Maxfiylik siyosati

Oxirgi yangilanish: 2026-yil 31-iyul

Ushbu Maxfiylik siyosati QarzFlow (qarzflow.uz, Telegram bot va Mini App) qanday ma'lumotlarni yig'ishi, ulardan qanday foydalanishi va ularni qanday himoya qilishini tushuntiradi. Xizmatdan foydalanish orqali siz ushbu siyosatga rozilik bildirasiz.

1. Qanday ma'lumotlarni yig'amiz

• Telegram profili: Telegram ID, ism va username (Telegram bergan ko'rinishda).
• Siz kiritgan ma'lumotlar: xarajatlar, qarzlar, summalar, izohlar, guruh va a'zolar ma'lumotlari.
• Sozlamalar: til, mavzu va bildirishnoma sozlamalari.
• Texnik / analitika: qurilma turi (Mini App / Web / boshqa) va tashriflar soni — anonim, statisticik ko'rinishda.

2. Ma'lumotlardan qanday foydalanamiz

• Xizmatni taqdim etish: xarajat va qarzlarni hisoblash, hisobni a'zolar o'rtasida bo'lish.
• Bildirishnoma, eslatma va tasdiqlashlarni yuborish.
• Umumiy (anonim) statistika va xizmat sifatini yaxshilash.
• Xavfsizlik va suiiste'molning oldini olish.
• Avtomatik kategoriyalash: xarajat tavsifi (masalan, "taksi" yoki "osh") kategoriyani aniqlash uchun Google Gemini AI xizmatiga yuboriladi. Summalar, foydalanuvchi ismi yoki boshqa shaxsiy ma'lumot yuborilmaydi — faqat qisqa matn tavsifi. Natija mahalliy keshda saqlanadi, shuning uchun bir xil tavsif ikkinchi marta AI'ga yuborilmaydi.

3. Ma'lumotlarni baham ko'rish

Biz sizning shaxsiy ma'lumotlaringizni uchinchi tomonlarga sotmaymiz va reklama uchun bermaymiz. Xizmat Telegram orqali ishlaydi, shu sababli Telegram'ning o'z maxfiylik shartlari ham qo'llaniladi. Guruhdagi xarajat va qarz yozuvlari faqat o'sha guruhning tegishli a'zolariga ko'rinadi.

4. Saqlash va xavfsizlik

Ma'lumotlar himoyalangan serverda saqlanadi. Web va Mini App'ga kirish Telegram orqali tasdiqlanadi. Biz ruxsatsiz kirishdan himoya qilish uchun oqilona texnik choralarni qo'llaymiz, biroq internetda 100% xavfsizlikni hech bir xizmat kafolatlay olmaydi.

Bazaning kunlik zaxira nusxalari (backup) GPG (asimmetrik shifrlash) bilan shifrlanadi: shifrlash uchun serverda faqat ochiq kalit (public key) saqlanadi, dechifrlash uchun kerak bo'lgan yopiq kalit (private key) esa hech qachon serverga yuklanmagan — faqat administratorning shaxsiy qurilmasida. Shu sababli server buzilgan taqdirda ham zaxira fayllar ochilmaydi.

5. Sizning huquqlaringiz

• O'z ma'lumotlaringizni ko'rish (bot yoki dashboard orqali).
• Ma'lumotlaringizni o'chirish so'rovini yuborish.
• Til va bildirishnoma sozlamalarini istalgan vaqtda o'zgartirish.

6. Cookie va lokal saqlash

Brauzerda til tanlovi, qurilma identifikatori (anonim tashrif statistikasi uchun) va sessiya ma'lumotlari saqlanadi. Bularsiz ayrim funksiyalar to'g'ri ishlamasligi mumkin.

7. O'zgarishlar

Ushbu siyosat vaqti-vaqti bilan yangilanishi mumkin. Muhim o'zgarishlar ushbu sahifada e'lon qilinadi va "Oxirgi yangilanish" sanasi yangilanadi.

8. Aloqa

Savollar bo'lsa: Telegram orqali yordam.

Privacy Policy

Last updated: 31 July 2026

This Privacy Policy explains what information QarzFlow (qarzflow.uz, the Telegram bot and Mini App) collects, how it is used, and how it is protected. By using the service you agree to this policy.

1. Information we collect

• Telegram profile: Telegram ID, name and username (as provided by Telegram).
• Data you enter: expenses, debts, amounts, notes, group and member details.
• Settings: language, theme and notification preferences.
• Technical / analytics: device type (Mini App / Web / other) and visit counts — anonymous and aggregated.

2. How we use your data

• To provide the service: calculating expenses and debts, splitting bills among members.
• To send notifications, reminders and verifications.
• For aggregate (anonymous) statistics and to improve service quality.
• For security and abuse prevention.
• Automatic categorization: an expense's description (e.g. "taxi" or "lunch") is sent to Google's Gemini AI to determine its category. No amounts, names or other personal data are sent — only the short text description. The result is cached locally, so the same description is never sent to the AI twice.

3. Data sharing

We do not sell your personal data to third parties or use it for advertising. The service runs through Telegram, so Telegram's own privacy terms also apply. Group expense and debt records are visible only to the relevant members of that group.

4. Storage and security

Data is stored on a protected server. Access to the web app and Mini App is verified through Telegram. We apply reasonable technical measures to prevent unauthorized access, but no service can guarantee 100% security on the internet.

Daily database backups are encrypted with GPG (asymmetric encryption): only the public key needed to encrypt them lives on the server — the private key required to decrypt them has never been deployed there and stays on the administrator's own device. This means backup files can't be opened even if the server itself were compromised.

5. Your rights

• View your data (through the bot or dashboard).
• Request deletion of your data.
• Change language and notification settings at any time.

6. Cookies and local storage

Your browser stores your language choice, a device identifier (for anonymous visit statistics) and session data. Some features may not work correctly without these.

7. Changes

This policy may be updated from time to time. Material changes will be posted on this page and the "Last updated" date will be revised.

8. Contact

Questions? Reach support on Telegram.