Privacy Policy

সংক্ষেপে (in short)

সহচর আপনার তথ্য শুধু আপনাকে সেবা দেওয়ার জন্য ব্যবহার করে। আমরা আপনার তথ্য বিক্রি করি না। আপনার কাগজপত্র, প্রেসক্রিপশন ও হিসাব শুধু আপনার অ্যাকাউন্টের সাথে যুক্ত থাকে। অ্যাপের প্রোফাইল থেকে যেকোনো সময় অ্যাকাউন্ট মুছে ফেলা যায় — তাতে সব তথ্য মুছে যায়। অ্যাকাউন্ট মুছে ফেলার নিয়ম।

1. Who we are

Shohochor (সহচর) is a personal-utility app for Bangladesh: household finance, bills, documents, vehicles, reminders, government service guides, emergency contacts and a medicine-reminder feature. This policy covers the Android app and the servers behind it.

For anything in this policy, write to shohochor69@gmail.com.

2. What we collect

Almost everything here is something you typed or photographed yourself. We do not buy data about you, and we do not track you across other apps or websites.

Account and profile

• Your mobile number or email address — whichever you sign in with. It identifies the account and is where the one-time code is sent.
• Your name, and optionally a profile photo, district and date of birth.
• Your interface language and notification preferences.

What you file in the app

• Documents. Photographs of documents you scan or upload, and the text read out of them. For a national ID, passport, driving licence or similar this includes the document number, names and dates printed on it.
• Health. Prescription photographs, the medicine names, strengths and schedules read from them, the health profiles you create for yourself or family members, and the doses you mark as taken.
• Money. The transactions, wallets, bills and dues you record. We do not connect to any bank or payment account, and we never move money.
• Vehicles and reminders. Vehicle details, paper expiry dates, and the reminders you set.

Technical

• A device notification token, so a reminder can reach your handset.
• Session records — when a device signed in and when it was last used — so you can be signed out of a lost phone.
• Ordinary server logs, which include IP address and request time and are used to keep the service up and to stop abuse.

We do not collect an advertising identifier. The app does not request the AD_ID permission and contains no advertising or analytics SDK.

3. Why we use it

• To give you the features you opened the app for.
• To send the one-time code that signs you in, and the reminders you asked for.
• To read text out of a document or prescription you chose to scan.
• To keep the service secure — rate limiting, abuse prevention, and investigating faults.

We do not use your documents, prescriptions or finances to profile you, to advertise to you, or to train anyone's models.

4. Who your data reaches

We do not sell personal data and we do not share it for advertising. Data reaches a small number of service providers, each only for the job named:

• Hosting and database. The application servers and the database that stores your account.
• Text recognition. When you scan a document, the image may be sent to Google Cloud Vision or Microsoft Azure AI Vision to be read. Which one is a server-side setting.
• Prescription reading. When you scan a prescription and the feature is enabled, the image is sent to the configured AI provider to extract medicine names and schedules.
• Email and SMS. Your address or number is passed to the email or SMS provider that delivers your one-time code.

We also disclose data where the law requires it, and to protect someone's safety or our rights.

5. How long we keep it

• Account data and everything you filed stays until you delete it or delete your account.
• The raw text read out of a scan is held only for the life of that scanning job and is dropped once you confirm the result. The document itself stays because you asked us to keep it.
• A refresh token expires thirty days after its last use; signing out revokes it immediately.
• Server logs are kept for a short operational period.

6. Your choices

• See and correct. Everything the app holds about you is visible in the app, and editable there.
• Delete a single item. Any document, transaction, bill, vehicle, reminder or prescription can be deleted on its own.
• Delete the account. Profile → Delete account, which removes the account and everything filed under it. You can also request deletion from here.
• Turn off notifications per category in the app, or entirely in Android settings.
• Permissions. Camera access is asked for only when you scan, and can be withdrawn in Android settings at any time.

7. Security

Traffic between the app and our servers is encrypted with HTTPS. Sign-in tokens are held in the Android keystore, not in ordinary app storage, and the app can be locked behind a PIN or your device biometric. The app excludes itself from Android's automatic cloud backup, so your documents and tokens are not copied to a third-party drive.

No system is perfect. If you believe your account has been accessed, write to shohochor69@gmail.com and we will revoke its sessions.

8. Health information

The medicine features exist to help you remember doses. They are not medical advice and are not a substitute for your doctor or pharmacist. Text read from a prescription by software can be wrong; the app shows you what it read and asks you to confirm it before anything becomes a reminder, and the original photograph is always kept so you can check it yourself.

Health data is treated as sensitive: it is never used for advertising, never sold, and is deleted with your account.

9. Children

Shohochor is not directed at children and is not intended for anyone under 13. If you believe a child has created an account, write to us and we will remove it.

10. Changes

If this policy changes in substance we will update the effective date above and, where the change is significant, tell you in the app.