Privacy policy

Who we are

Dreamhive is a closed savings society. This app is run by the society's committee for its members. There is no public sign-up: every account is created by an admin.

What we keep, and why

• Your account: name, mobile number (your login), member number, and a salted hash of your password (never the password itself).
• Your profile: NID number, date of birth, address and your nominee's name, relation, mobile and NID — to identify you and to pay your nominee if something happens to you. These are encrypted in the database.
• Your money records: deposits, payment proofs (screenshots or photos), receipts, withdrawals, votes and your share of the society's costs and profits (the profit figures are shown to admins and the auditor only).
• Security records: when you log in, from which device, and an audit log of changes the admins make.
• Messages: WhatsApp/SMS messages sent to you (login codes, temporary passwords, reminders) are logged with their delivery status.

Who can see it

You can see your own records. The society's admins can see every member's records to run the society; an auditor appointed by the society can read them but not change them. Other members never see your payments, proofs, balance or personal details. Everyone can see the society's overall books (totals, expenses and income) and vote counts, but not who voted which way.

Who we share it with

We don't sell or share your data. To send messages we use Meta's WhatsApp Business Platform (and an SMS provider as a fallback); they receive only your number and the message. Push notifications carry no amounts or personal data beyond your first name.

How long we keep it

• Financial records, receipts and the audit log: at least 7 years, as the society's accounts require.
• Payment proofs: as long as the payment they belong to.
• Expired login sessions and codes: deleted after 30 days.

Deleting your account

You can ask to delete your account from My profile → Delete my account. Because membership holds money, deleting your account means leaving the society: you receive your settlement like a full withdrawal. After you confirm the payout, your NID, date of birth, address, email and nominee details are erased. Your payment records and receipts are kept for 7 years, without those details, because the society's accounts must stay complete.

Your rights

You can see your records in the app at any time, download your receipts and yearly statement, and ask the admin to correct anything wrong. Changes to your name or mobile number are made by the admin.

Contact

Questions about your data: contact the society's admin through the app (My profile → Name or mobile number wrong?) or at the society's meeting.