Privacy Policy

Last updated: September 4, 2026

Mahfazati is a personal finance app that helps you track your income, expenses, budgets, installments, and savings goals. This policy explains what data we collect, how we use and protect it, and what rights you have over it.

By using the app, you agree to this policy. If you do not agree with it, please do not use the app.

1. Data we collect

We collect only what is needed to run your account and save your budget:

Account information

• The name you enter when creating an account.
• Your email address, used for sign-in, account verification, and password reset.
• A user ID, generated automatically to link your data to your account.
• Your password, stored in hashed form by our authentication provider — we cannot see it.
• Regional settings such as country, currency, and interface language.

Financial information you enter yourself

• Income and salary entries you record.
• Expenses with their categories, notes, and dates.
• Budgets and monthly limits.
• Installments and recurring commitments.
• Savings goals and amounts saved.

This information consists of figures and notes you type in manually. It is never pulled from a bank or financial institution, and it does not represent actual financial transactions.

Limited technical data

As with any internet service, basic technical data may be logged by our hosting and infrastructure providers (such as IP address, browser type, and error logs), solely for security, operation, and troubleshooting.

2. How we use your data

• To create your account, sign you in, and verify your identity.
• To save your budget and records and sync them across your devices when you sign in.
• To calculate summaries, percentages, charts, and savings-goal progress.
• To send only essential service emails, such as email verification or password reset.
• To keep the service secure, prevent misuse, and fix technical problems.

We do not use your financial data to build advertising profiles, set prices, or for any advertising purpose.

3. Data storage and security

We use Supabase (a managed PostgreSQL database with an authentication service) to store user accounts and their data on its cloud services.

• Traffic between the app and the servers is encrypted over HTTPS/TLS.
• Data is encrypted at rest by our database provider.
• Access to your data is restricted to your signed-in account; other users cannot see it.
• Passwords are never stored in plain text.

We keep your data for as long as your account exists. That said, no method of electronic transmission or storage is 100% secure, so we recommend using a strong password and never sharing it with anyone.

4. Data sharing

We do not sell, rent, or trade your personal or financial data for commercial purposes.

Your data is only shared in these cases:

• Technical service providers: such as Supabase for hosting, database, and authentication, and our web hosting provider. They process data only on our behalf and under their own agreements.
• Legal obligations: where we are required to do so by applicable law or a valid order from a competent authority.
• With your explicit consent for a specific disclosure.

5. Your rights and account deletion

Your data remains yours. You have the right to:

• Access your data — it is shown to you inside the app at any time.
• Correct it by editing or deleting any entry, category, or goal from within the app.
• Delete your account and all data associated with it.
• Withdraw consent and stop using the service at any time.

How to delete your account

Send a request from the email address registered to your account to fahad888528@gmail.com with the subject “Account deletion request”. We will delete your account and its associated financial data from the database; technical backups may persist for a limited period before being automatically destroyed.

6. Children’s privacy

The app is not directed to children under the age of 13, and we do not knowingly collect their data. If we discover that an account belongs to a child under that age, we will delete the account and its data. If you are a parent or guardian and believe your child has created an account, please contact us so we can remove it promptly.

7. Changes to this policy

We may update this policy as the app evolves or as regulatory requirements change. The “Last updated” date at the top of this page will change with every revision, and your continued use of the app after publication constitutes acceptance of the updated version. We encourage you to review this page from time to time.

8. Contact us