Privacy Policy

1. Who we are

Hisaab ("we", "us", "our") is operated by Skylite Group Ltd, a company registered in England and Wales (company number 13535333). We are the data controller for personal data processed through Hisaab at ourhisaab.app. For any privacy question, contact us at privacy@ourhisaab.app.

2. What we collect

Account & identity: when you sign in with SAIG we receive your email address, name and (where provided) profile photo; you may add a phone number so friends can find you. Activity data: the groups you create or join, the expenses, splits, settlements and messages you record. AI interactions: the messages you send to Hisaab's assistant. Business data (business accounts only): your company number and the public company details we retrieve from Companies House, and the financial data we read from any accounting service you connect (such as Zoho Books). Technical data: device/browser information, IP address and logs needed to run and secure the service.

3. How we use it, and our legal bases

We use your data to provide Hisaab — tracking balances between you and the people you choose, and, for business accounts, organising and classifying your bookkeeping. Under UK GDPR we rely on: performance of our contract with you (to deliver the service you ask for); your consent (for sharing data with other apps in the SAIG ecosystem, and for optional analytics); and our legitimate interests (to keep the service secure, prevent abuse, and improve it). We do not sell your data and we do not use it for advertising.

4. The SAIG ecosystem & sharing

Hisaab is part of the SAIG ecosystem operated by Skylite Group Ltd, and uses a single SAIG sign-in. Other SAIG apps can access your Hisaab data only where you have granted explicit, per-app, per-purpose consent — and you can withdraw that consent at any time. Beyond that, we share data only with the service providers (processors) listed below, and where required by law.

5. AI processing

To power Hisaab's assistant and to classify accounts, your messages and relevant data may be processed by trusted third-party AI providers (including Anthropic). These are used as data processors under contract; Anthropic does not use data submitted through its API to train its models. We aim to minimise the personal data sent for AI processing. A current list of AI providers is available on request.

6. Business integrations

If you connect an accounting service (such as Zoho Books), we hold our own secure connection and read your chart of accounts and financial data solely to produce your bookkeeping, classifications and trial balance. You can disconnect at any time. We also use the public Companies House API to look up your company by its number; this returns publicly available registry information (such as your registered name, year-end and registered office).

7. Service providers (processors)

We use: Supabase (database and authentication; data encrypted in transit and at rest); Vercel (hosting); Anthropic and other AI providers (assistant and classification); Zoho (only where you connect it); and Sentry, LogRocket and Vexo (error monitoring and product analytics). Each processes data on our instructions under contract. A full, current sub-processor list is available on request.

8. International transfers

Some of our providers are based outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards (such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses).

9. Data retention

We keep your data for as long as your account is active. You can ask us to delete your account and associated personal data at any time by emailing privacy@ourhisaab.app. Some records may be retained where we have a legal obligation to keep them.

10. Security

Data is encrypted in transit and at rest. Authentication is handled by Supabase, and we use Row Level Security to isolate each user's data. Service credentials (such as accounting-integration tokens) are stored server-side only and are never exposed to your browser.

11. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent at any time. To exercise these, email privacy@ourhisaab.app. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

12. Cookies

We use essential cookies to keep you signed in and to operate the service. Optional analytics run only where permitted. We do not use advertising cookies.

13. Children

Hisaab is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will remove it.

14. Changes

We may update this policy from time to time. The date below shows when it was last revised; significant changes will be notified in the app.

15. Analytics & error monitoring

We use Sentry (crash reports, no personal data), LogRocket (anonymised session replays — all text and financial amounts are masked, so we see interactions only, never your actual figures) and Vexo (feature-usage analytics, no personal data). You can opt out of session recording by emailing support@ourhisaab.app.