Privacy Policy — Sofra

App: Sofra (app.sofra), distributed on Google Play. Developer / data controller: Khaled Ahmed — khaled.khaledahmed@gmail.com Effective: 24 August 2026 · Applies to version: 1.0.0 Language: This policy is published in English and Arabic. The English text governs if the two ever differ.

Every statement below is written about version 1.0.0 specifically, and each is verifiable against the app package itself. If a future version changes any of this, the policy will be updated first and the change announced in the app before that version ships — see Changes.

The short version

Sofra has no internet access at all. As of version 1.0.0 the app does not request the Android internet permission, which means it is technically incapable of transmitting anything — there is no account, no analytics, no crash reporting, no advertising, and no server of ours for your data to reach. Everything you enter stays on your phone, in the app's own private storage.

What the app stores, and where

All of the following lives in the app's private storage on your device only:

• People's names you type when splitting a bill, and named groups you save.
• Bill contents: items, prices, charges, and the calculated totals, including your history of completed bills.
• Payer details you choose to add: a phone number or payment identifier for the person being paid back, so a shared bill can say who to pay and how to reach them. If you pick a number from your contacts, the app receives only the single number you picked, through the Android contact picker — the app has no contacts permission and cannot read your contact list.
• Receipt photographs, if you use the receipt scanner. The photo is kept beside the bill it was read from, on this phone only.
• Your settings: language, theme, and default charges.

The app cannot send any of this anywhere, and we never see it.

The receipt scanner works entirely on your phone

The camera permission — the only permission the app requests — exists so you can photograph a receipt. The text recognition model ships inside the app and runs on your device. The photo is never uploaded, because the app has no ability to upload anything. A photo chosen from your gallery arrives through the Android photo picker, without any storage permission.

Backups: your Google account, your control

Your bills, groups, and settings are included in Android Auto Backup, which — if you have device backup enabled — stores them encrypted in your own Google account, under Google's terms, where we have no access. You can switch this off at any time in your device's backup settings. Receipt photographs are excluded from cloud backups; they only follow a direct device-to-device transfer when you move to a new phone.

Sharing is always your action

Nothing leaves the app unless you share it. When you share a bill summary or card, Android shows you its share sheet and you choose the receiving app; from that moment the shared text or image is governed by that app's own privacy policy. The app itself sends nothing to anyone.

InstaPay, where available. On devices that have Egypt's InstaPay app installed, Sofra offers a payment handoff: it can copy details you entered and open InstaPay, and can keep a payment link or QR code that you share into Sofra from InstaPay. Everything that happens inside InstaPay is between you, your bank, and InstaPay under its own terms — Sofra passes nothing to InstaPay beyond opening it, never initiates or verifies a payment, and stores the link or code you shared only on your device, like everything else. On devices without InstaPay, none of this appears. InstaPay is operated by Egyptian Banks Company under the Central Bank of Egypt; Sofra is independent of both.

Deleting your data

• Delete everything: Settings → Your data → Delete everything on this phone removes all bills, groups, receipt photos, payer details, and settings.
• Individual bills can be deleted from the history screen.
• Uninstalling the app removes all of its local data from the device.
• To remove the cloud backup as well, delete the app's backup data from your Google account's Android backup settings, or disable backup before uninstalling.

Because we hold no copy of your data, there is nothing for us to delete on any server — deletion on your device is complete deletion.

Your rights

Where the GDPR or similar data protection law applies to you, you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority. This app's design answers them directly: no personal data is collected or processed by us at all — everything is on your device, readable in the app, correctable in the app, and deletable in the app. The legal basis for the on-device handling of what you type is that you asked for it: the data exists solely to perform the calculation you requested. For any question or request, contact khaled.khaledahmed@gmail.com.

Children

The app is a bill-splitting utility for general audiences and is not directed at children. It collects nothing from anyone, children included.

If the app ever gains online features

Any future feature that transmits data — for example, optionally sharing receipt images to improve the scanner — will be opt-in with explicit, informed consent, off by default, revocable, and never a condition of using the app. Such a version would request the internet permission, which is a visible change to the app's package, and this policy would be updated before that version is released.

Changes to this policy

If we change this policy, the new version will be published at this address with a new effective date and version number, and materially different practices will be announced in the app before they take effect. Changes are never retroactive: data handled under this version stays under this version's terms.

Contact

Khaled Ahmed — khaled.khaledahmed@gmail.com