Your records, your control

Privacy without the fine-print fog.

Lumbayar is a personal lending and repayment tracker. This policy explains what information the app handles, where it goes, and the choices you have.

Effective 27 July 2026

1. Who and what this policy covers

This Privacy Policy applies to the Lumbayar Android application and any Lumbayar webpage that links to it (together, the “Service”). “We”, “us”, and “our” refer to the individual or business that publishes Lumbayar on Google Play.

Lumbayar is designed primarily as an offline tool. Core records are kept on your device unless you deliberately use a sharing, export, purchase, Google sign-in, or Google Drive backup feature.

2. Information the app handles

Records you create

Names or nicknames, lending and borrowing entries, amounts, currencies, dates, repayment status, reminders, account labels, notes, and categories.

Optional files and contacts

Attachments, receipt images, QR images, and contact details you select or import after granting Android permission.

Google account and backup

If you opt in, Google sign-in identity information needed to connect the app and the backup archive uploaded to your private Google Drive application-data area.

Purchase information

Product entitlement, purchase token, subscription state, and transaction identifiers supplied through Google Play Billing. We do not receive your full card or bank details.

Device and diagnostic information

The app or Google Play may process basic device, app-version, crash, security, and purchase-validation information required to deliver, protect, troubleshoot, and update the Service. If analytics or crash-reporting tools are added later, this policy and the Google Play Data safety disclosure must be updated before those tools are enabled.

About other people’s information: when you enter or import someone else’s name, contact details, note, or transaction, you are responsible for having a lawful and appropriate reason to do so and for sharing it only when suitable.

3. Why information is used

  • To display, organise, search, calculate, and report your personal records.
  • To create reminders, exports, reports, and messages you choose to share.
  • To save and restore optional Google Drive backups.
  • To verify Free or Pro access, process purchases, restore purchases, and prevent fraud.
  • To maintain reliability, respond to support requests, comply with law, and protect users and the Service.

Where Malaysian data-protection law applies, we handle personal data for the purposes described here, based as appropriate on your request to provide the Service, your consent for optional permissions and integrations, legitimate operational needs, or legal obligations.

4. Where your records and backups are stored

On your device

Core Lumbayar data and attachment paths are stored locally in the app’s private storage. Device security, operating-system backups, rooting, malware, and anyone with access to your unlocked device can affect that data.

Google Drive app data

If you enable Google Drive backup, Lumbayar uploads a backup file to the special appDataFolder belonging to Lumbayar in your Google Drive account. This is a hidden application-data area: it does not appear as a normal file in “My Drive”, cannot be shared like an ordinary Drive file, and is intended to be accessed only by Lumbayar using your authorised Google account.

Google controls the Drive infrastructure and handles information under its own terms and privacy policy. Disconnecting Google stops future app access; removing an app does not necessarily erase every existing device export or backup, so use the deletion controls described below.

Manual exports and sharing

When you export a backup, PDF, spreadsheet, image, or message, Android lets you choose the destination. That copy may then be held by another app, person, cloud service, or messaging provider outside our control.

5. When information leaves the app

We do not sell or rent your personal records. Information may be processed by:

  • Google Play, for app distribution, billing, subscription management, purchase restoration, fraud prevention, and platform diagnostics.
  • Google Sign-In and Google Drive, only when you choose to connect and use cloud backup.
  • Android and apps you select, when you import a contact or attachment, open a file, or share an export or reminder.
  • Professional advisers, authorities, or successors, where reasonably necessary to comply with law, enforce rights, investigate misuse, protect safety, or complete a legitimate business transfer.

Third-party services have their own privacy practices. Review Google’s Privacy Policy and the policies of any app or service you choose as an export destination.

6. Retention and deletion

Device records remain until you delete them, clear the app’s data, restore a different backup, or uninstall the app, subject to Android or device backups. Purchase records may remain with Google and in our entitlement records for as long as reasonably necessary for restoration, accounting, dispute handling, fraud prevention, and legal compliance.

You can delete individual records in Lumbayar, clear app data in Android settings, and remove manually exported copies from wherever you saved them. Google Drive app data can be removed through your Google account’s connected-app or app-data controls. If an in-app deletion control is provided, you may use that as well.

If you contact us for deletion or access, we can act only on information we control. We cannot retrieve or erase files that exist solely on your device, in a recipient’s chat, or in a third-party account we cannot access.

7. Your choices and rights

  • Decline Contacts, Photos, Camera, or file permissions; related features may be unavailable.
  • Use the app locally without connecting Google Drive.
  • Disconnect Google access and delete its stored app data.
  • Manage or cancel a subscription through Google Play.
  • Request information about, correction of, or deletion of personal data we control, subject to identity verification and applicable law.

8. Children

Lumbayar is not directed to children under 13 and is not intended for anyone who cannot lawfully enter into these Terms in their location. We do not knowingly seek personal data from children. A parent or guardian who believes a child has provided information to us should contact us.

9. Security

We use reasonable safeguards appropriate to the Service, including Android app-private storage, scoped permissions, and Google’s authorised interfaces. No device, transmission, backup, or storage system is perfectly secure. Keep your device locked and updated, protect your Google account, verify recipients before sharing, and retain a backup appropriate to the importance of your records.

Unless the app explicitly says otherwise, do not assume that manual backup or export files are encrypted. Avoid recording sensitive identity, bank-login, card, or authentication information in notes or attachments.

10. International processing

Google and other providers you choose may process information in Malaysia and other countries. Those locations may have different data-protection rules. Their contractual, technical, and legal safeguards apply to information they process.

11. Changes to this policy

We may revise this policy when features, providers, or legal requirements change. The effective date above will be updated. Material changes may also be highlighted in the app or store listing. Continued use after a change means the revised policy applies to subsequent use, where permitted by law.

12. Contact

Contact Lumbayar

For privacy questions, data-protection requests, or concerns about how information is handled, email [email protected].

For general assistance with Lumbayar, email [email protected].

For licence, subscription, and acceptable-use rules, read the Lumbayar Terms of Use.