سياسة الخصوصيةPrivacy Policy

1. Who we are and what this policy covers

This policy applies to the Raqame app for Android (package id com.ak.raqame) and to the raqame.net website. By using the app or the website you agree to this policy. Privacy contact: support@raqame.net.

A note about the website: raqame.net pages use Google Fonts to render text, which means your browser requests font files from Google's servers and your IP address reaches Google in the process, under the Google Privacy Policy. The website itself uses no tracking cookies and no analytics.

2. Data stored on your device (and never leaves it)

Raqame is an offline-first app by design. All of your business data is kept in a local database inside the app's private storage on your device, including: products and inventory, invoices, sales and purchases, customers and suppliers and their balances, accounting entries, users, permissions and the audit log, settings, and product photos.

We — the app developer — have no access to this data, and it is never uploaded automatically to any server.

3. What is sent over the internet, and why

The app connects to the internet only in a few clearly-defined cases:

3.1 The license server

When you activate, transfer, or periodically revalidate a license, the app sends to our license server:

• Your activation code, or the purchase identifier (the Google Play purchase token when buying through the store).
• A hashed device fingerprint: a SHA-256 digest of a device identifier combined with the app id. It cannot be reversed, does not reveal your identity or location, and is used solely to bind the license to one device and prevent abuse.
• License status and dates (for activation, renewal and transfer).

The app also contacts the license server periodically — when it is opened, when connectivity returns, and once on first launch — sending only the same hashed fingerprint, to check the license and referral-program status (crediting extra trial days, and crediting your friend's invite if you installed through an invite link).

No business data (no invoices, products, or customers) is ever sent to the license server.

3.2 Google Play purchases

In-app purchases are processed entirely by Google Play. We never see your card or payment details; we only receive confirmation that a purchase completed so we can activate your license. Payments are governed by the Google Privacy Policy.

3.3 Google Sign-In (optional)

If you choose to sign in with Google, we receive your basic profile (name, email, avatar) for two purposes only: linking your license to your account (so you can release it remotely if your device is lost), and enabling Google Drive backup. Signing in is entirely optional and is not required to use the app.

3.4 Google Drive backup (optional)

If you enable cloud backup, a backup file encrypted with a password you choose (AES-256) is uploaded to a private app area inside your own Google Drive account — not to our servers. We cannot read the backup and we never know its password. Backups live in Drive's hidden app-data area; you can delete them all at any time from Google Drive settings (Settings → Manage apps → Delete hidden app data) or by revoking the app's access to your account. Important: if you forget your backup password, no one — including us — can recover it.

3.5 JoFotara e-invoicing (optional)

If you connect the app to Jordan's national e-invoicing system (JoFotara) by entering your establishment's integration credentials, the app will send your invoice data (seller, buyer where present, line items, amounts and tax) to the Income and Sales Tax Department systems as the scheme requires. This happens only when you enable the service yourself and submit invoices through it. Your credentials are stored encrypted in your device's secure storage.

4. App permissions

5. What we do not do

• No analytics or measurement SDKs (no Firebase Analytics or similar).
• No ads, and no advertising identifiers.
• No automatic crash reporting.
• We never sell, rent, or share your data with third parties for marketing.
• We never collect your location.

6. Security

Password-protected backups are encrypted with AES-256-GCM using PBKDF2 key derivation. License material and e-invoicing credentials are kept in the operating system's secure storage (Android Keystore). The device fingerprint sent to the license server is hashed and cannot be reversed.

7. Data retention and deletion

• Local data: fully under your control — removed by clearing the app's data or uninstalling it.
• Google Drive backups: live in your own account's hidden app-data area; delete them any time from Google Drive settings (Manage apps → Delete hidden app data) or by revoking the app's access.
• License records on our server: kept for as long as the license is valid and for abuse prevention. To request deletion of your license records (note: this invalidates the license), email support@raqame.net; we respond within 30 days.

8. Children

Raqame is a business tool and is not directed at children under 13. We do not knowingly collect any data from children.

9. Changes to this policy

We may update this policy from time to time. Changes are published on this page with an updated "Last updated" date above, and we will notify you in the app if a change is material.

10. Contact

For any privacy question or request: support@raqame.net