Privacy policy
Hisaab (on the App Store as Hisabify) is a household finance app made by Mehdi Raza. This policy explains what the app stores, why, who can see it and the choices you have.
The short version
- Hisaab stores the money records you and your household add, so it can show them to you and to the people you share them with.
- There are no ads, no analytics and no tracking. Your data is never sold, and it isn't used for anything except running the app.
- It's stored in the European Union, in Frankfurt, by the providers listed below.
What Hisaab stores
- Your account: your email address or your Sign in with Apple identifier, and your name if you give one.
- Your household: its name and currency, the people in it, what each person can see, and the email addresses of people you invite.
- Your money records: transactions (merchant, amount, date, category, notes and tags), receipt photos you attach, cards (name, last four digits, balances and due dates), bank accounts, investments, loans, income, goals, money sent home and the currency rates you set.
- Automations: if you connect Apple Wallet, a bank message Shortcut or a webhook, the payment details or message text they send. Hisaab keeps a log of each one for 90 days so you can see what it did.
- Your devices: a notification token for each iPhone you sign in on, and your theme and Face ID settings.
- Security: sign-in codes, sessions and automation links are stored only in scrambled (hashed) form. Your network address is used for a short time to stop repeated sign-in attempts.
On your iPhone, your sign-in is kept in the iOS Keychain, and the screens you opened last are kept so they still show when you're offline. Face ID is handled by iOS: Hisaab never sees your face data.
How it's used
Only to run the app: to show your household's money to the people in it, add the payments your automations send, notify you about them and keep your account secure. Hisaab doesn't use your data for advertising, profiling or tracking, and doesn't share it with data brokers.
Who can see it
- The people in your household, as far as the access you give each of them allows.
- The services that run Hisaab, only to provide it: Cloudflare (the app's server, receipt photo storage and sign-in emails), Neon (the database, in Frankfurt, Germany) and Apple (Sign in with Apple and notifications).
- Nobody else, unless the law requires it.
How long it's kept
Your records stay until you delete them. The automation log keeps 90 days. When an account is deleted, its sign-in details go with it; when the household's owner deletes their account, the household's records and receipt photos are deleted too. Backups kept by the database provider expire on their own within 30 days.
Your choices
- Edit or delete any record in the app.
- Use Reset link in Settings to stop anything using an automation link.
- Change what each person sees, or remove them from your household.
- To delete your account or get a copy of your data, email support@mehdiraza.app from the address you sign in with.
Children
Hisaab is made for adults running a household and isn't directed at children.
Changes
If this policy changes, the new version will be posted here with a new date.