Privacy Policy

Effective Date: September 5, 2026 • Version 1.0

Core Privacy Commitment: Hisaab is built as a zero-telemetry, offline-first personal financial vault. We do not collect, track, store, or sell any of your financial data, account numbers, or personal credentials. Your data belongs solely to you.

1. Overview & Offline-First Architecture

Hisaab ("we", "us", or "our") provides desktop and mobile personal finance management software. Unlike conventional fintech applications that transmit ledger entries to proprietary centralized servers, Hisaab stores 100% of your transactional data locally on your device in an encrypted SQLite database using AES-256 cipher encryption.

2. Data Collection and Usage

We believe financial records are strictly confidential. Therefore:

No Analytics or Tracking: We do not embed advertising SDKs, behavioral analytics, telemetry collectors, or crash tracking beacons.
No Account Registration on our Servers: There are no developer-operated web servers that receive or process your identity, passwords, or transaction histories.
Local Storage: All account balances, transactions, payees, categories, and generated PDF statements remain encrypted on the local device file system.

3. Google Drive Synchronization & API Permissions

Hisaab provides an optional cross-device synchronization capability utilizing Google Drive. If you explicitly choose to connect your Google Account:

Limited Scope Access: Hisaab requests access only to the restricted scope https://www.googleapis.com/auth/drive.appdata (Application Specific Data folder).
No Access to Personal Drive Files: Hisaab cannot read, list, view, modify, or delete any of your personal files, Google Docs, photos, spreadsheets, or folders in your Google Drive.
Zero-Knowledge End-to-End Encryption: Before any sync file (hisaab_vault_sync.finvault) is uploaded to your Google Drive AppData folder, it is encrypted locally on your device using bank-grade AES-256-GCM. The decryption key is derived exclusively from your personal secret passphrase. Neither Google nor the application developer possesses the key or ability to decrypt your financial sync payloads.
Compliance with Google API Services User Data Policy: Hisaab’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

4. Data Retention & Deletion

Because your data is strictly stored on your own hardware and in your private Google Drive space, you have complete control over retention:

Local Data: To delete your local financial records, simply use the "Clear Vault / Reset" option inside the application Settings, or uninstall the application.
Google Cloud Sync File: You can permanently delete the encrypted sync file at any time by disconnecting sync in Hisaab or via your Google Account dashboard under Google Drive > Settings > Manage Apps > Hisaab > Delete hidden app data.

5. Security of Your Information

We implement multiple layers of security to safeguard your financial ledger:

SQLCipher AES-256 database-level encryption.
OS-level secure credential storage via Windows Credential Locker and Android EncryptedSharedPreferences / Keystore.
Optional Biometric Authentication (Fingerprint / PIN) on supported mobile and desktop devices.

6. Contact Information

If you have any questions, inquiries, or feedback regarding this Privacy Policy or Hisaab's security architecture, please contact us directly:

Developer: Hisaab Project Team
Email: prabalshakya262@gmail.com