Zimmati Privacy Policy

Last updated: 17 October 2026

Zimmati is an app for keeping track of shared expenses — what a group spent, who paid, and who owes whom. This policy explains exactly what we hold, why we hold it, and what you can do about it.

Zimmati is operated by Muhammad Sulman Gull, trading as Techoship ("we", "us"). You can reach us at techoship.com/contact.

The short version

• We hold the expenses you enter, and the account details needed to sign you in.
• We do not sell your data, and we show no advertising.
• We run no analytics or tracking SDK of any kind.
• We have no access to any bank account or card. Zimmati never moves money.
• We never upload your address book.
• Premium users can keep a private record of someone not on Zimmati; nothing about it transfers to that person unless you both agree.
• You can export everything, and you can delete your account from inside the app.

What we collect

Account details

When you sign in we receive, through Firebase Authentication, the identifier you signed in with: a phone number, an email address, or a Google or Apple account identifier. We store your display name, your username, and your profile picture if you set one.

What you record in the app

The substance of Zimmati is what you enter: expense descriptions, amounts, currencies, dates, categories, notes, how each expense is split, the groups you create or join and their names and cover images, settlements you record, and comments you write on expenses.

This information is shared with the people you share it with — the members of a group see that group's expenses, and a friend sees expenses you are both part of. That is the purpose of the app.

Receipt images

If you attach a photo of a receipt to an expense, we store that image and show it to the people who can see that expense. Receipt images are a paid feature. Deleting the expense deletes the image.

People who are not on Zimmati

Zimmati Premium lets you keep a record of someone who does not use the app — a flatmate or a relative you split costs with — so their share can be counted. To do that we store a name you choose for them and the phone number you identify them by, alongside the expenses you record against them.

This is information about somebody who has not agreed to anything, so it is worth being exact about what happens to it:

• It is yours, not ours. Only you can see it, edit it or delete it. It never appears in search, it is never suggested to anyone, and no notification is ever sent to that number.
• Except where you share it. If you add them to a group, the other members of that group see the name you gave them and their share of the expenses — marked as somebody who is not on Zimmati. That is the point of adding them, and it is the one place this record is visible to other people.
• It never reserves their phone number. They can sign up for Zimmati with that number at any time, exactly as if the record did not exist.
• Nothing transfers without both of you agreeing. If they do join, you are told, and you decide whether to offer them your records. If you offer, they are told what it contains and decide whether to accept. If either of you declines, the record stays with you and never becomes theirs.
• The figures are one-sided, and shown that way. They cannot confirm an amount, dispute one, or record that they have paid you back, because they are not there.

If someone contacts us because a record about them exists and they want it removed, we will act on that — write to us at techoship.com/contact.

Contacts

If you grant contacts permission, Zimmati reads your contacts on your device to show you a list of names. We do not upload your address book. When you tap a specific contact to invite or add them, and only then, that one phone number is sent to our server to check whether it belongs to an existing Zimmati account. We do not store numbers that do not match.

You can use Zimmati without granting contacts permission.

Technical details

We store a notification token so we can send you push notifications, and your device's language and currency so the app starts with sensible defaults. Our servers keep ordinary request logs.

What we never collect

We have no connection to your bank, no access to any card, and no ability to import transactions. Every figure in Zimmati is one that a person typed in. We do not run advertising or analytics software, and there is no third-party tracking in the app.

Why we hold it

• To run the service — you cannot split an expense without recording it.
• To identify you to the people you share expenses with, and to let them find you.
• To notify you when something happens that affects what you owe or are owed.
• To keep the service secure, including verifying that requests come from a genuine copy of the app.
• To honour a subscription you have bought.

Who else is involved

Zimmati runs on Google Cloud and Firebase. Google processes data on our behalf for authentication, database storage, file storage, push notifications and app integrity checks. If you buy a subscription, Google Play processes the payment — we never see your card details.

We do not sell your information, and we do not share it with anyone else except where the law requires it.

Where it is held

Data is stored on Google Cloud infrastructure and may be processed in countries other than your own. Google applies appropriate safeguards for these transfers.

How long we keep it

We keep what you record for as long as your account exists, because a shared ledger is only useful if it is complete — a balance is the sum of its history.

When you delete your account we remove your profile and personal details. Expenses you shared with other people are not deleted from their records, because doing so would silently change what they are owed. Your name is replaced in those shared entries.

Your choices

• See everything. Export a complete spreadsheet of your expenses and settlements from the app at any time.
• Correct it. Edit your name, username, picture, and any expense you are entitled to change.
• Delete it. Delete your account from Profile. This cannot be undone.
• Limit it. Turn off contacts permission, notifications, or both. The app still works.
• Block someone. Blocking hides you from each other.

Depending on where you live you may have further rights over your data, including the right to object to processing or to complain to a data protection authority. Write to us at techoship.com/contact and we will help.

Children

Zimmati is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will remove it.

Security

Access to your data requires a valid sign-in. Traffic is encrypted in transit, and requests are checked to confirm they come from a genuine build of the app. No system is perfect; if a breach ever affects you, we will tell you.

Changes

If we change this policy we will update the date above, and we will tell you in the app if the change is significant.

Contact

Muhammad Sulman Gull, trading as Techoship
Layyah, Punjab
Pakistan
techoship.com/contact