Privacy Policy

Zarah Business is a business management application provided by ZarahTech. This Privacy Policy explains what information Zarah Business collects, how that information is used and stored, and the choices available to users regarding their information.

By using Zarah Business, you acknowledge the data practices described in this Privacy Policy.

1. Information We Collect

Account and Authentication Information

When you create or use a Zarah Business account, we may collect:

• Your phone number
• Account and session identifiers
• Device information required to maintain your authenticated session
• Information used to verify your account through one-time passwords (OTP)

Authentication is handled through Zarah Business's own backend services. OTP messages may be delivered through supported WhatsApp or SMS service providers.

Business Information

You may provide information relating to your business, including:

• Business name and profile information
• Owner information
• Products and inventory
• Stock movements
• Sales and purchases
• Debts and payments
• Cashbook and related business records
• Reports generated from your business records

Customer Information

You may enter information about your own customers, including names, contact details where provided, transaction history, debts, and payments.

You are responsible for ensuring that you have an appropriate basis for entering and managing customer information through the app.

Marketplace Content

When you use marketplace features, we may process information that you choose to provide, including:

• Listing titles and descriptions
• Product or service information
• Prices
• Typed location information
• Images and videos
• Comments, likes, views, and other marketplace interactions

Content you intentionally publish to the marketplace may be visible to other users of Zarah Business.

Voice and AI Information

Zarah Business may allow you to interact with certain features using voice or text commands.

When you choose to use voice or AI-assisted features, audio, text commands, prompts, and relevant context may be processed as necessary to understand your request and perform the requested action.

Microphone access is used only when required for features that you intentionally activate, such as voice interaction.

App Usage and Analytics

We may collect limited product analytics to understand how Zarah Business is used, improve reliability, identify problems, and improve features.

Product analytics are processed through Zarah Business's own backend infrastructure. Zarah Business does not use Firebase Analytics.

Crash and Error Information

We may collect technical crash and error information to diagnose failures and improve application stability.

Zarah Business uses Sentry for error and crash reporting. The application is configured not to intentionally send personally identifiable information, screenshots, or application view hierarchy information to Sentry.

Push Notification Information

Zarah Business uses Firebase Cloud Messaging to provide push notifications. A device notification token may be generated and stored so that relevant notifications can be delivered to your device.

Firebase is not used by Zarah Business for user authentication, business-data storage, or marketplace file storage.

2. Information We Do Not Intentionally Collect

Based on the current functionality of Zarah Business, the app does not intentionally collect:

• Your phone contacts or address book
• Precise GPS location
• Approximate device GPS location
• Government identification numbers

Marketplace users may manually type a location as part of a listing, but Zarah Business does not currently obtain that location from the device's GPS sensors.

3. How We Use Information

We use information processed through Zarah Business to:

• Create and maintain user accounts
• Authenticate users and protect account access
• Provide bookkeeping and business management features
• Record and synchronize business information
• Generate business reports and summaries
• Provide marketplace functionality
• Process voice and AI-assisted requests initiated by users
• Deliver relevant notifications
• Maintain security and prevent abuse
• Diagnose errors and improve reliability
• Understand product usage and improve Zarah Business

4. Local and Cloud Data Storage

On-device storage

Zarah Business is designed as an offline-first application. Business records may first be stored locally on your device using an encrypted SQLite database.

Authentication and session information may also be stored using secure device storage.

Cloud synchronization

When synchronization is available, eligible business information may be transmitted securely to Zarah Business backend services and stored in PostgreSQL.

Marketplace media

Marketplace images and videos you choose to upload are stored using Amazon Web Services infrastructure, including Amazon S3.

5. Third-Party Service Providers

• Amazon Web Services: backend infrastructure and marketplace media storage.
• Firebase Cloud Messaging: push notification delivery.
• Sentry: technical error and crash reporting.
• OTP and messaging providers: authentication OTP delivery through supported channels such as WhatsApp or SMS.
• AI service providers: processing of voice or AI-assisted requests where required.

6. Sharing of Information

We do not sell users' personal information.

Information may be disclosed:

• To service providers required to operate Zarah Business
• When you intentionally publish information through marketplace features
• When required by applicable law or lawful legal process
• To protect users, our services, or others from fraud, abuse, or security threats

7. Data Security

We use technical and organizational measures intended to protect user information, including encrypted local storage, secure authentication sessions, secure network communication, backend access controls, and controlled cloud access.

No system can guarantee absolute security, but we work to reduce risks and protect information appropriately.

8. Biometrics and Local App Lock

Zarah Business may allow supported devices to use biometric authentication, such as fingerprint authentication, to unlock the application locally.

Zarah Business does not receive or store your fingerprint or other raw biometric data. Biometric verification is performed by the operating system, and the app receives only the authentication result required to unlock the application.

9. Notifications

Zarah Business may send push notifications relating to important account, business, security, marketplace, or other relevant service activity.

Notification permissions and preferences can be controlled through available application settings and your device settings.

10. Data Retention

We retain information for as long as reasonably necessary to provide Zarah Business, maintain legitimate security and business records, comply with applicable legal obligations, resolve disputes, and enforce agreements.

Some information may be retained for a limited period after account deletion where required for security, fraud prevention, legal compliance, backup integrity, or other legitimate obligations.

11. Account and Data Deletion

You may request deletion of your Zarah Business account and associated personal data.

You can use the available account deletion controls in Zarah Business or visit:

Following a valid deletion request, we will delete or anonymize associated personal data unless particular information must be retained for legitimate legal, security, fraud-prevention, or regulatory reasons.

12. Children's Privacy

Zarah Business is intended as a business management service and is not designed or directed specifically toward children.

13. Your Choices

• Review or update account and business information
• Control notification permissions
• Choose whether to use optional voice or biometric features
• Request deletion of your account and associated information
• Contact us regarding privacy questions or requests

14. Changes to This Privacy Policy

We may update this Privacy Policy when Zarah Business, its technology, legal requirements, or data practices change.

The latest version will be published on this page with an updated effective date.

15. Contact Us