PRIVACY POLICY DueTrack — Hisab Sahakari Effective Date: February 10, 2026 | Last Updated: April 09, 2026
DueTrack ("we," "our," or "us") is an IT-enabled service operated by Moniruzzaman Monjil, Gala Union Parishad, Tangail Sadar, Tangail, Dhaka, Bangladesh (Trade License No: 3219613403948). This Privacy Policy explains how we collect, use, store, and protect your information when you use our software at duetrack.com.bd, app.duetrack.com.bd, and the DueTrack Android app. By using DueTrack, you agree to the terms described in this Policy. If you do not agree, please discontinue use of the Service.
1. Information We Collect
1.1 Information You Provide Directly Account Registration: Mobile phone number, business name, and password (stored encrypted). Business Data: Names, phone numbers, and financial records of your debtors. Transaction Records: Income, expense, stock, and due payment entries. Communications: Messages or queries submitted to our support channels.
1.2 Information Collected Automatically Usage Data: Pages visited, features used, and actions taken within the app. Device Information: Browser type, operating system, and screen resolution. Session Data: Login timestamps and session duration. IP Address: For security monitoring and fraud prevention.
1.3 Android App — Firebase FCM When you use the DueTrack Android app, we collect a Firebase Cloud Messaging (FCM) token to deliver push notifications to your device. This token is not shared with third parties beyond Firebase (Google LLC) for notification delivery only.
1.4 Information We Do NOT Collect We do not collect credit card numbers or banking credentials, national ID or government identification numbers, biometric data, or GPS location data.
2. How We Use Your Information
We use your information for the following purposes only: Service Delivery — to operate, maintain, and improve DueTrack. Account Management — to authenticate users and manage access. SMS Reminders — to send due reminders via SMS on your behalf. Push Notifications — to deliver important alerts via Firebase FCM. Customer Support — to respond to queries and resolve issues. Security — to detect and prevent unauthorized access or fraud. Legal Compliance — to fulfill obligations under applicable Bangladesh law. We do not use your data for advertising, user profiling, or sale to third parties under any circumstances.
3. Data Storage and Security
3.1 Storage Location All user data is stored on servers physically located within Bangladesh. We do not transfer your data to servers outside of Bangladesh.
3.2 Security Measures We implement SSL/TLS encryption for all data in transit, industry-standard password hashing (passwords are never stored in plain text), OTP-based login verification, session timeout protection, and automated cloud backups.
3.3 Retention We retain your data for as long as your account is active. Upon deletion, all data is permanently removed within 30 days, except where retention is required by applicable law.
4. Information Sharing
We do not sell, rent, or share your personal information with third parties except in these limited cases: SMS Provider (mimsms.com) receives only the recipient's phone number and message content to deliver your reminders. Firebase (Google LLC) receives your FCM token solely to deliver push notifications to your Android device. Legal Obligations may require disclosure if ordered by a court or government authority in Bangladesh. Business Transfer: users will be notified before any data is transferred in a merger or acquisition.
5. Your Rights
You have the right to access a copy of your personal data, correct inaccurate information via your account settings, request deletion of your account and data (see Section 6), and request a portable export of your business data. To exercise any right, contact us at support@duetrack.com.bd.
6. Account and Data Deletion
In compliance with Google Play policy, you may request deletion of your account and all associated data at any time through three methods: In-App by going to Settings > Account > Delete Account; by Email at support@duetrack.com.bd with subject "Account Deletion Request"; or via our Online Form at duetrack.com.bd/contact. After deletion, all personal information is permanently erased within 30 days, including all debtor records, transaction history, and SMS logs. Deleted data cannot be recovered. Note: Deleting your account does not entitle you to a refund for any unused subscription period.
7. Cookies and Tracking
DueTrack uses only the minimum cookies necessary: to maintain your login session, remember display preferences, and understand platform usage through analytics (no personally identifiable data is shared with analytics providers). We do not use third-party advertising cookies.
8. Children's Privacy
DueTrack is intended for adults aged 18 and older. We do not knowingly collect information from individuals under 18. If we become aware that a minor has registered, we will promptly delete the account and all associated data.
9. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, registered users will be notified via the app or email at least 7 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
10. Contact Us
DueTrack, Tangail Sadar, Tangail, Dhaka, Bangladesh. Email: support@duetrack.com.bd | Support: contact@duetrack.com.bd