Privacy Policy
Last updated: 20 October 2026This Privacy Policy explains what personal data Mitmat collects, why, who can see it, how long we keep it and the rights you have. Zynotech Intelligence Limited (“Mitmat”, “we”) is responsible for your data. We follow applicable Bangladeshi law, including the Personal Data Protection Ordinance, 2025.
1Who we are and what this covers
This policy covers the Mitmat app, the website mitmat.app, group invite links and our support channels. It applies to account holders and to anyone who opens a group invite link.
For questions about your data, contact our Data Protection Officer, Kazi Yeasir Arafat, Managing Director, using the details in section 13, Contact us.
2The data we collect
- Account data: your name, your Bangladeshi mobile number (we confirm it with a 6-digit code sent by WhatsApp or SMS), profile photo if you add one, and your language setting. Your 5-digit Mitmat PIN is stored only as a one-way hash.
- NID, only if you choose to add it: your NID number is optional and is not needed to use Mitmat. We do not verify it with any partner, and we do not keep a copy of your NID card.
- Records you create: groups, members, expenses, amounts, categories, notes, receipt photos, meal counts, reminders, pots, budgets and business ledgers. Entries you make in Offline Tour Mode are stored on your phone until they sync to our servers when you are back online.
- Payment details you add: the bKash or Nagad numbers you want friends to pay to, and transaction IDs (TrxIDs) you save. We never collect PINs, OTPs, card numbers or wallet balances.
- Contacts, only if you allow it: phone numbers from your contact list, used only to find friends who use Mitmat. Numbers of people who are not on Mitmat are not stored.
- Device and usage data: device model, operating system, app version, crash reports, and which features are used, to keep the app working and secure.
- Support messages: what you send us by email or WhatsApp.
3Why we use it, and on what legal basis
- To create and run your account, and keep records for you and your groups, because we have a contract with you.
- To keep accounts secure and prevent fraud, for example by confirming your phone number with a one-time code, because this protects you and all users.
- To send reminders, receipts and security alerts that you have turned on, with your consent.
- To find friends from your contacts who use Mitmat, only with your consent, which you can withdraw at any time.
- To improve Mitmat from usage patterns that do not identify you.
- To meet legal duties, for example to answer a court order or another lawful request from a Bangladeshi authority.
Where we rely on your consent, we ask clearly and separately. Saying no will never stop you from using the core features of splitting and settling.
4The clipboard and your TrxID
When you come back to Mitmat after paying in bKash or Nagad, the app can read your clipboard once to find a TrxID you copied. This only happens on the payment screen, after you tap to finish. We keep only the TrxID and nothing else from your clipboard.
5Who can see your data
- Members of your groups see the expenses, payments and balances in that group, and your name and profile photo.
- Anyone with a group invite link can open it in any browser, without the app, and see the group name, member names and balances, and recent expenses. Share invite links only with people you trust.
- If you add a friend as a witness to a savings pot, they are told only if you break the pot early. They never see what is in it, or any of your bKash details. You can remove them at any time.
- Service providers work for us under written contracts and only on our instructions. They include cloud hosting and database services, delivery of sign-in codes by WhatsApp and SMS, crash reporting and customer support tools.
- We follow applicable Bangladeshi law, including the Personal Data Protection Ordinance, 2025. Authorities see data only when the law requires it, such as under a court order. We check each request and share only what is required.
6Where your data is stored
We store your data on servers in Singapore, run by our cloud hosting providers.
This means your data is processed outside Bangladesh. We follow applicable Bangladeshi law, including the Personal Data Protection Ordinance, 2025, and use providers that are bound by written contracts to protect it. Entries made in Offline Tour Mode stay on your phone until they sync.
7How we protect it
- Data is encrypted when it moves between your phone and our servers (HTTPS), and our hosting providers encrypt the storage it sits on.
- Your Mitmat PIN is stored only as a one-way hash, so nobody at Mitmat can read it.
- Mitmat never holds your money. Payments happen in your own bKash or Nagad app.
- We never ask for your bKash or Nagad PIN.
If a data breach is likely to harm you, we will report it to the data protection authority within the time the law sets, and tell you without delay what happened and what you can do.
8How long we keep it
- While your account is open, we keep your records so you and your groups can use them.
- You can delete your account at any time in the app, from Profile > Settings. Our delete account page explains how deletion works and what happens to your data.
- Entries you made in a shared group stay in that group’s history under a label such as “Former member”, so other members’ balances remain correct.
- Logs that the law requires us to keep are kept only for the period the law sets, and then deleted.
9Your rights
Under Bangladesh’s data protection law you have the right to:
- Access: see the personal data we hold about you.
- Correction: fix data that is wrong or incomplete. We act on requests within 30 days.
- Deletion: ask us to erase your data when we no longer need it.
- Portability: export your data from the app, from Profile > Settings.
- Withdraw consent: turn off contacts or reminders, remove a savings-pot witness, or cancel a lender introduction request at any time.
- Automated decisions: ask for a person to review any decision made about you only by automated means.
- Complain: contact us first, or complain to the national data protection authority.
Use Profile > Settings in the app, or write to support@mitmat.app / support@zynotech.io. We may ask you to confirm your identity. We reply within 30 days and do not charge for this.
10Children
Mitmat is only for people aged 18 and over. We do not knowingly collect data from children, and we never profile or target them. If we learn that a child has opened an account, we will close it and delete the data.
11Messages and cookies
- Security and account messages are always sent, because they protect you.
- Reminders, tips and news are optional. You can turn them off in Settings.
- Our website uses the essential cookies it needs to work. With your permission, it also uses Google Analytics to count visits and see which pages help people, so we can improve the site. We ask first: no analytics cookie is set until you choose Accept. If you choose Reject, Google receives only anonymous visit counts without cookies. Analytics is never used for advertising, and we never send Google your phone number or anything you type. You can change your choice at any time in Cookie settings.
12Changes to this policy
We will update this policy when our service or the law changes. If a change affects how we use your data, we will tell you in the app at least 15 days before it takes effect and ask for your consent again where the law requires it.
13Contact us
- Data Protection Officer: Kazi Yeasir Arafat, Managing Director
- Email: support@mitmat.app / support@zynotech.io
- Post: Zynotech Intelligence Limited, House 25, Block B, Road 2, Dhaka 1216
- WhatsApp: +8801735773187
- Delete your account: mitmat.app/delete-account
If we publish this policy in Bangla and English and the two differ, the Bangla version will prevail.
Privacy Policy
Last updated: 20 October 2026This Privacy Policy explains what personal data Mitmat collects, why, who can see it, how long we keep it and the rights you have. Zynotech Intelligence Limited (“Mitmat”, “we”) is responsible for your data. We follow applicable Bangladeshi law, including the Personal Data Protection Ordinance, 2025.
1Who we are and what this covers
This policy covers the Mitmat app, the website mitmat.app, group invite links and our support channels. It applies to account holders and to anyone who opens a group invite link.
For questions about your data, contact our Data Protection Officer, Kazi Yeasir Arafat, Managing Director, using the details in section 13, Contact us.
2The data we collect
- Account data: your name, your Bangladeshi mobile number (we confirm it with a 6-digit code sent by WhatsApp or SMS), profile photo if you add one, and your language setting. Your 5-digit Mitmat PIN is stored only as a one-way hash.
- NID, only if you choose to add it: your NID number is optional and is not needed to use Mitmat. We do not verify it with any partner, and we do not keep a copy of your NID card.
- Records you create: groups, members, expenses, amounts, categories, notes, receipt photos, meal counts, reminders, pots, budgets and business ledgers. Entries you make in Offline Tour Mode are stored on your phone until they sync to our servers when you are back online.
- Payment details you add: the bKash or Nagad numbers you want friends to pay to, and transaction IDs (TrxIDs) you save. We never collect PINs, OTPs, card numbers or wallet balances.
- Contacts, only if you allow it: phone numbers from your contact list, used only to find friends who use Mitmat. Numbers of people who are not on Mitmat are not stored.
- Device and usage data: device model, operating system, app version, crash reports, and which features are used, to keep the app working and secure.
- Support messages: what you send us by email or WhatsApp.
3Why we use it, and on what legal basis
- To create and run your account, and keep records for you and your groups, because we have a contract with you.
- To keep accounts secure and prevent fraud, for example by confirming your phone number with a one-time code, because this protects you and all users.
- To send reminders, receipts and security alerts that you have turned on, with your consent.
- To find friends from your contacts who use Mitmat, only with your consent, which you can withdraw at any time.
- To improve Mitmat from usage patterns that do not identify you.
- To meet legal duties, for example to answer a court order or another lawful request from a Bangladeshi authority.
Where we rely on your consent, we ask clearly and separately. Saying no will never stop you from using the core features of splitting and settling.
4The clipboard and your TrxID
When you come back to Mitmat after paying in bKash or Nagad, the app can read your clipboard once to find a TrxID you copied. This only happens on the payment screen, after you tap to finish. We keep only the TrxID and nothing else from your clipboard.
5Who can see your data
- Members of your groups see the expenses, payments and balances in that group, and your name and profile photo.
- Anyone with a group invite link can open it in any browser, without the app, and see the group name, member names and balances, and recent expenses. Share invite links only with people you trust.
- If you add a friend as a witness to a savings pot, they are told only if you break the pot early. They never see what is in it, or any of your bKash details. You can remove them at any time.
- Service providers work for us under written contracts and only on our instructions. They include cloud hosting and database services, delivery of sign-in codes by WhatsApp and SMS, crash reporting and customer support tools.
- We follow applicable Bangladeshi law, including the Personal Data Protection Ordinance, 2025. Authorities see data only when the law requires it, such as under a court order. We check each request and share only what is required.
6Where your data is stored
We store your data on servers in Singapore, run by our cloud hosting providers.
This means your data is processed outside Bangladesh. We follow applicable Bangladeshi law, including the Personal Data Protection Ordinance, 2025, and use providers that are bound by written contracts to protect it. Entries made in Offline Tour Mode stay on your phone until they sync.
7How we protect it
- Data is encrypted when it moves between your phone and our servers (HTTPS), and our hosting providers encrypt the storage it sits on.
- Your Mitmat PIN is stored only as a one-way hash, so nobody at Mitmat can read it.
- Mitmat never holds your money. Payments happen in your own bKash or Nagad app.
- We never ask for your bKash or Nagad PIN.
If a data breach is likely to harm you, we will report it to the data protection authority within the time the law sets, and tell you without delay what happened and what you can do.
8How long we keep it
- While your account is open, we keep your records so you and your groups can use them.
- You can delete your account at any time in the app, from Profile > Settings. Our delete account page explains how deletion works and what happens to your data.
- Entries you made in a shared group stay in that group’s history under a label such as “Former member”, so other members’ balances remain correct.
- Logs that the law requires us to keep are kept only for the period the law sets, and then deleted.
9Your rights
Under Bangladesh’s data protection law you have the right to:
- Access: see the personal data we hold about you.
- Correction: fix data that is wrong or incomplete. We act on requests within 30 days.
- Deletion: ask us to erase your data when we no longer need it.
- Portability: export your data from the app, from Profile > Settings.
- Withdraw consent: turn off contacts or reminders, remove a savings-pot witness, or cancel a lender introduction request at any time.
- Automated decisions: ask for a person to review any decision made about you only by automated means.
- Complain: contact us first, or complain to the national data protection authority.
Use Profile > Settings in the app, or write to support@mitmat.app / support@zynotech.io. We may ask you to confirm your identity. We reply within 30 days and do not charge for this.
10Children
Mitmat is only for people aged 18 and over. We do not knowingly collect data from children, and we never profile or target them. If we learn that a child has opened an account, we will close it and delete the data.
11Messages and cookies
- Security and account messages are always sent, because they protect you.
- Reminders, tips and news are optional. You can turn them off in Settings.
- Our website uses the essential cookies it needs to work. With your permission, it also uses Google Analytics to count visits and see which pages help people, so we can improve the site. We ask first: no analytics cookie is set until you choose Accept. If you choose Reject, Google receives only anonymous visit counts without cookies. Analytics is never used for advertising, and we never send Google your phone number or anything you type. You can change your choice at any time in Cookie settings.
12Changes to this policy
We will update this policy when our service or the law changes. If a change affects how we use your data, we will tell you in the app at least 15 days before it takes effect and ask for your consent again where the law requires it.
13Contact us
- Data Protection Officer: Kazi Yeasir Arafat, Managing Director
- Email: support@mitmat.app / support@zynotech.io
- Post: Zynotech Intelligence Limited, House 25, Block B, Road 2, Dhaka 1216
- WhatsApp: +8801735773187
- Delete your account: mitmat.app/delete-account
If we publish this policy in Bangla and English and the two differ, the Bangla version will prevail.