membership: Groups you belong to (Mess, Chitti, Plan)
• Chat Messages: Messages sent within group chat (if chat is enabled)
• Media Files: Images, voice notes, and documents shared in group chat

2.3 Device & Technical Data

• Device Information: Device type, OS version, app version (used for app compatibility and crash debugging)
• Usage Data: App interactions and feature usage patterns solely to ensure proper app functionality

3. No User Tracking & Privacy Protections

4. How We Use Your Information

• Authenticate your identity via OTP login (Phone and Email)
• Display your name and profile to members of groups you join
• Record, calculate, and display financial transactions within your groups
• Send push notifications for new messages and transactions
• Enable real-time group chat and transaction updates
• Calculate expense splits, settlements, and Chitti payouts
• Provide admin controls for group management
• Improve app performance and fix technical bugs
• Comply with legal obligations

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. Data may be shared only in these cases:

• Group Members: Your name, transactions, and chat messages are visible only to members within your shared groups
• Firebase / Google: Push notification delivery via Google Firebase Cloud Messaging
• SMS / Email Service: Used solely for delivering one-time passwords (OTP)
• Google AdMob: Third-party ad network used to serve in-app advertisements. AdMob may process non-sensitive technical identifiers to deliver ads in compliance with applicable platform privacy policies
• Legal Requirements: When required by applicable law or valid legal request

6. Data Storage and Security

• All data is stored on secure servers hosted at mess.alisontechlab.com
• API communication is encrypted via HTTPS/TLS (Transport Layer Security)
• Authentication uses industry-standard JWT tokens with secure expiration
• FCM tokens are stored securely and cleared on logout
• Media files are stored in restricted server directories
• We comply strictly with Apple's App Store and Google Play privacy requirements

7. Your Rights and Choices

• Access & Export: View all your transactions and group data within the app or export reports as PDF
• Correction: Update your profile name and email at any time in Profile Settings
• Account & Data Deletion: You can delete your account directly inside the app (Profile > Delete Account) or via our Account Deletion Request page
• Notifications: Disable push notifications from your device settings at any time
• Chat: Toggle your chat participation on or off within the app
• Leave Group: Exit any group at any time from within the app

8. Third-Party Services

• Firebase Cloud Messaging (Google LLC): Push notifications — governed by Google's Privacy Policy
• Google AdMob (Google LLC): In-app advertising — governed by Google's Privacy & Terms
• SMS & Email Delivery: Solely for one-time authentication codes

9. Children's Privacy

Mess Chat App is intended for adults managing shared financial groups. We do not knowingly collect personal information from children under 13 (or under 18 where required by law). If you believe a minor has registered, please contact us immediately.

10. Data Retention & Deletion

We retain your data for as long as your account is active. Upon account deletion:

• Personal profile data, email, phone number, and authentication tokens are immediately deleted
• Chat messages and media files are permanently purged
• Transaction records remain anonymized within existing groups for group accounting continuity

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

12. Contact Us

For any questions, data deletion requests, or privacy concerns: