%20--%3e%3cg%20stroke='%23fff'%20stroke-width='1.7'%20stroke-linecap='round'%20stroke-linejoin='round'%20fill='none'%3e%3cpath%20d='M11.5%208.5%20V12'%20/%3e%3cpath%20d='M13%208.5%20V12'%20/%3e%3cpath%20d='M14.5%208.5%20V12'%20/%3e%3cpath%20d='M13%2012%20V22.5'%20/%3e%3c/g%3e%3c!--%20Spoon%20--%3e%3cellipse%20cx='19'%20cy='12'%20rx='2.8'%20ry='3.7'%20fill='%23fff'%20/%3e%3cpath%20d='M19%2015.2%20V22.5'%20stroke='%23fff'%20stroke-width='1.7'%20stroke-linecap='round'%20fill='none'%20/%3e%3c/svg%3e)
Privacy Policy
Last updated: July 18, 2026
This Privacy Policy explains how Bitflecks (“we”, “us”, or “our”) collects, uses, and shares information when you use the Messtro mobile app and this website (together, the “Service”). Messtro helps a shared household or hostel (a “mess”) pool its food and bills, track meals, and keep a shared ledger. By using the Service you agree to this policy.
1. Information we collect
We collect only what we need to run the Service:
- Account & profile. When you sign in with Google, we receive your name, email address, profile photo, and a Google account identifier. We use these to create and secure your account.
- Mess content you create. Information you and your mess add — member names, emails and phone numbers, meal records, deposits and withdrawals, bills, payments, one-off expenses, notes, and the resulting balances/ledger. This is largely financial record-keeping about your shared household.
- Premium purchase details. If a manager buys Premium on this website, we collect the plan selected and the payment proof you enter — the mobile number you paid from and the bKash/Nagad transaction ID — solely to verify and apply your payment.
- Notifications. A device push token (via Firebase Cloud Messaging) so we can send you relevant alerts, such as approval requests and reminders. You can turn off notifications in your device settings.
- Technical & diagnostic data. Standard information our infrastructure provider records to operate the Service reliably and securely, such as device/app version, approximate timing of requests, and error logs.
2. How we use your information
- Provide the Service and sync your mess's data across its members' devices.
- Authenticate you and keep accounts and data secure.
- Calculate meals, bills, balances, and monthly summaries.
- Verify and apply Premium payments, and manage entitlements.
- Send operational notifications you've enabled.
- Respond to support requests and prevent abuse or fraud.
- Comply with legal obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
3. How your information is shared
- With your mess. Data you add to a mess is visible to the other members of that mess — that is the core purpose of a shared ledger. The mess manager can manage members and records.
- Service providers. We use Google Firebase (Authentication, Cloud Firestore, Cloud Functions, and Cloud Messaging) to host data and run the Service. Your data is processed on Google's infrastructure under their terms and security controls.
- Payment verification. Premium payment proof is reviewed (by us and via mobile-financial-service transaction records) only to confirm your payment.
- Legal reasons. We may disclose information if required by law or to protect the rights, safety, and security of our users or the Service.
4. Data retention & deletion
We keep your information while your account and mess are active. Detailed month-by-month records may be retained for a limited window (which can vary by plan) and older raw detail is pruned once a month is closed, while summary balances are carried forward. You can leave a mess or, if you are the manager, delete the entire mess — deleting a mess removes its records. If you want your account and associated personal data deleted, contact us (see below) and we will act on your request, subject to any records we must retain for legal or fraud-prevention reasons.
5. Your rights & choices
- Access and review your data within the app.
- Correct information you've entered, or ask us to help.
- Leave a mess, or delete a mess you manage.
- Turn off push notifications in your device settings.
- Request deletion of your account and personal data by emailing us.
Depending on where you live, you may have additional rights (such as access, correction, deletion, or objection). Contact us to exercise them.
6. Security
Access to data is restricted by authentication and server-side security rules, and traffic is encrypted in transit. No method of transmission or storage is 100% secure, but we work to protect your information and limit access to what each member is permitted to see.
7. Children's privacy
The Service is intended for adults managing a shared household and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
8. International data processing
Our infrastructure is hosted with Google in the Asia-Southeast (Singapore) region. If you use the Service from another country, your information may be processed in locations outside your own, with appropriate safeguards from our provider.
9. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes may be communicated in the app or on this site.
10. Contact us
Questions about this policy or your data? Email us at [email protected].