Jeebraac Privacy Policy

Jeebraac keeps a record of your money from the messages your mobile wallets and banks send to your phone — for example EVC Plus, Waafi, eDahab, Premier Wallet, Salaam Bank, Dahabshiil and IBS Bank. You can use it for a business, for yourself, or for money you hold for others. It works without an account.

This policy covers the Jeebraac app for Android and our server. If we add another Jeebraac service, we will update this policy, or publish one for that service, before it collects anything.

• The app does not ask for your name, phone number or where you live, and works without an account. An account holds a phone number only if you gave one when it was made.
• Jeebraac reads the SMS messages on your phone to find the ones from your money providers, and keeps those on your phone, including their codes and promotions. The text of personal messages is never saved or sent anywhere.
• Your messages and records leave your phone only if you turn on backup or “Help Jeebraac learn”, or share a report yourself (section 5).
• Even without an account, the app contacts our server to check the connection and download the rules it reads messages with. It sends a random install number, never your messages.
• With backup on, your recorded transactions are copied to our server, including the other party’s name and phone number.
• We do not sell your data, show ads, or use analytics or crash-reporting companies.

Jeebraac asks for Android’s permission to receive and read SMS messages. It reads only your inbox: new messages as they arrive and, during setup and history imports, messages from about the last month. It never sends, blocks or hides a message.

Money messages. Jeebraac keeps every message from your money providers on your phone, with its text, including one-time codes and promotions — even from a provider you left out during setup.

Personal messages are checked on your phone and never kept. If one looks like a money message from a sender Jeebraac does not know, it keeps only the sender’s name or number and asks you once whether it is your bank or wallet. If you say no, it stops asking; but if we later add that sender to the providers Jeebraac reads, its messages will be kept.

Withdrawing the permission. You can withdraw it at any time in your phone’s Settings. Jeebraac then stops reading messages. Your records stay on your phone, but you cannot open them until you allow access again; Jeebraac then catches up on the messages it missed.

In the app’s private storage, which other apps cannot read:

• your money messages and the records made from them, including other parties’ names, phone numbers and account numbers, and a history of the changes you make;
• your wallets and balances, the names and numbers of people you hold money for (amaano), and your notes;
• the unknown senders Jeebraac asked you about and your answers, and the suggestions it remembers;
• a list of the business summaries you shared: when, which months, and any note you added;
• if you turned on “Help Jeebraac learn”, the masked shapes waiting to be sent;
• your PIN, stored only as a one-way hash, never the PIN itself;
• if you signed in: your account ID, email address and sign-in tokens;
• random install and profile numbers, copies of the rules we publish, and technical counters.

Each time a new version of Jeebraac first opens your records, or if they ever fail to open, it saves a full copy of its database, message texts included, and keeps the last five so your records can be rescued. Uninstalling removes them; “Reset device” does not. The phone’s system log, which other apps cannot read, receives technical details, including your email address, wallet and transaction details, and some other parties’ names and numbers — never message text. Your phone’s backup to Google is switched off for Jeebraac.

Your messages and records leave your phone only when you choose:

• Backup copies your records to your Jeebraac account on our server (section 5.1).
• Help Jeebraac learn shares masked copies of messages Jeebraac has no reading rule for (section 5.2).
• Sharing a report sends it only to the person or app you choose (section 5.3).

Apart from these, the app contacts our server to check the connection, download the rules it reads messages with, and load some screens. These requests carry a random install number and sometimes a record’s random number — never your messages or records. If you are signed in, they also carry your sign-in token, which contains your account ID, email address and username. Like any internet connection, they show Cloudflare and our hosting provider your phone’s IP address. Everything is sent over an encrypted connection (HTTPS).

5.1 If you turn on backup (optional; needs a Jeebraac account and email sign-in)

You can turn on backup during setup, or later with “Back up my record” in Settings, using an email address that already has a Jeebraac account: we send a code to that email, and once you enter it the records on your phone become your account’s and are copied to our server as described below. They stay on your phone too. If the account already holds records, backup is refused and nothing on your phone changes.

A Jeebraac account holds your email address, a username, your phone number only if you gave one when the account was made, a password or PIN if one was set (stored only as a one-way hash), and technical details such as your account ID, its status and when it was made and last changed. It holds no name and no location. The app cannot create an account: accounts are made by the Jeebraac team, or were made with early test versions of the app.

• Your email address identifies your account. We keep it on our server with your account, use it to send you sign-in codes (delivered by Resend), and it is part of the sign-in token. Each sign-in code is stored only as a one-way hash, with your email, your account ID and when it was created, expires and was used.
• Your recorded transactions are sent to our server: amount, type, category, wallet, the transaction date and the time the message arrived, the balance after, the provider’s sender ID and reference number, account numbers and the other party’s phone number and name as the message gave them, a description, review and evidence labels, the link to money you hold for others, your install number, and a fingerprint of the message text used to avoid duplicates. The fingerprint is taken from the full text and stored next to these details, so it does not hide what a provider message said.
• This version of the app never uploads the text of your messages. Records and unreadable messages sent by early test versions may include a message’s full text.
• Turning backup on queues every transaction recorded so far, including imported history, and copies it once each income and expense has a category. Each copied transaction includes the balance after it, so your balances from before backup reach our server this way. Your wallet details, the app’s separate balance-history records from before backup, and your records of money you hold for others are not copied. If the account you sign in to already holds records, backup is refused.
• Balance changes recorded while backup is on are copied too. Linking a wallet while backup is on sends its name, type, the balance you entered, currency, provider, and your wallet phone number or account number.
• With backup on, the app downloads your backed-up wallets each time it starts, and Settings → Restore downloads all your backed-up transactions.
• Edited records are sent again. Records removed on the phone are not removed from our server.
• Uploads that fail are retried until they succeed.
• Turning backup off stops new copies. Copies already on our server stay there until your account is deleted.

Without an account, the Settings “Cloud Sync” switch still sends your recorded transactions each time you open the app; our server refuses them and keeps nothing.

5.2 If you choose “Help Jeebraac learn” (optional, off by default)

When a money message arrives in a format Jeebraac has no reading rule for — one it cannot read, or can read only with its general reader — it can share the message’s shape so we can write a rule for it. Every digit is replaced with a placeholder, and names are replaced where Jeebraac can recognise them; a one-word or lowercase name can remain. For example: “Waxaad <AMOUNT> u dirtay <NAME> (<PHONE>)”. The shape is sent with the provider’s sender ID, your account ID and your install number.

Shapes are sent only while you are signed in, and are sent even if backup is off. If you are not signed in, they are kept on your phone and sent when you sign in. Turning this off (Settings → “Share message shapes”) deletes shapes not yet sent; shapes already sent stay on our server.

When we write a reading rule from a shape, the shape’s wording becomes part of the rule. Rules are published to every Jeebraac phone, are not linked to your account, and are kept after your account is deleted.

5.3 When you share a report

Reports go only where you send them. A CSV report includes merchant names and provider reference numbers; a statement PDF includes wallet names and the balance after each transaction; the business summary shows totals only. Jeebraac writes the file to a private temporary folder and deletes it the next time the app starts once it is more than 24 hours old. It cannot delete copies held by the person or app you sent it to.

We use these companies to run Jeebraac. They handle data for us to provide their service:

• Render — runs our server.
• Supabase — hosts our database.
• Resend — delivers sign-in code emails.
• Cloudflare — serves jeebraac.com, and carries all traffic between the app and our server on its way to Render.

The Jeebraac team can see what reaches our server — your account details, backed-up records and shared shapes — to support you and to write reading rules.

We do not use advertising, analytics or crash-reporting companies, and we do not sell your data. We do not give your data to lenders or anyone else, apart from the companies above. Today your records reach a lender only if you send a report yourself (section 5.3). If Jeebraac later offers to send records to a lender for you, it will do so only after you give separate consent naming that lender, and you will be able to stop it at any time; we will update this policy first.

We will disclose data only where the law requires it.

Communication between the app and our server (through Cloudflare), and between our server and our database, is encrypted. Apart from our team (section 6), your backed-up records can be read or changed only through a request signed in to your account, and only our team can change the reading rules and word list every phone downloads.

On your phone, Jeebraac’s data is kept in the app’s private storage, which Android protects from other apps; it is not encrypted separately, and that includes your sign-in tokens if you use backup. The app is locked with your PIN — but a notification that money you hold for someone has been settled can show that person’s name on your lock screen.

• On your phone: until you use “Reset device” or uninstall the app, or — on a phone with backup on — sign in to a different Jeebraac account, which erases the previous account’s records from the phone, without warning. You cannot delete a single recorded transaction; you can dismiss a message Jeebraac could not read, and forget remembered suggestions. “Reset device” does not remove the recovery copies, Android’s job queue, the copies of our published rules, report files you shared in the last day (they are deleted at a later start), or the phone’s system log.
• On our server: your account (section 5.1: your email address, username, your phone number if you gave one, and a hashed password or PIN if one was set), your backed-up records, records of the sign-in codes we sent you, and your shared shapes are kept until your account is deleted. Nothing is deleted automatically, and turning backup off deletes nothing.
• Logs: our server’s technical logs record, among other things, your account ID, your username (usually the part of your email address before the @), your install number, the names and balances of your wallets, the amounts and directions of transactions you back up, and the full details of one transaction from each backup upload. They are kept for as long as Render keeps our server’s logs. Our database provider and Cloudflare keep their own logs, and our email provider keeps a copy of each sign-in email, each for the limited time that provider keeps them.
• Deleting your account: email [email protected] from the address you sign in with. We will delete your account and everything backed up with it from our database; copies in our providers’ logs and backups go when those expire. Deleting your account does not delete the records on your phone, but the app will then ask you to sign in and cannot open those records without the account — export what you need first, and use “Reset device” to start again on the phone.

You can withdraw the SMS permission; use Jeebraac with no account; turn backup on or off in Settings (“Cloud Sync” or “Back up my record” — backup works only with a Jeebraac account, and is also offered during setup); turn “Share message shapes” (called “Help Jeebraac learn” during setup) on or off in Settings; export statements and reports; and ask us to delete your account.

Jeebraac is made for adults keeping a record of their money, whether for a business, for themselves or for others, and is not intended for anyone under 18. The app does not ask your age.

If we change this policy we will update the date above. If a new version of the app would send a new kind of data from your phone, it will ask for your agreement in the app before sending it. Changes to what we do with data already on our server will be announced on this page before they take effect.

[email protected] · https://jeebraac.com