This Privacy Policy explains how SHIRAH collects, uses, stores, shares, protects, retains, and deletes user information.
SHIRAH is a Bangladesh-focused business, community, telecom, reselling, wallet, and digital-services mobile app.
This Privacy Policy applies to the SHIRAH mobile application, package com.shirahsoft.app, the SHIRAH website, and related support and account-deletion resources.
For this Privacy Policy, “SHIRAH,” “we,” “us,” and “our” refer to the SHIRAH service operated by Labib UR Rahman.
SHIRAH provides account-based community, telecom, wallet, reward, reselling, shop, micro-job, blood-donation, fundraising, notification, and account-security features.
SHIRAH is not an investment app, banking service, lending service, passive-income product, or guaranteed-earnings platform.
SHIRAH collects information only when reasonably necessary to provide, secure, support, or improve the features you use. The categories below apply depending on your activity and the features enabled in the released app version.
SHIRAH requests device permissions only when needed for a user-requested feature. You can deny or later revoke optional permissions through device settings, although the related feature may stop working.
SHIRAH uses the Android system contact picker when you choose to select a contact for an eligible recharge, top-up, or drive-offer feature. SHIRAH does not request broad access to your full contact list. The selected contact name and phone number may be used only to prefill or process the service you requested and are not used for unrelated marketing or advertising.
Camera and photo-picker or media access may be used when you choose to capture or upload a profile image, community image, product image, micro-job proof, screenshot, or other feature-related media. SHIRAH requests access only when you choose that feature.
Notification permission may be used to send account, security, wallet, payment, recharge, order, community, micro-job, support, and service messages. You can manage notification permission through device settings.
Biometric authentication may be used for a local app-lock feature. Authentication is performed by the device operating system. SHIRAH does not receive or store raw fingerprint, face, or other biometric templates on its servers.
SHIRAH supports Bangladesh-focused payment, wallet, reward, cashback, recharge, reselling, and withdrawal-related workflows in Bangladeshi Taka (BDT).
Payments are processed through UddoktaPay, a Bangladesh-focused payment gateway that supports applicable local MFS payment methods, or another disclosed provider where applicable. UddoktaPay may be used to initiate payments, receive provider verification or status, and reconcile payment results.
SHIRAH does not intentionally collect or store MFS PINs, OTPs, card CVV numbers, or complete card or bank-account credentials. Never share a payment PIN, OTP, password, or secret credential with SHIRAH staff or another person.
Reward points are app-based records and are not legal tender, a bank deposit, or guaranteed cash. Eligibility, limits, fees, manual review, security checks, and fraud-prevention controls may apply.
SHIRAH uses the following providers as needed for app functionality. They may process information on SHIRAH’s behalf or under their own applicable terms and privacy practices.
| Recipient or Provider | Data Categories | Purpose |
|---|---|---|
| Google Firebase and Google Cloud services | Account ID, profile data, stored media, device/app diagnostics, push token, security data | Authentication, hosting, storage, notifications, security, analytics, and diagnostics |
| Google Mobile Ads | Advertising/device identifiers, IP-derived signals, ad interactions, diagnostics | Advertising, measurement, security, and fraud prevention |
| Payment, MFS, and telecom providers | Phone number, amount, invoice/reference ID, transaction status, provider response | Payment, recharge, verification, reconciliation, and support |
| Vendors and delivery partners | Customer name, phone number, address, and order details | Order fulfilment, delivery, returns, disputes, and support |
SHIRAH does not sell personal or sensitive user information. SHIRAH does not use contact-list information, payment credentials, blood-group information, donor information, or customer-delivery details for unrelated targeted advertising.
Posts, profile information, comments, replies, reactions, follow relationships, product listings, donor information, or other content may be visible to other users depending on the relevant feature and visibility setting. Do not publish information that you do not want others to see.
SHIRAH staff, moderators, and support personnel may access content and related records when needed for moderation, support, fraud prevention, dispute handling, order processing, or policy enforcement.
A reseller who submits a customer’s name, phone number, address, or order note must have a lawful and appropriate basis to provide that information for order fulfilment.
Where available, users may report content or block another user through the relevant in-app feature. SHIRAH may review reported content, restrict visibility, remove content, restrict accounts, preserve relevant records for safety or investigation, and take other action under applicable platform rules.
Where required by applicable law or platform policy, SHIRAH provides a separate in-app advertising disclosure and consent flow before serving consent-dependent advertisements. You may have choices regarding personalized advertising through the consent flow, device settings, or Google account settings where applicable.
This Privacy Policy does not replace any separate permission, prominent disclosure, or consent required inside the app.
SHIRAH uses reasonable technical, administrative, and platform-supported safeguards, including authentication controls, role-based access controls, restricted backend operations, HTTPS/TLS where applicable, device-session management, audit records, and manual review for sensitive workflows.
Access to personal information is limited to authorized users, administrators, support personnel, or service providers who need it for an approved operational purpose.
No mobile app, cloud service, payment provider, telecom provider, or security system can guarantee absolute security. Users are responsible for protecting their device, email, phone number, login credentials, PIN, OTP, payment information, and app access.
SHIRAH retains information only for as long as reasonably necessary for the purpose described in this Policy, unless a longer period is required for legal, accounting, tax, security, fraud-prevention, dispute-handling, provider-reconciliation, or regulatory reasons.
| Data Category | Retention Approach |
|---|---|
| Active profile and account data | Retained while the account is active; deleted or irreversibly anonymized after a completed deletion request unless a legitimate exception applies. |
| Notification tokens and device sessions | Removed, replaced, revoked, or invalidated when no longer needed or when the account is deleted. |
| Transaction, payment, recharge, withdrawal, refund, order, audit, and fraud records | Retained only for the applicable legal, accounting, provider-reconciliation, dispute-resolution, security, or fraud-prevention period. |
| Moderation and safety records | Retained only as long as needed to investigate abuse, protect users, enforce rules, or comply with legal obligations. |
Users can request deletion of their SHIRAH account and associated personal data from inside the app. Users who cannot access the app can use the public deletion resource to request support-assisted deletion after reasonable account-ownership verification.
Sign in to SHIRAH, open the app menu or account-management area, select Delete Account, review the warning, and confirm the request.
Logging out, uninstalling the app, or temporarily stopping app use does not delete an account.
SHIRAH is intended for users aged 18 or older. Users under 18 must not create or use an account. If SHIRAH becomes aware that an underage user has created an account or provided personal information, SHIRAH may restrict the account and take appropriate deletion or anonymization measures, subject to legitimate safety, fraud-prevention, transaction-retention, and legal requirements.
Child-safety concerns may be reported to support@shirah.top.
SHIRAH is intended primarily for users in Bangladesh. Some service providers may process or store information outside Bangladesh where needed for authentication, hosting, storage, messaging, analytics, diagnostics, advertising, payment, recharge, security, support, or other technical operations.
SHIRAH may update this Privacy Policy to reflect changes in app features, data practices, service providers, legal requirements, security measures, or Google Play disclosures. The “Last Updated” date will be changed when a material update is published.
SHIRAH maintains Google Play Data Safety disclosures to reflect the data practices of the released app version, including relevant third-party SDKs and service providers.
For privacy questions, account-deletion requests, security concerns, or complaints about SHIRAH’s data practices, contact:
SHIRAH
Service Operator / CEO / Founder: Labib UR Rahman
Website: https://shirah.top
Support and Privacy Email: support@shirah.top
Child Safety Contact: support@shirah.top
Developer/Admin Email: contact.labibur@gmail.com
Address: Section-6, Mirpur, Dhaka-1216, Bangladesh