গোপনীয়তা নীতিPrivacy Policy

1. What stays only on your phone

• Settings: language, text size, contrast and whether app lock is on.
• My property (private vault): property files, dag/khatian/area details, names, family details, photos/PDFs of documents you add, checklist progress and saved calculations.
• Vault data is encrypted with AES-256-GCM; the key is kept in the protected Android Keystore. App data is excluded from Google/device backups.

Nothing in the vault is sent to the marketplace automatically. We never receive this data, cannot see it and cannot recover it for you.

Reading a paper with AI (optional): when you tap “Read the paper with AI” on a photo in the vault and agree, that one photo is sent over the internet through our server to the AI service Anthropic (Claude) so that the deed number, dag, area, names and similar details can be read into the fields. Our server stores neither the photo nor the result. Anthropic processes the photo under its own terms and privacy policy for the Claude service.No account or sign-in is needed. NID cards are never sent to the AI. Unless you tap the button, no paper leaves your phone. The AI can misread, and its reading is not proof that a paper is genuine.

2. Marketplace data stored on our server

Listings and the map can be browsed without signing in. When you sign in and use the marketplace, we store:

• Phone number — for your account and sign-in. The sign-in code is sent by SMS.
• Profile — name, address, role (buyer, seller, broker and so on), district, a short description, and whether you want to buy or sell.
• Listings, photos, videos and audio — property details, price, area, photos, videos and a spoken description in your own voice. Listings can be posted only from the app. Photos and videos must have been taken in the last 15 days; to check this, the date and place they were taken are read from the file when you upload it. That date and place are visible only to you and moderators, who compare them with the land's location; every hidden detail (date, location, phone model) is removed from the published copy. Everyone else only sees whether the photos/videos were taken near the land.
• Messages — listing enquiries are stored on the server. Chat messages, photos and videos are kept only on the phones of the two people: the server holds them only until the other phone has them (at most 30 days for messages, 7 days for photos and videos) and then deletes them. Chats cannot be recovered if the phone is lost.
• Land status — a "selling land" / "looking to buy land" status with the address, area, price and note you write and the phone's GPS position when you set it (GPS must be on). Others see an approximate position (about 1 km) and a whole-kilometre distance; only you see the exact one.
• Location — the land's location can only come from the phone's GPS while you stand on the land, or from a photo/video taken there. If you turn on “Share my location”, the phone's position at the time is kept when you save the listing and with each photo/video upload; only you and moderators see it, and it is used to catch fake listings. You may also share an approximate position (rounded to about 1 km) on your profile so nearby buyers and sellers can find you. The app never reads location in the background.
• Profile photo (optional) — if you add one. The server crops and shrinks it and removes every hidden detail (location, date, camera). Uploading a new one or removing it deletes the old file.
• Schedule — the free hours you share (which weekdays and times) and their rules; land visits, meetings and calls agreed with other people, with their time, subject, place and message; and entries you add yourself (title, time, place, note and, if you wish, the name and phone of the person you are meeting).
• Other activity — connection requests, blocks, favourites, saved searches, visit requests, service-provider applications, service requests and reviews, support tickets, reports and online status.

Mouza maps: When you search mouza maps, the district, upazila, survey and the mouza name or JL number you type are sent to our server. To count downloads without login, your IP address is kept only as a keyed hash for at most 24 hours. Downloaded maps stay only on your phone, open without internet and are not backed up. The maps are collected copies; the official sources are DLRS, land.gov.bd or the district record room.

3. Who can see what

• Everyone: approved listings, photos and approximate locations (about 1 km); the approved provider directory. An exact location or a phone number is shown only when the seller chooses that.
• Signed-in users: your profile, including the address you write on it (you can hide it from search). You need not give a house number. Your phone number is never shown on a profile. Nearby people see a whole-kilometre distance, never coordinates.
• Profile photo and free hours: your profile photo is seen only by signed-in users you have not blocked. Sharing free hours is off by default; when on, the people you choose (your connections only, or everyone) see only your free times, never your other plans or their details. Only you see the details of entries you add yourself.
• Participants: messages, visits and service requests are visible only to the people in them. Chats are on the two phones only. Your connections can see whether you are online.
• Authorised moderators: may access stored records to handle reports, safety and support. Messages are not end-to-end encrypted.

4. Reports, blocking and suspension

You can report any listing with a reason (fake listing, not the owner, asking for money in advance, wrong details, already sold, offensive content or something else), report any person or conversation, and block anyone. A report sends your reason and a copy of the profile or message concerned to the moderators. We may remove listings or suspend accounts that break the rules. For a suspended account we keep the phone number and the reason so that the same number cannot simply register again; this record remains even if the account is deleted.

5. Who we share data with

• SMS provider (BulkSMSBD): receives your phone number and the text message containing your sign-in code.
• Map (OpenStreetMap): when you open the map, the tile server receives your IP address and requests for the area you view.
• Google Maps: “Directions” opens Google Maps with the destination; Google's policy applies.
• AI service (Anthropic, through api.bunon.ai): receives only the photo of a paper on which you tap “Read the paper with AI” (see section 1). When you tap “Plain answer with AI” in the guide, your question and the matching parts of the app's handbook are sent; when you tap “Tidy the description with AI” in a listing, the text in the description box and the form details (property type, area, size, price) are sent. None of this is kept after the answer is made or written to logs. Do not type NID numbers, phone numbers or full deed details in a question.
• Hosting: the server runs in a rented data centre; connections are encrypted with HTTPS.

We do not sell data or give it to advertisers. We may have to disclose data to authorities when the law requires it.

Ads (Google AdMob)

To keep the app free, some screens show a Google AdMob banner at the bottom, and occasionally a full-screen ad at a natural break (for example after a practice quiz or when you close a guide). To show ads, Google collects directly from your phone the advertising ID, approximate location (from the IP address), device type, ad views and taps, and diagnostic data, under Google's policies (policies.google.com/technologies/ads). We do not receive this data. Your vault papers, calculations, chats, phone number and land details are never given to advertisers or to Google; there are no ads on the lock screen, the vault, chat or forms. You can reset the advertising ID or opt out of personalised ads in your phone's Settings → Google → Ads. Where the law requires consent, the app asks first, and Settings → “Ad privacy choices” changes it later.

6. Permissions

• Internet — for the marketplace, and for reading a paper with AI when you ask for it. The guide, calculator and vault do not use it on their own.
• Location (optional) — only when you tap and while the app is open: to find nearby land or people, or to place a listing. The app never reads location in the background, and you can pick an area by hand instead.
• Camera, gallery and files — only when you choose to add a photo, video or document; the app receives only the files you select.
• Microphone (optional) — only when you record a spoken description for a listing. The recording is published as part of the listing.
• Fingerprint / screen lock — for the optional app lock. Android performs the check.

7. Deleting your data and how long we keep it

• Marketplace account: in the app, Marketplace → Account → Delete account. Your listings, photos, profile, connections, messages, location and other records are removed from the server. If you cannot sign in, follow the steps on Delete your data.
• Vault on the phone: Settings → Delete all data. Uninstalling the app also removes data on the phone, but the marketplace account must be deleted separately.
• Sign-in codes last 5 minutes, sessions 7 days, notifications 90 days, past schedule entries up to 1 year after they end, encrypted server backups about 30 days and web server access logs 14 days. Sold listings stay visible, marked “sold”, for 90 days.
• We cannot erase screenshots that someone else took of your listing or messages.

8. Age

The app and the marketplace are for adults (18+) and are not designed for children. If we learn that someone under 18 has created an account, we delete it.

9. Other apps and websites

• Audio guidance: when you tap “Listen”, the text is handed to the text-to-speech engine installed on your phone. That engine's own policy applies.
• Government land-service links: these open in your browser. The app never submits anything on your behalf.
• Google Play: Google Play installs and updates the app. Google shows us only aggregate statistics.

10. Backup files

You may create a password-protected backup file of the vault and keep it wherever you choose. We never receive it. Without the password the file cannot be opened.

11. This website

The web server keeps standard access logs (IP address, time, page visited) for security and troubleshooting, for no more than 14 days. The Bangla web font is loaded from Google Fonts, so your browser sends a request to Google's servers.

12. Details, changes and contact

Detailed marketplace rules: marketplace privacy and terms. Changes will be published on this page with a new effective date. Questions: contact@bhitamati.tulx.app