Hisab Privacy Policy

Last updated: 18 October 2026

This policy explains what information the Hisab app ("Hisab", "we", "us") handles, where it is kept and the choices you have. Hisab is developed by LuklaLogic.

Summary

• Your financial records (transactions, accounts, balances, budgets, savings goals, and the Khata records — udharo, dhukuti, gifts, festivals, remittance and bills) are stored only on your phone. We never upload them.
• Signing in with Apple (iPhone and iPad) or Google is optional. You can use every feature without an account.
• Hisab never asks for bank passwords, PINs, one-time passwords (OTPs) or card numbers.
• Hisab does not show ads and does not sell or rent your information to anyone.
• The only request Hisab makes on its own is for exchange rates, and it says nothing about you.
• You can back up your data to a file you control, and delete your account and all of your data at any time.

Information stored only on your phone

Everything you enter in Hisab — transactions, amounts, merchants, notes, accounts and balances, categories, budgets and savings goals — is saved in a database on your phone. It is not sent to us or to anyone else.

The same applies to the Khata features: the names (and any phone numbers you add) of people you lend to or borrow from, dhukuti groups and rounds, gifts given and received, festival budgets, remittance transfers and bills. These names and numbers are typed in by you; Hisab does not read your contacts.

When you use Remind or Share statement, Hisab opens your phone's share sheet with the message. Nothing is sent unless you pick an app and send it yourself.

This data is excluded from Android's automatic Google Drive backup. Using Profile → Delete all data, or uninstalling the app, removes it permanently from your phone.

Backups you make (optional)

Profile → Back up data saves a copy of all your Hisab records in one file and opens your phone's share sheet. The file goes only where you choose to send or save it, such as Files, Google Drive, iCloud Drive or an email to yourself; Hisab never uploads it anywhere itself.

• The backup file is not encrypted. Anyone who has the file can read your records, so keep it somewhere private.
• The temporary copy Hisab makes for sharing is removed from your phone the next time you back up, or when you use Delete all data.
• Copies you have already saved elsewhere are under your control: deleting your data or your account in Hisab does not delete them. Delete them where you saved them.
• Profile → Restore from backup replaces the data on this phone with the data in a backup file you choose.

Notification access (optional)

If you turn on notification access, Hisab reads the notifications on your phone to detect payments reported by your bank and wallet apps, including bank SMS alerts shown by your messaging app.

• Notifications are processed only on your phone.
• Notifications that do not contain a money amount are discarded immediately and are never stored.
• Notification content is never uploaded, shared or sent to any AI service.
• You can turn notification access off at any time in your phone's settings.

Bill reminders (optional)

If you add a bill, Hisab asks for permission to show notifications and schedules a reminder before each due date. Reminders are scheduled by your phone's own system and shown by it; nothing about your bills is sent anywhere. You can turn notifications off at any time in your phone's settings. In the web version, due bills are shown inside the app instead.

Signing in (optional)

If you choose to sign in with Apple (on iPhone and iPad) or Google:

• Google shares your name, email address, profile photo and an account identifier with Hisab.
• Apple shares an account identifier, your email address — or, if you choose "Hide My Email", a private relay address that forwards to you — and, the first time only, the name you choose to share.
• We do not request access to anything else, such as your contacts.
• We use Firebase Authentication, a service provided by Google, to create and manage your account. It stores your account identifier, name, email address, profile photo, sign-in method and sign-in dates. To protect accounts from abuse it also processes your IP address and device information (user agent); Google keeps logged IP addresses for a few weeks.
• Signing in does not upload your financial records. If we ever add cloud backup or sync, it will be optional and we will ask you first.

These services have their own privacy policies: Apple (https://www.apple.com/legal/privacy/), Google (https://policies.google.com/privacy) and Firebase (https://firebase.google.com/support/privacy).

Exchange rates

The currency converter uses the rates Nepal Rastra Bank publishes each working day. To get them, Hisab makes a single request to `nrb.org.np`.

• That request asks only for the day's published rates. It carries no account, no device identifier, no location and none of your financial data — nothing that identifies you or your phone.
• Nepal Rastra Bank is a separate organisation. Like any web server, it may record the usual request details such as your IP address. We have no control over, and no access to, whatever it keeps.
• The rates are saved on your phone, so the converter keeps working offline. Nothing about your conversions — the amounts or the currencies — is ever sent anywhere.
• You can turn this off with Tools → Currency converter → Update automatically, and refresh by hand instead, or not at all. With it off, Hisab makes no requests of its own at all.

What we do not do

• We do not sell, rent or trade your information.
• We do not show ads or use advertising or analytics trackers.
• We do not access your bank accounts or wallets. Hisab only reads amounts you enter or notifications your phone already shows you.
• We do not send your transactions, balances or conversions to any server, including when fetching exchange rates.

Deleting your data

• Your account: open Profile → Delete account in the app. This permanently deletes your Hisab account from Firebase; Google removes deleted account data from its live and backup systems within 180 days. If you signed in with Apple, deleting your account also revokes Hisab's access to your Apple ID. Deleting your Hisab account does not delete your Apple or Google account.
• Without the app: email luklalogic@gmail.com from the address you signed in with, or use https://hisab.luklalogic.ai/delete-account. We will delete your account within 30 days and confirm by email.
• Data on your phone: use Profile → Delete all data, or uninstall the app.
• Apple: you can also stop using Sign in with Apple for Hisab in Settings → [your name] → Sign-In & Security → Sign in with Apple.

Children

Hisab is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Security

Data on your phone is protected by the operating system's app isolation (Android or iOS), so other apps cannot read it; we recommend using a screen lock. Sign-in uses encrypted (HTTPS) connections.

Changes to this policy

If we change this policy we will update the date at the top, and we will tell you in the app about any significant change, such as adding cloud backup.

Contact

Questions or requests: LuklaLogic, luklalogic@gmail.com, https://hisab.luklalogic.ai