Privacy policy
Last updated: 6 October 2026
Hisaab ("we", "us") is a personal money app for Android published by iMETA. This policy explains what we collect, why, and the choices you have. We wrote it to be read, so it is short and specific.
In short: Hisaab reads transaction alerts on your phone and uploads only a few extracted facts, never the text of your messages. We don't sell your data, we show no ads, and you can delete everything from the app at any time.
1. SMS access and how we use it
Hisaab requests the Android READ_SMS permission so it can find transaction alerts from banks, cards and UPI apps and turn them into your spending history. This is the app's core feature, and it is optional: if you decline, you can add transactions by hand.
Before the permission prompt, the app shows an in-app explanation of exactly what is read. Processing happens like this:
- Messages from bank and payment senders are read on your device.
- OTPs, passwords, personal conversations and promotional messages are skipped.
- From a transaction alert, the app extracts only: the amount, the merchant, the date, and the last digits of the account or card.
- The text of your SMS is not sent to our servers. We receive the extracted facts and a one-way hash used to detect duplicates.
- We use SMS data only to provide Hisaab's features to you. We do not use it for advertising, and we do not share or sell it.
You can turn off SMS access in Android settings at any time, and you can clear stored message details from More → Privacy and your data.
2. What we collect
| Data | Why |
|---|---|
| Mobile number | To sign you in with a one-time code and identify your account. |
| Name and profile details you enter | To personalise the app. |
| Transactions: amount, merchant, date, account ending, category, notes, and cash entries you add | To show your spending, insights, reports and answers. |
| Your corrections and review decisions | To remember how you categorise merchants and to keep refunds and bill payments out of your spend. |
| Consent records (SMS access, terms, notifications, analytics) with the policy version | To respect and prove your choices. |
| Technical data such as device type, app version and error information | To keep the service working and secure. |
We do not collect your contacts, photos, location or microphone, and we cannot access your bank account or move money.
3. "Ask my money" and AI
Totals, comparisons and insights are calculated by our own code from your verified transactions. When you use Ask, an AI model may be given the already-calculated figures and your question to phrase an answer. Answers containing a number that is not in those figures are discarded. Your raw messages are never sent to the AI model.
4. How we protect your data
- Data is encrypted in transit and on our servers.
- Access is protected by short-lived tokens, and you can lock the app with your fingerprint or face.
- Our logs do not contain OTPs, tokens, full phone numbers or message content.
No system is perfectly secure, but we design Hisaab to hold as little sensitive data as possible.
5. Sharing
We do not sell your personal data or share it for advertising. We use service providers who process data on our behalf to run the app, such as cloud hosting and databases, SMS delivery for one-time codes, and the AI provider described above. They may only use it to provide their service to us. We may disclose information if the law requires it.
6. Your choices and rights
- Export: download a copy of your data from More → Privacy and your data → Export my data.
- Clear message data: remove stored SMS details while keeping your transactions.
- Delete your account: in the app, or on the web using our account deletion page.
- Withdraw consent: turn off SMS access, notifications or analytics at any time.
You can also write to us at support@hisaab.app to access, correct or delete your data, or to raise a concern.
7. Retention and deletion
We keep your data while your account is active. When you delete your account, we permanently delete your account, transactions, settings, one-time-code records for your number and export files. We keep a single anonymised record that a deletion took place, which contains no personal details.
8. Children
Hisaab is not intended for anyone under 18, and we do not knowingly collect their data.
9. Changes
If we change this policy in a meaningful way, we will update the date above and ask you to accept the new version in the app.
10. Contact
iMETA · support@hisaab.app