Privacy Policy

Hisab Kitab ("Hisab Kitab", "we", "us", or "our") is a personal finance app developed by Abhishek Jain that helps you track income and expenses, including by detecting transactions from SMS messages sent by banks, wallets, and payment apps. This Privacy Policy explains what information we collect through the Hisab Kitab Android app, how we use and share it, and the choices you have.

By creating an account or using the app, you agree to the collection and use of information as described here. If you do not agree, please do not use the app.

Account information. When you sign in with Google, we receive your name, email address, profile photo, and a unique account identifier from Google/Firebase Authentication. This identifier is used as your primary key in our database.

Financial data you enter. Transactions, accounts, categories, budgets, and notes you create or edit in the app.

SMS messages (with your permission). If you grant the SMS permission, Hisab Kitab reads SMS messages on your device — both new messages as they arrive and, if you run a scan, messages already in your inbox — in order to detect and pre-fill financial transactions (e.g. bank debit/credit alerts, UPI notifications, card statements). The sender and text of messages the app processes for this purpose are sent to and stored on our servers so that a transaction can be parsed, presented to you for review, and kept in sync across app sessions. You can review, edit, or discard any transaction detected this way before it is saved, and you can revoke the SMS permission at any time from your device settings — the app will simply stop detecting transactions automatically and you can continue to add them manually.

Expense-splitting contacts. If you use the expense-splitting feature, we store the name, and — if you provide them — the email address and/or phone number, of the people you add to a shared expense or group, along with the balances between you. This applies even if the other person does not use Hisab Kitab; if you add someone who is not an app user, please only do so with their knowledge.

Usage and diagnostic data. We collect basic engagement metrics (such as how often you open the app and which features you use), app version and device/OS information, and crash or error reports generated by the app, to help us fix bugs and improve the product.

We use the information described above to:

• Create and maintain your account and keep your data in sync across sessions
• Detect, categorize, and display your transactions
• Provide features such as budgets, accounts, and expense splitting
• Diagnose crashes and errors, and improve app performance and reliability
• Understand how the app is used so we can improve it
• Communicate with you about your account or provide support when you contact us

We do not sell your personal information, and we do not use it for advertising.

We do not share your personal information with third parties except with the service providers that help us run Hisab Kitab, each of which processes data on our behalf under its own terms:

• Firebase (Google) — for sign-in, analytics, and crash reporting
• Supabase — our database provider, where your account and financial data are stored
• Sentry — for error monitoring

If you use expense splitting, limited information (such as your name and the shared expense amounts) is visible to the other members of that split. We may also disclose information if required by law or to protect the rights, safety, or property of Hisab Kitab, our users, or others.

Your data is stored in our Supabase (PostgreSQL) database and access is scoped to your account using row-level security tied to your authenticated identity. All requests to our backend require a valid, verified sign-in token. While we take reasonable technical and organizational measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain your account and financial data for as long as your account is active, so that your transaction history remains available to you. If you would like your data deleted, see "Your Rights & Choices" below.

• You can edit or delete individual transactions, accounts, budgets, and splits directly in the app.
• You can revoke the SMS permission at any time from your device's app settings.
• You can request a copy of your data, or request that we delete your account and associated data, by contacting us at the email below.

Hisab Kitab is not directed to children, and we do not knowingly collect information from anyone under the age of 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app.

If you have questions about this Privacy Policy or how we handle your data, contact us at caffeinatedDuo@gmail.com.