Legal

Privacy Policy

Last updated: July 5, 2026

This is a general template and should be reviewed by legal counsel before launch.

Yaar Khata ("Yaar Khata", "we", "us" or "our") operates the Yaar Khata mobile application, the website at yaarkhata.com, and related services (together, the "Service") that help people split and track shared expenses. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. By using the Service you agree to the practices described here.

1. Information we collect

We collect information you provide, information created as you use the Service, and a limited amount of technical information.

Account information

Identity & contact details — your name, email address and (if you provide it) phone number, used to create and secure your account and to let group members recognise you.
Profile details — display name, profile photo and preferences such as language and theme.

Financial & group data

Groups and members — the groups you create or join and the members in them.
Expenses, income and transfers — amounts, descriptions, categories, dates, who paid, how a cost was split, and any receipt photos you attach.
Settlements and balances — records of who owes whom and payments marked as settled within a group.
Activity — a log of actions taken in a group so members stay in sync.

Please note that expense and settlement records are inherently shared: other members of a group can see the expenses, splits and balances that involve them.

Billing information

Subscription details — the plan you choose, trial status, renewal dates and a customer/subscription identifier from our payment processor. Payment card details are handled by Stripe and are not stored on Yaar Khata's servers (see Section 5).

Support information

Tickets and messages — the content of support tickets you raise in-app or emails you send to support, along with any details you include.

Technical information

Device & usage data — app version, device type, operating system, general log data and diagnostic information used to keep the Service reliable and secure.
Approximate location — we do not track precise GPS location; any location context is only what you voluntarily add to an expense.

2. How we use your information

To provide the Service — creating groups, recording expenses, calculating balances and suggesting settle-up payments.
To manage your account, authenticate you and keep it secure.
To process subscriptions, trials and renewals through our payment processor.
To sync data in real time between members of a group.
To respond to support requests and communicate important service notices.
To maintain, troubleshoot and improve the Service, and to prevent fraud and abuse.
To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your expense data to build advertising profiles.

3. Legal bases for processing

Where applicable law requires a legal basis, we rely on: performance of a contract (to deliver the Service you signed up for), legitimate interests (to secure, maintain and improve the Service), consent (for example, optional communications, which you may withdraw), and legal obligation (to meet tax, accounting and other legal requirements).

We share information only as needed to run the Service:

With other group members — expenses, splits, balances and activity are visible to the members of the relevant group.
With service providers — trusted vendors who host our infrastructure, store data, send email, or provide analytics and error monitoring, acting on our instructions.
With our payment processor (Stripe) — to process subscription payments (see Section 5).
For legal reasons — where required by law, regulation, legal process or a valid government request, or to protect the rights, property and safety of our users, the public or Yaar Khata.
In a business transfer — if Yaar Khata is involved in a merger, acquisition or sale of assets, information may be transferred, subject to this policy.

5. Payments & Stripe

Subscription billing is handled through Stripe (integrated using Laravel Cashier). When you subscribe to a paid plan, your payment card details are collected and processed directly by Stripe under Stripe's own terms and privacy policy. Yaar Khata receives confirmation of payment status, plan and renewal information and a Stripe customer/subscription identifier, but does not receive or store your full card number. Payments are processed in Rs / PKR. We encourage you to review Stripe's Privacy Policy to understand how they handle your data.

6. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. Specifically:

Account & profile data — retained until you delete your account, then removed or anonymised within a reasonable period (typically up to 30 days), except where longer retention is required by law.
Group & expense data — because records are shared, an expense that involves other members may remain visible to those members even after you leave a group; your personal identifiers are removed or anonymised when you delete your account.
Billing records — transaction and invoice records may be retained for up to seven years to meet tax, accounting and legal obligations.
Support records — retained for a reasonable period to help us assist you and improve support.
Backups — residual copies may persist in secure backups for a limited time before being overwritten.

See our Account & Data Deletion page for how to request deletion.

7. How we protect your data

We use technical and organisational measures to protect your information, including encryption in transit (HTTPS/TLS), access controls, hashed passwords, audit logging and regular backups. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to safeguard your data and will notify you and the relevant authorities of a breach where required by law.

8. Your rights & choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate or incomplete information (much of which you can edit in the app).
Delete your account and associated personal data.
Object to or restrict certain processing, and withdraw consent where processing is based on consent.
Request a copy of your data in a portable format.

You can exercise many of these rights directly in the app, or by emailing support@yaarkhata.com. We will respond within the timeframe required by applicable law.

9. Children & age

Yaar Khata is not intended for children. You must be at least 18 years old, or the age of majority in your jurisdiction, to create an account. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

10. International transfers

We are based in Pakistan and primarily serve users here, but some of our service providers (including Stripe and hosting or infrastructure vendors) may process data in other countries. Where information is transferred internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after changes take effect means you accept the revised policy.

12. Contact us

If you have questions or requests about this Privacy Policy or your data, contact us at support@yaarkhata.com. We're happy to help.