Privacy Policy
This Privacy Policy explains how SH Wallet (the “App”) collects, uses, stores, shares and deletes information. It applies to the SH Wallet Android app published on Google Play and to the web version at wallet.sakibweb.com, which run the same service and share the same account.
SH Wallet is developed and operated by Sakib Hasan, an independent developer based in Bangladesh (“we”, “us”, “our”).
- We only keep what you type into the App, plus the name, email and password you sign up with.
- We do not sell your data, show ads, or use analytics or tracking tools.
- We do not access your contacts, location, camera, photos, SMS or bank accounts.
- You can delete your account and all your data at any time, inside the App or on the web.
Contents
- Information we collect
- Information we do not collect
- How we use information
- How we share information
- Cookies and local storage
- Security
- How long we keep data
- Deleting your account and data
- Your choices and rights
- Children
- Where data is stored
- Changes to this policy
- Contact us
1. Information we collect
Information you give us
| Data | Examples | Why we need it |
|---|---|---|
| Account information | Your name, email address and password | To create your account, log you in and identify your data |
| Financial records you enter | Income and expense amounts, dates, times, categories, notes, and how you paid (for example Cash, bKash, Nagad, Bank or Card) | To show your balance, history and totals |
| Dues and debts ledger | Names of people you lend to or borrow from, their phone number if you choose to add it, amounts and notes | To track who owes you and whom you owe |
| Budgets and savings goals | Monthly category limits, goal names, target amounts, dates and deposits | To show budget progress and savings plans |
| Preferences | Light or dark theme and number format | To remember how you like the App to look |
All financial information in SH Wallet is entered manually by you. The App does not connect to, read from, or move money in any bank, card, bKash, Nagad or other payment account.
If you add another person's name or phone number to your ledger, please only do so where you have a reasonable basis to keep that record for your own personal use.
Information collected automatically
- Security logs: when a login attempt fails, we record the IP address, the email address entered and the time, to block password-guessing attacks.
- Server logs: like most websites, our hosting server automatically records basic technical request data (such as IP address, date and time, page requested and browser type) for security and troubleshooting.
2. Information we do not collect
SH Wallet does not request Android device permissions and does not collect your precise or approximate location, contacts or address book, photos, files, camera or microphone input, SMS or call logs, installed apps, advertising ID, or device identifiers. We do not use analytics, advertising or crash-reporting SDKs.
3. How we use information
We use your information only to:
- provide the App's features: storing, showing and calculating your own records;
- create and secure your account, keep you logged in, and prevent unauthorised access;
- respond to your questions and support requests;
- comply with legal obligations.
We do not use your data for advertising, profiling, credit scoring, or automated decisions about you, and we do not sell or rent it.
4. How we share information
We do not sell your personal data or share it with third parties for their own marketing. Data is shared only with the following types of parties, and only as needed to run the App:
- Web hosting provider: our database and website are stored on servers run by our hosting company, which processes the data on our behalf and may not use it for its own purposes.
- Google: the Android app is distributed through Google Play and displays the service using Google Chrome's engine. The App also loads a font from Google Fonts, which means Google receives your IP address when the font loads. Google's handling of this data is described in the Google Privacy Policy.
- Legal requirements: we may disclose information if required by law, court order or a valid request from a government authority, or where necessary to protect the rights, safety or property of our users or others.
- Business transfer: if the App is ever transferred to a new owner, your data would move with it under the same protections, and we would notify you first.
Your records are private to your account. Other users of SH Wallet cannot see them.
5. Cookies and local storage
We use a single essential cookie (shwallet) to keep you logged in for up to 30 days. It cannot be used to track you on other websites. The App also stores a small number of its own design files (styles, scripts and icons) on your device so it opens faster; these files contain none of your personal data. We do not use advertising or tracking cookies.
6. Security
- All data is sent over an encrypted HTTPS (TLS) connection.
- Passwords are never stored in readable form; we store only a secure one-way hash (bcrypt).
- Every request is checked so each account can only reach its own records.
- Repeated failed logins are temporarily blocked, and forms are protected against cross-site request forgery.
No online service can guarantee absolute security. Please use a strong password that you don't use elsewhere, and contact us straight away if you think your account has been accessed without permission.
7. How long we keep data
- Account and financial records: kept for as long as your account exists, until you delete them or delete your account.
- Failed login records: automatically deleted after 24 hours.
- Login cookie: expires after 30 days, or when you log out.
- Server logs and backups kept by our hosting provider: removed on the provider's normal rotation schedule, typically within 30 days.
8. Deleting your account and data
You can permanently delete your SH Wallet account and all data linked to it (transactions, dues ledger, budgets and savings goals) at any time:
- In the App: open Settings → Delete account and confirm with your password.
- On the web, without the App: visit wallet.sakibweb.com/delete-account.php, sign in with your email and password, and confirm.
- By email: write to us from the email address on your account using the contact details below, and we will delete the account within 7 days.
Deletion takes effect immediately and cannot be undone. Copies in server backups are overwritten within the retention period above. If you only want to clear your records and keep your login, use Settings → Erase all my data.
9. Your choices and rights
Wherever you live, you can:
- access and correct your information: everything you entered is visible and editable in the App, and you can change your name and password in Settings;
- delete your data or your whole account, as described above;
- ask for a copy of your data by contacting us;
- object to or ask us to restrict processing, or complain to your local data protection authority if you believe your data has been mishandled.
We will respond to requests within 30 days and may need to confirm your identity before acting on them.
10. Children
SH Wallet is intended for adults and is not directed to children. We do not knowingly collect personal data from anyone under 13 (or the minimum age required in your country). If you believe a child has created an account, contact us and we will delete it.
11. Where data is stored
Your data is stored on our hosting provider's servers, which may be located outside your country. Wherever it is processed, we protect it as described in this policy.
12. Changes to this policy
We may update this Privacy Policy when the App changes or when the law requires. We will change the “Last updated” date at the top, and if the changes are significant we will tell you in the App before they take effect.
13. Contact us
For privacy questions, data requests or account deletion help, contact:
Sakib Hasan, developer of SH Wallet
Email: 3s.sakibhasan@gmail.com
Website: sakibweb.com
Country: Bangladesh