Privacy Policy

For the Hisab mobile and web app (“Hisab”, “we”, “us”). Effective date: April 4, 2026

This policy describes how we collect, use, and share information when you use Hisab to track shared expenses, balances, and related activity. By using Hisab, you agree to this policy.

1. Who we are

Hisab is operated by the data controller responsible for your account data (the person or organization that published this app). For privacy requests, contact us at the email listed under “Contact” below.

2. Information we collect

Account details: email address, display name, preferred currency, and a password (stored using one-way cryptography on our servers — we do not store your password in plain text).
App data you enter: expense and ledger information you add in Hisab (for example amounts, notes, splits, and relationships between you and your contacts as reflected in the app).
Technical data: standard server and security logs (for example timestamps, IP address, and request metadata) needed to run the service, prevent abuse, and debug issues.

3. How we use information

To create and secure your account, reset your password when you request it, and keep you signed in.
To store and synchronize your ledgers and history across devices you use with the same account.
To operate, maintain, and improve Hisab; to comply with law; and to protect users and our infrastructure.

4. Legal bases (EEA/UK users)

Where GDPR applies, we process personal data on the basis of: performance of a contract (providing Hisab); legitimate interests (security, fraud prevention, product improvement), where not overridden by your rights; and compliance with legal obligations. Where required, we will ask for your consent separately.

5. Sharing and processors

We do not sell your personal information. We share data only as needed to run the service, for example with:

Infrastructure providers that host our application and API (for example cloud and edge providers such as Cloudflare for compute, storage, and networking).
Email delivery, when we send authentication or password-reset messages (for example via SendGrid or a comparable provider when configured).

These providers process data under contractual terms and only on our instructions where applicable.

6. Retention

We keep account and ledger data while your account is active. After you delete your account (when we offer that) or when required by law, we delete or anonymize personal data within a reasonable period unless we must retain it for legal claims or compliance.

7. Security

We use industry-standard measures (including encryption in transit, access controls, and secure password handling) appropriate to the nature of the service. No method of storage or transmission is 100% secure.

8. Your rights

Depending on your region, you may have rights to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the email below.

9. Children

Hisab is not directed at children under 13 (or the age required by your jurisdiction). We do not knowingly collect personal information from children.

10. International transfers

Our processors may store or process data in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses).

11. Changes

We may update this policy from time to time. The new effective date will be posted on this page. For material changes, we may also notify you in the app or by email where appropriate.

12. Contact

Questions or requests regarding this policy: [email protected].