Privacy Policy

Hisabo (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal data of our users (“you”, “your”). This Privacy Policy describes how we collect, use, process, and disclose your information when you use the Hisabo mobile application (“App”) and our website (https://www.hisabo.app).

1. Information We Collect

To provide a fully-featured digital ledger (Khata) and bookkeeping experience, we collect and process several categories of information:

a) Personal Information You Provide

• Account Registration: When you register on Hisabo, we collect your phone number to authenticate your identity via One-Time Password (OTP) verification.
• Profile Information: You may optionally provide your Full Name, Email Address, and a Referral Code when setting up or managing your profile.

b) Financial and Ledger Data

• Transactions & Entries: We store transaction records that you manually enter into the App, including income and expense amounts, transaction dates, category tags, ledger balances, and payment statuses.
• Customer Ledger (Khata): When managing accounts for others, we store the names and transaction histories of the customers/contacts you create in the ledger.

c) Device and Media Permissions

To enable advanced features of the App, we request access to the following device components (only used with your explicit consent):

• Contacts: If you grant Contacts permission, Hisabo accesses your address book locally on your device to let you quickly choose and add customers to your ledger. We do not upload your entire contact list to our servers; we only upload details of specific contacts you actively add as customers to your ledger.
• Camera & Photo Library: Used to attach photos of receipts, invoices, or bills to specific transactions.
• Microphone & Audio: Used to record and attach voice/audio notes to your transaction entries.
• Biometrics (Face ID / Touch ID): Used locally to secure access to the App (App Lock). Biometric authentication is handled entirely by your device's operating system; Hisabo never accesses or stores your biometric data.
• App Tracking Transparency (iOS): Used to request your permission to track activity across other apps and websites for personalized advertising.

d) Technical and Usage Data

We automatically collect certain technical details when you use the App:

• Device Details: Operating system (iOS/Android), device model, app version, language preferences, IP address, and unique device identifiers (UUID).
• Diagnostics & Performance: Crash logs, application freeze data, and performance metrics.
• Analytics: Session duration, features used, navigation paths, and interactions within the App.

2. How We Use Your Information

We use the collected information for the following purposes:

1. Account Management & Sync: To verify your phone number, create your account, and securely sync your ledger data across multiple devices.
2. Bookkeeping Functionality: To record, calculate, and display your income, expenses, and customer balances.
3. Reports & Exports: To generate financial summaries, PDF, and Excel reports that you can share with your ledger contacts (e.g., via WhatsApp).
4. Reminders & Push Notifications: To send daily bookkeeping reminders or transaction follow-ups (if enabled in settings).
5. Billing & Subscriptions: To process payments for premium plans via Apple App Store, Google Play Billing, or Razorpay.
6. Diagnostics & Improvement: To debug crashes, analyze App performance, and improve the user interface and functionality.
7. Advertising: To display advertisements (personalized ads are only displayed on iOS if you consent to App Tracking Transparency).
8. Referral Rewards: To track invite referrals and manage invite wallets or rewards under the Refer & Earn program.

3. Storage, Security, and Cloud Syncing

• Cloud Sync: Unlike local-only apps, Hisabo syncs your encrypted ledger data to our secure servers. This ensures you do not lose your financial records if you change or lose your device, and allows you to log in across multiple active sessions.
• Security Measures: We use industry-standard encryption protocols (SSL/TLS) for data in transit and implement robust security measures for data at rest on our databases.
• Local Storage: Certain app preferences and cached data are stored locally using encrypted key-value pairs (expo-secure-store) and React Native Async Storage.

4. Third-Party Services We Use

We integrate third-party services to support the App's functionality. These services may collect and process information governed by their respective privacy policies:

• Firebase (Google):
  • Firebase Authentication: To verify phone numbers via OTP.
  • Firebase Analytics & Remote Config: To monitor app usage patterns and configure remote features.
  • Firebase Crashlytics: To receive instant reports of app crashes and errors.
  • Firebase Cloud Messaging: To deliver push notifications.
• Google AdMob: To display ads. AdMob may collect device identifiers and usage data to serve ads (customized based on your tracking preferences).
• Payment Gateways: Razorpay, Apple App Store, and Google Play Billing process payments for premium subscriptions. We do not store credit card numbers or bank account details on our servers; they are processed securely by these certified payment providers.

5. Sharing of Your Data

We do not sell, rent, or trade your personal or financial data. We only share information with third parties in the following scenarios:

• Service Providers: With trusted backend hosting, authentication, database, analytics, and billing providers solely to operate the App.
• User-Initiated Sharing: When you choose to export reports or transactions and send them to others (e.g., sharing a ledger summary via WhatsApp).
• Legal Requirements: If required by law, court order, or government authority to comply with legal obligations or protect our rights and safety.

6. Your Rights and Choices

• Access and Correction: You can view and update your profile details (name, email, language) directly in the Settings screen of the App.
• Push Notifications: You can disable or enable reminders anytime under settings.
• Device Permissions: You can grant or revoke Contacts, Camera, Microphone, and Tracking permissions at any time through your device's system settings.
• Account & Data Deletion: If you wish to delete your account and permanently erase all your cloud data, you can do so directly within the App via Settings > Manage Account > Delete Account. Once initiated, your synced databases, transaction logs, and user profile will be permanently deleted from our servers and cannot be recovered.

7. Children's Privacy

Hisabo is not designed or intended for use by children under the age of 13. We do not knowingly collect personal information from children. If we discover that a child under 13 has provided us with personal data, we will delete it immediately.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any changes by updating the "Last Updated" date at the top of this page, and through an in-app notice where appropriate.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at: