Privacy

Your debt is your business. Not ours.

Here is exactly what happens to your information when you use Hisab, in plain language, not legal language.

Last updated: 1 August 2026

What stays on your device by default.

• •Everything you type: your debts, amounts, creditor names, and notes
• •Your salary amount, payment dates, and reminders
• •Your debt history and Al Etihad Credit Bureau report summary
• •Your saved debt plan after documents are processed
• •Your settings and preferences

Hisab is built private-first. By default, we do not keep a cloud copy of your debt records, and we do not store raw documents on our servers after AI processing.

When you ask Hisab AI for help, here is what it receives.

When you use AI chat or scanning, the text or file needed for that task is sent securely to our AI provider to process it. Your records still live on your device — we don't keep a copy on our servers.

• •Only the details needed for that request are sent. Before they leave your phone, other people's names are replaced and your salary is rounded to a band.
• •Processing is handled by our AI provider (Google) acting for Hisab to generate your answer; Hisab does not keep it
• •A document or Etihad Credit Bureau report you choose to scan is sent in full so it can be read — it has to be, to extract the details. It is deleted after processing and is never stored on Hisab servers.

Delete everything. Permanently. Anytime.

Settings → Privacy & Data → Delete everything from this phone. One tap and everything local is gone, including your anonymous app identity. We hold no cloud copy of your debt records. See below for the limited traces our providers keep.

Who else processes your data.

We use a small number of providers to make Hisab work. They act for us, under contract, and none of them sells your data:

• Google (Gemini) — reads your questions and any document you scan, to generate the answer
• Vercel — hosts this website and the API your app talks to
• Firebase (Google) — issues the anonymous identity that authenticates your app's AI requests
• PostHog — anonymous product analytics (screen views and feature usage; never your debts, amounts or documents)
• RevenueCat — handles in-app purchases, if and when paid features are switched on

Where your data goes.

Hisab is built for the UAE, but the providers above process data outside the UAE, including in the United States and the European Union. We only use providers that commit contractually to protecting your data to a standard consistent with UAE PDPL requirements. If you are not comfortable with that, do not use the AI or document-scanning features — the rest of Hisab works entirely on your phone.

How long anything is kept.

On your phone: until you delete it. Documents you scan: deleted straight after they are read. Your questions and answers: not stored by Hisab; our AI provider may retain them briefly for abuse monitoring under its own terms. Anonymous analytics: retained in aggregate and not linked to you.

Age.

Hisab is for adults managing their own finances. It is not intended for anyone under 18, and we do not knowingly collect data from children.

The only thing we actually collect.

Anonymous usage data such as screen views and feature usage — never your debts, amounts, or documents. We do not sell your financial data, and we do not use your debt records or uploaded documents for advertising. You can turn this off at any time in the app: You → Privacy & Data → Usage analytics.

Your choices and controls.

You can use Hisab without creating an account. You can inspect, export or delete your local data at any time from within the app.