Privacy policy

Hisaab and Hisaab Lite · Effective 8 October 2026
Hisaab is run by HISAAB, a micro enterprise registered under Udyam, Mumbai, Maharashtra · hisaabhai.in

In short: your money records stay on your phone. Hisaab has no ads and does not sell or share your data. SMS and bill photos are read on your phone, and their text is never uploaded. Apart from crash reports, which you can switch off, anything leaves your phone only when you choose to share it or when you sign in to back up your books.

What Hisaab keeps

Bills: details of bills and receipts you add, and their photos (kept on your phone).
Entries you add or that Hisaab logs for you: amount, date, money in or out, payee name, category, and where the entry came from (SMS, bill, statement, cash).
Udhaar records: customer names, amounts, notes and, if you add it, a customer's WhatsApp number.
Settings: shop or personal name, budgets, your category choices for payees, price list and ready replies, and app preferences.

All of this is stored inside the app on your phone.

SMS (Hisaab full edition only)

If you turn on automatic SMS logging and allow SMS access, Hisaab reads SMS on your phone from banks and payment senders (senders with names like VM-HDFCBK, not phone numbers) to create entries. It skips messages from people, OTPs and promotions. The SMS text itself is not stored or sent anywhere: Hisaab keeps only the entry details listed above, the UPI reference number (to avoid counting a payment twice), the sender name and the time of the SMS. You can turn this off at any time in More, or remove the permission in your phone's settings. Hisaab Lite does not ask for SMS access at all.

Bill photos and bank statements

Bill photos are read on your phone. In the Android app this uses Google ML Kit text recognition, which runs on the device (Google Play services downloads the text model once). On the web version, the open-source Tesseract.js reader is downloaded from the jsDelivr network the first time you scan a bill. The photo is not uploaded or kept after reading. Bank statement files you import are read on your phone and are not uploaded.

Bills

Bill and receipt photos you add, or share into Hisaab from another app, are read on your phone and the photos stay on your phone. They are not uploaded. If you sign in, a bill's details (who it's from, amount, dates, category, your note, and whether it's paid) are backed up with your books so your bill list appears on your other phones; the photo itself stays on the phone that added it. Hisaab marks a bill paid by matching it, on your phone, to a payment in your books. Backup files you create include your bill photos. Deleting a bill deletes its photo; signing out or uninstalling removes the photos from the phone.

Pay links

If you add your UPI ID, reminders and order replies include a link to a page on Hisaab's website that opens your customer's UPI app with your UPI ID, shop name and the amount filled in. The link carries only those three things, never your customer's name, and the page doesn't record or send anything. The payment goes from the customer's UPI app straight to your UPI ID. When the bank SMS for a payment arrives, Hisaab matches it to the customer's udhaar on your phone.

WhatsApp auto-replies (being tested)

Hisaab is testing automatic WhatsApp replies for shops. They are not switched on for any shop yet; this section says how they will work for a shop that turns them on. Messages that customers send to the shop's WhatsApp Business number are delivered by WhatsApp (Meta) to Hisaab's server, which reads them only to write the reply: pricing an order from the shop's price list, telling a customer their own udhaar balance (only to the WhatsApp number the shop saved for that customer), or giving the shop's timings. To do that, the server reads the shop's details, price list and that customer's udhaar from the shop's backed-up books. It does not keep the messages after replying. An order it prices is added to the shop's Orders: the items, the total, and the customer's WhatsApp name and number, so the shop knows what to pack and can match the customer's UPI payment to the order on the shop's phone. The shop can delete an order at any time. Anything it can't answer is left for the shopkeeper. WhatsApp's own terms and Meta's privacy policy also apply to messages sent on WhatsApp. The shop can switch auto-replies off at any time.

Notifications

The 9 PM summary and bill reminders are scheduled on your phone. They are not sent from a server.

Crash reports

If the app crashes or hits an error, Hisaab sends a report to Google Firebase Crashlytics so the problem can be found and fixed. A report contains the error, where in the code it happened, the app version and basic device information such as the phone model and Android version. Error messages come from the app's own code, so they do not normally contain anything you entered, and Hisaab removes figures, account-like numbers and email or UPI addresses from them before sending. Your entries, udhaar records and SMS are never sent. You can switch crash reports off in More.

When data leaves your phone

When you share it: backups, CSV exports, today's summary, WhatsApp replies and problem reports go only where you send them.
Accounts and cloud backup: if you sign in with your mobile number, your books are backed up to Google Firebase (Cloud Firestore), stored in India (Mumbai region), and your number is used to sign you in through Firebase Authentication. Only you can read your books. Until you sign in, nothing is backed up.
WhatsApp auto-replies: only if your shop turns them on, as described above.

Hisaab has no advertising and does not track how you use the app. The only reports it sends on its own are the crash reports described above, and you can turn those off.

Keeping and deleting your data

On the phone: use More → Erase this book, or uninstall the app.
Your account: More → Delete account removes your account and every entry backed up to it.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask to see, correct or erase your personal data, and withdraw consent (for example, by turning off SMS logging or deleting your account). Most of this you can do yourself in the app. For anything else, contact us using More → Report a problem.

Children

Hisaab is meant for adults managing their own or their shop's money.

Changes

If this policy changes, the app will show the new version and its date. Material changes will be pointed out in the app before they apply.