This Privacy Policy explains how Bina Forever Services ("we", "us", "our") collects, uses, shares and protects information when you use the Business Empire mobile application (the "App").
By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.
Who we are
The App is operated by Bina Forever Services, Ara Damansara, Petaling Jaya, Selangor, Malaysia.
For any privacy question or request, contact us at support@businessempire4u.com.
What the App does
Business Empire lets a business owner record income, expenses, assets, liabilities and reminders for one or more businesses, and invite other people ("members") to view and add to specific businesses. Nearly all the information in the App is information that you, or someone in your workspace, enters.
Information we collect
3.1 Information you give us
| Category | What it includes | Why we need it |
|---|---|---|
| Account information | Email address, display name, and a passcode | To create your account, sign you in and show who made each entry. Your passcode is handled by Firebase Authentication and stored only in salted, hashed form. We cannot see it. |
| Business records | Business names and logos; income and expense entries (amount, currency, date, category, description, source); assets and liabilities; exchange rates you set; the edit history of entries | To provide the App's core features |
| Attachments | Receipts, slips, invoices and other photos or files you choose to attach to an entry | To keep supporting documents with your records |
| Reminders | Reminder titles, dates, times and repeat settings | To notify you when a reminder is due |
| Invitations | The email address of a person you invite, and the businesses you give them access to | To let that person join your workspace |
If you invite someone: you give us their email address. Please invite only people who expect to hear from you and who have agreed to their email address being shared with us for this purpose.
3.2 Information collected automatically
| Category | What it includes | Why we need it |
|---|---|---|
| Account activity | When you registered, when an invitation was requested or approved, and when you last signed in | To manage workspace access and show it to the workspace owner |
| Push notification token | A device identifier issued by Firebase Cloud Messaging | To send you notifications, for example when you are invited to a workspace |
| Crash reports | Device model, operating system version, app version, a crash-reporting installation identifier, and technical details about the crash | To find and fix bugs. Crash reports do not contain your business records. |
3.3 Device permissions
The App asks for these permissions only when you use the related feature. You can refuse or withdraw them at any time in your device settings.
- Camera: to photograph a receipt or slip to attach to an entry.
- Photos and files: to choose an existing image or file to attach. The App only accesses the items you select.
- Notifications: to show reminders and invitation alerts.
- Alarms and reminders (Android): so that reminders arrive at the exact time you set, including after your device restarts.
3.4 What we do not collect
We do not collect your precise or approximate location, contacts, browsing history or advertising identifier. The App does not contain advertising and does not use third-party analytics or tracking.
How we use information
We use information only to:
- provide, operate and maintain the App;
- create and secure your account and authenticate you;
- give members access only to the businesses they have been granted;
- send reminders, invitation notifications and essential service messages;
- diagnose crashes and improve reliability;
- respond to your requests and support enquiries;
- comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information, share it for targeted advertising or use it to build advertising profiles.
Legal bases (EEA, UK and similar jurisdictions)
Where data protection law requires a legal basis, we rely on:
- Performance of a contract: to provide the App you signed up for;
- Legitimate interests: to keep the App secure, fix crashes and prevent abuse;
- Consent: for device permissions and push notifications, which you can withdraw at any time;
- Legal obligation: where the law requires us to keep or disclose information.
How information is shared
6.1 Within your workspace
- The workspace owner can see all businesses, entries, attachments and members in the workspace, including each member's name, email address and last sign-in time.
- A member can see only the businesses the owner has granted them, including the names of the people who made entries in those businesses.
6.2 Service providers
We use Google Firebase, provided by Google LLC, to run the App. Google processes data on our behalf, under its own terms, and does not use it for its own purposes:
| Service | Purpose |
|---|---|
| Firebase Authentication | Account sign-in and passcode storage |
| Cloud Firestore | Storage of business records, reminders and account details |
| Cloud Storage for Firebase | Storage of logos and attachments |
| Cloud Functions for Firebase | Sending invitation notifications |
| Firebase Cloud Messaging | Delivering push notifications |
| Firebase Crashlytics | Crash reporting |
Google's privacy information is available at https://firebase.google.com/support/privacy.
6.3 Legal and safety reasons
We may disclose information if required by law, court order or a government request, or where necessary to protect the rights, property or safety of our users, the public or us.
6.4 Business transfers
If we are involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
International transfers
Firebase may store and process data in countries other than your own, including the United States. Where required, those transfers are protected by appropriate safeguards, such as the Standard Contractual Clauses included in Google's data processing terms.
Data retention
- Account and business data is kept while your account is active.
- When you delete your account, we delete your data as described on our Delete Account page, within 30 days of your request.
- Crash reports are kept by Firebase Crashlytics for up to 90 days.
- We may keep a limited amount of information for longer where the law requires it, or to resolve disputes or enforce our agreements.
Security
We take reasonable technical and organisational measures to protect your information:
- Data is encrypted in transit (TLS) and at rest by Google Cloud.
- Passcodes are salted and hashed by Firebase Authentication, and sign-in attempts are rate-limited.
- Database and storage access rules limit each member to the businesses they have been granted.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your passcode private, and tell us straight away at support@businessempire4u.com if you believe your account has been compromised.
Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- correct inaccurate information. You can edit your profile name in the App;
- delete your account and personal information (see Delete Account);
- export your information in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time, without affecting processing that has already taken place;
- complain to your local data protection authority.
To exercise any of these rights, email support@businessempire4u.com from the address linked to your account. We will respond within 30 days, or sooner if the law requires. We may need to verify your identity first.
Members: the business records in a workspace are controlled by the workspace owner. We may refer requests about those records to the owner, or tell them about your request.
California residents: we do not sell or share personal information as those terms are defined in the CCPA/CPRA, and we will not discriminate against you for exercising your rights.
Children
The App is intended for business use by adults. It is not directed at children under 13, or under 16 in the EEA and UK. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you in the App or by email before they take effect, and update the "Last updated" date above.
Contact
Bina Forever Services Ara Damansara, Petaling Jaya, Selangor, Malaysia Email: support@businessempire4u.com