Privacy Policy

1. Information We Collect

When you use FaidaGrow, we collect:

• Account information you provide directly - your name, email address, mobile number, and business name.
• Business data you enter - assets, customers, contracts, payments, expenses, and maintenance records.
• Tenant payment reports - if a tenant uses the portal to report a payment, the transaction reference and any screenshot they attach. These are private to the business they rent from.
• Payment verification details - if a business applies to accept online payments, the owner's identity details, tax and registration numbers, and supporting documents. We use these only to review the application, and they are kept private.
• Agreement signatures - when an owner or tenant signs an agreement in the app, we record the name they type, the signature they draw (if any), the date and time, the IP address and device used, and, for tenants, the phone number the confirmation code was sent to. This record is kept with the signed agreement as evidence of who signed and when, and is shared only with the two parties to that agreement.
• Text message records - for each text message sent through the Service, the phone number, the message, whether the SMS provider reports it was delivered, and, if a tenant asks to stop bulk messages, that choice and when it was made.
• Two-factor sign-in - if you turn it on, a secret key (stored encrypted) and your recovery codes (stored only in a form that cannot be turned back into the codes).
• Sign-in information from Google, if you choose to continue with Google - your name, email address, and profile photo.
• Payment information - if you subscribe to a paid plan, your name and email are shared with our payment processor to process the payment. We do not receive or store your card or mobile money details ourselves; a record of the payment (amount, date, plan) is kept in your account's billing history.
• Usage data such as log files and session information, used for security and troubleshooting.

2. How We Use Information

We use the information above to:

• Provide, maintain, and secure the Service;
• Authenticate you and keep your account and business data isolated from other businesses;
• Calculate the reports and profitability figures the Service displays to you;
• Communicate with you about your account or changes to the Service.

3. Data Storage & Security

Your data is stored in a database scoped to your business - every business-owned record is tied to your account and is not visible to other businesses using the Service. We take reasonable technical measures to protect your data, but no method of storage or transmission is 100% secure.

If you install the app on your phone, your records are not saved on the device; only a simple offline page and an icon are.

We keep a record of changes made in each business (who added, changed or deleted a record, when, the old and new values, and the IP address used). The business owner can see this record for their own business. Private values such as passwords and identity numbers are shown only as "changed", never in full.

Our support team can view an account in read-only mode to help with a problem, and a business owner can do the same for their own staff and tenants. Nothing can be changed while viewing, a banner stays on screen, and each visit is recorded in an audit log.

4. Data Sharing

We do not sell your personal or business data. We do not share it with third parties except where required to operate the Service - infrastructure providers, our payment processor (for the name/email/amount needed to process a subscription payment), our SMS provider (for the phone number and message text needed to deliver a text message, and to tell us whether it was delivered) - or where required by law.

5. Google Sign-In

If you sign in or register using Google, we receive basic profile information (name, email, profile photo) from Google to create or match your account. We do not post to your Google account or access any other Google data.

6. Your Rights & Data Retention

You can access, correct, or delete the business data in your account directly within the Service. You can also request deletion of your account and all associated data from within the Service (Business Settings, owner accounts only) or by contacting the team operating this FaidaGrow instance.

Requesting account deletion opens a 30-day grace period, during which you can still cancel the deletion and keep your account as-is. Once that period passes, your operational data (assets, customers, contracts, uploaded documents, and similar records) is permanently deleted. A minimal financial/audit record (figures needed for accounting and legal compliance, not the underlying documents) is kept in an archive for 7 years afterward, as is common practice for financial record-keeping, before it too is permanently destroyed.

If your account is suspended for violating our Terms of Service, or moves to the Free plan after a subscription lapses, your data is not deleted - it stays exactly as it was, and access is restored in full once the suspension is lifted or you resubscribe.

7. Cookies & Analytics

We use session cookies to keep you signed in and to protect against cross-site request forgery. We also use Google Analytics to understand how visitors use our site (pages viewed, general location, device type) - Google may set its own cookies for this purpose. We do not use cookies or analytics data for third-party advertising.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

Questions about this policy can be directed to the team operating this FaidaGrow instance.