Privacy Policy

Last updated: July 16, 2026

Vasool One ("we", "our", "the app") is a collection-management app for informal lenders to track customers, loans, collections, and expenses. This policy explains what information the app collects, how it is used, and your choices.

Information We Collect

When you register, we collect:

• Phone number — used as your login ID.
• PIN — used to secure your account. Your PIN is never stored in plain text; it is hashed (SHA-256) before being saved, and the original PIN cannot be recovered from the stored hash.
• Name — as provided during registration.

As you use the app, you may also enter business records that are yours to manage:

• Customer details (name, phone number, address, optional profile/ID photos)
• Loans, collection entries, expenses, and cashout records
• Lines, areas, and other organizational data you create

Contacts Access

If you choose "Import from Contacts" when adding a customer, the app requests permission to access your contacts and opens your device's native contact picker. We only receive the single contact you select — the app does not read, store, or transmit your full contact list.

Photos

Photos you capture or select (customer photo, ID documents, UPI QR codes) are stored locally on your device only. They are not uploaded to our servers or any cloud storage.

Cloud Backup

The app stores your data locally on your device first. To protect against data loss (e.g. if you lose or change your phone), your account and business data — phone number, hashed PIN, name, and the customer/loan/collection/expense records listed above — are also securely backed up to our cloud database, provided by Supabase.

This backup is private to your account: access is restricted using row-level security so that only your own data is ever readable, tied to your account's unique identifier. No other user or lender can access your data.

What We Don't Do

• We do not sell your data.
• We do not share your data with third parties for advertising or marketing.
• The app does not contain advertising or analytics tracking SDKs.

Data Retention & Deletion

Your data is retained for as long as your account is in use. The app does not currently have a self-service "delete account" option. If you would like your account and associated data deleted from our systems, email us at vasoolone@gmail.com from the phone number or email associated with your account, and we will process the deletion.

Children's Privacy

Vasool One is intended for use by adults managing lending businesses and is not directed at children. We do not knowingly collect information from children.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date.