Privacy & data safety, in plain language

Your money is your business. Hisaab keeps it that way — nobody at Hisaab browses your books, nothing is sold, and no advertiser ever sees a rupee or a dirham of it.

Where your data actually lives

Everything you put into Hisaab — your books, entries, bills, invoices, and your children's points and journals — sits in a managed cloud database, not on anyone's laptop or phone. This project's database is hosted in the Asia-Pacific region (Tokyo). It is looked after professionally: daily backups, automatic security updates, and no one handling physical machines.

Data travelling between the app and the server is encrypted, and it is encrypted again on the server's disks. If someone walked off with a hard drive, they would have unreadable noise.

Who can see your books

• Only you, by default. Every row of data carries your account on it, and the database itself refuses to hand a row to anyone else — not another user, not the app, not a stray link.
• Your family, only what you switch on. A book stays private until you deliberately share it, and inside a book you can share a single bank account rather than the whole thing.
• Your other parent, only your children. Inviting a co-parent shows them the children — never your books, your income, or your business.
• A share link, only what it was made for. Read-only report links need both the link and the PIN, cover only the book and dates you picked, and expire.

Your children's corner

A child's journal, photos, points and wishes are visible to that child and the grown-ups attached to them — nobody else. Photos are stored privately and opened through short-lived links that expire, so a copied link stops working. Children who sign in with a code and PIN stay inside their own screen; there is no route from there into your money.

Your passwords and cards

Passwords are handled by the authentication system and are never stored in Hisaab's own database. Card details never touch Hisaab — payments go straight to the payment provider, and we only ever see whether a payment succeeded.

What we promise

• We never sell, rent, or share your financial data for advertising.
• We do not connect to your bank — you choose what to enter or upload.
• You can delete any entry, any child, or your entire account from inside the app.
• Deleting your account removes your data, not just your login.

What nobody can honestly promise

No service on earth can guarantee it will never be attacked. What we can guarantee is what's actually in place: encryption in transit and at rest, per-account rules enforced by the database itself, private storage for photos, regular backups, and the smallest amount of data we can get away with holding. If anything ever did go wrong, we would tell you rather than hope you didn't notice.

Questions

Ask us anything through the contact page. The full legal wording lives in the privacy policy and the terms.