Subora Privacy Policy

Effective date: May 28, 2026

This Privacy Policy explains what information Oak Water Software - fzco ("we", "us", or "our") collects and how we use it when you use Subora (the "App").

Subora helps businesses manage subscribers, customers, recurring subscriptions, debts, payments, reminders, notifications, employees, and customer records.

Subora is for business users. If you add customer, subscriber, or employee information to Subora, you must have the right to store, manage, message, and use that information.

Information We Collect

Depending on the features you use, we may collect:

• Account details, such as your name, email address, Firebase Authentication details, user ID, and email verification status.
• Business and employee details, such as organization settings, employee names, roles, permissions, activity details, and preferences.
• Subscriber and customer records, such as names, usernames or IDs, phone numbers, subscription status, recurring payments, debts, deposits, notes, service or package history, and other records you enter.
• Notification and message details, such as templates, selected phone numbers, delivery status, and notification settings.
• Files and media you choose to upload, such as logos, images, or printing assets.
• Contacts you choose from your device. Subora uses only the contact you select to fill phone number fields. It does not need your full address book for normal use.
• Purchase and subscription details, such as product IDs, entitlement status, purchase tokens, receipts, and transaction checks from Google Play, Apple, or our backend. We do not collect or store full payment card numbers.
• Device, usage, and diagnostic details, such as Firebase Cloud Messaging tokens, app events, app version, device type, operating system, advertising ID where available, logs, and analytics events.

How We Use Information

We use information to:

• create, secure, and manage accounts;
• provide customer, subscriber, billing, payment, notification, employee, and business tools;
• keep your records synced across devices;
• send push notifications and support messages that you choose to send;
• check purchases, subscriptions, and account access;
• provide support, fix problems, prevent abuse, and improve Subora;
• meet legal, security, accounting, and policy requirements.

Sharing and Third-Party Tools

We do not sell personal information.

We may share or process information with companies and tools needed to run Subora, including:

• Google Firebase services, including Authentication, Firestore, Realtime Database, Cloud Storage, Cloud Functions, Cloud Messaging, and Firebase Analytics.
• Google Play Billing, Apple in-app purchase systems, Google Sign-In, and Sign in with Apple.
• Communication tools and device features you choose to use, such as SMS, WhatsApp links, or phone dialing.
• Business, billing, communication, customer-management, or other third-party systems that you connect to Subora. Data sent to those systems depends on your setup and their own terms and policies.
• Authorities or other parties when required by law, to protect our rights, prevent fraud, or protect users and services.

Permissions

Subora may request access to:

• the internet, so the App can connect to Subora, Firebase, and selected third-party tools;
• notifications, so the App can send service and account alerts;
• photos or files, when you choose an image, logo, or document asset;
• contacts, only when you choose a contact to fill a phone number field;
• billing, to manage subscriptions and in-app purchases.

Security

We use reasonable security measures to protect data. These include account authentication, Firebase security controls, encrypted connections where supported, and role-based permissions inside the App.

No system is completely secure. You should protect your login details and only give access to employees you trust.

Data Retention and Deletion

We keep account, business, subscriber, customer, purchase, usage, and analytics information for as long as needed to run Subora, follow legal and accounting rules, resolve disputes, prevent abuse, and keep business records.

You can request account deletion in the App from Settings. The App sends a deletion code to the account email address before deletion is completed.

If you cannot access the App, you can request account deletion through our public account deletion page at subora.oakwater.io/account-deletion.html.

You can also contact us to request deletion. Some information may still be kept when required for legal, security, fraud-prevention, tax, accounting, backup, or business reasons.

International Processing

Your information may be processed in countries other than where you live or work. This may happen through Google Firebase, Google Play, Apple, hosting companies, and other tools used to run Subora.

Children

Subora is not for children. It is for businesses and their authorized staff.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make important changes, we will update the effective date and publish the new version on this page.

Contact Us

For privacy questions, data access requests, or deletion requests, contact Oak Water Software - fzco at support@oakwater.io.