Messliner Privacy Policy
We collect only essential operational data required to run Messliner (Web & Flutter Mobile App). We never sell your data. Your mess records are strictly visible only to verified members of your mess group. You can request full account deletion at any time.
1. Information We Collect
We collect essential information to calculate daily mess meal rates (Bazar Ratio), maintain transparent deposit ledgers, verify member accounts, and deliver real-time mess updates:
- Account information — name, email address, mobile phone number, and profile preferences provided during registration. Mobile numbers are also used to deliver instant cash deposit confirmation SMS alerts when enabled by Mess Managers.
- Authentication & Security Data — Supabase-generated email verification OTPs and password reset security tokens used to verify user identity during account setup or password recovery.
- Mess meal logs — daily breakfast, lunch, and dinner meal entries recorded for each member.
- Bazar expense records — purchase dates, itemized expense amounts, purchaser name, and optional receipt photos uploaded by mess managers.
- Deposit ledger entries — member cash or mobile banking deposit transaction records logged by designated Mess Managers.
- Device & technical telemetry — operating system version, device model, browser type, IP address, and connection timestamps.
2. Mobile App, Notifications & Communication Policy
Messliner communicates with members through push notifications, transactional emails, and SMS message gateways:
Upon launching the Flutter Android mobile app, users may grant Push Notification Permissions (`POST_NOTIFICATIONS`) to receive real-time meal cut-off warnings, deposit updates, and manager announcements.
Messliner uses Supabase Auth Infrastructure to dispatch transactional verification emails and 6-digit One-Time Password (OTP) codes when you register a new account or request a password reset ("Forgot Password").
Messliner features an automated SMS notification system within the Admin Panel. When enabled by a Mess Manager/Admin, whenever a cash deposit is logged for a member, an instant deposit confirmation SMS message is sent directly to that member's registered mobile phone number.
3. How We Use Information
We process your data strictly to operate, maintain, and improve the Messliner platform:
- Computing automated meal rates in real-time (`Total Bazar Cost ÷ Total Meals Count = Meal Rate`).
- Generating transparent member debit/credit ledgers (`Total Deposit - (User Meals × Meal Rate + Fixed Shared Expenses)`).
- Authenticating users and processing Forgot Password OTP requests via Supabase.
- Delivering push notification alerts via OneSignal and automated cash deposit SMS receipts.
- Ensuring platform security and preventing unauthorized expense tampering.
Zero Data Sales Guarantee: We do not sell, rent, monetize, or share your personal mess records with third-party advertisers or data brokers.
4. Data Infrastructure & Cloud Storage
Your data is stored securely using Google Cloud Firebase enterprise infrastructure and Supabase cloud authentication servers. All communications between your device and our servers are encrypted in transit using 256-bit SSL/TLS 1.3. Cloud databases utilize hardware-level AES-256 encryption at rest, along with automated multi-region backups to guard against data loss.
5. Third-Party Services Disclosure
We work with trusted enterprise technology providers to deliver essential mobile, web, and messaging features:
| Provider | Purpose | Data Processed |
|---|---|---|
| Google Firebase | Database, Cloud Storage & Backups | Meal counts, bazar expenses, deposit logs, receipt images |
| Supabase Auth | Authentication & Transactional Email OTP | Email address, password reset tokens, verification OTPs |
| OneSignal SDK | Push Notification Delivery | Device push token, OS version, notification status |
| Telecom SMS Gateway | Deposit Confirmation SMS | Registered mobile phone number, cash deposit amount |
6. Security & Role-Based Access
Messliner enforces strict Role-Based Access Control (RBAC). Only designated Mess Managers have permission to log bazar expenditures, adjust meal rates, activate deposit SMS settings, or enter member deposit receipts. General members enjoy view-only access to verify all records, ensuring full mess transparency while protecting data integrity.
7. Cookies & Local Storage
Messliner uses standard browser `LocalStorage` and secure session tokens to keep you logged in and preserve your active mess preferences across sessions. You can clear local storage in your browser settings at any time.
8. Data Retention & Account Deletion
Mess records are retained as long as your mess group remains active. When a Mess Manager closes a mess session, historical ledgers are archived for 12 months for member report downloads before permanent deletion.
Data Deletion Requests: You have the right to request permanent deletion of your profile and mess records. To request account deletion, email messliner.app@gmail.com or submit an inquiry through our support desk.
9. Contact Us
If you have any questions or concerns regarding this Privacy Policy or data handling practices, please contact us:
Email: messliner.app@gmail.com
Web Portal: https://messliner.netlify.app