Privacy policy
BariPay helps apartment societies in Bangladesh run their building: bills and payments, notices, complaints, the gate and more. This page explains what we keep about you and why. It covers the website and the mobile app.
Who is responsible
Your society (its committee) decides how your building uses the service and can see the data of its own building. We run the service for them.
What we keep
- Account: name, mobile number, email (if given), language and your role (owner, tenant, committee, guard).
- Flats: which flat you own or rent, and family or tenant details your committee records (including the police tenant form, if your building uses it).
- Money: bills, payments, receipts and payment slips you upload. Card and bKash details are entered on the payment company's page; we never see your PIN or card number.
- Community: complaints and their photos, comments, poll votes, bookings, SOS alerts.
- Gate: names and mobile numbers of your visitors, entry and exit times, and your domestic help (an NID number is stored encrypted and only the last 4 digits are shown).
- Usage: which screens are used (counted per society per day) and which days you used the service, to improve it. No advertising cookies or outside trackers; the day-by-day record is deleted after 400 days.
- Phone app: a device name, app version and a notification token, so we can send you alerts. Crash reports (what went wrong, app version, your user number) if the app crashes.
The app uses the camera only when you take a photo or scan a gate pass, and fingerprint/face lock is checked by your phone; we never receive it.
Sensitive information
The tenant police form your building may use holds NID or passport numbers, religion and family members. It is filled only with the tenant's agreement, stored encrypted, seen only by the tenant, the landlord and the committee, and given to the police station as the law requires.
Where it is kept
Your data is stored on servers in Bangladesh and backed up there. Push notifications (Google Firebase) and crash reports (Sentry) are handled outside Bangladesh; they never contain NID, passport or payment details.
Who else sees it
- Your building's committee and staff, as their role allows. The guard sees visitor and gate information only.
- Companies that help us run the service: SMS gateway (codes and alerts), bKash / SSLCommerz (payments), Google Firebase (app notifications), Sentry (crash reports), our hosting provider. They may only use the data to provide that service.
- Authorities, when the law requires it.
We do not sell your data or show advertising.
How long
As long as you have an account. Money records (bills, payments, receipts, expenses) are kept by the society for its accounts and audits even after you leave, under the name "Deleted user" if you delete your account.
Your rights
- Know what we keep: download all of it from Profile → Download my data (web) or ask us.
- See and correct your details in Profile (web) or Settings (app).
- Turn SMS and email alerts on or off in notification settings.
- Delete your account at any time: how to delete your account.
You agreed to this policy when you started using the service; you can withdraw by deleting your account. We follow the Personal Data Protection Act, 2026 of Bangladesh. If you think we got something wrong, write to us first; you can also complain to the data protection authority.
If something goes wrong
If personal data is lost or exposed, we tell the affected societies and people, and the authority where the law requires, as soon as we know, with what happened and what to do.
Security
Data travels encrypted (HTTPS) and is backed up every night. Sign-in codes expire in minutes, and you can sign out a lost phone from Settings → Signed-in devices.
Contact
Questions about your building's data: ask your committee. About the service: [email protected]
Last updated: Oct 28, 2026