Privacy policy
Last updated: 31 October 2026
The short version
- We keep what the app needs to count and verify your payments. Nothing else.
- We do not sell your data, show ads or use tracking tools.
- On the owner's phone the app reads only bank "money received" alerts. Other notifications are ignored and not saved.
- Payment photos are stored privately. Only people in your business can open them.
- You can delete your account at any time. See Delete your account.
Who we are
Aaj ka Hisab ("we", "us") makes the Aaj ka Hisab Android app, which helps businesses in Pakistan count bank-transfer payments and check them against the owner's own bank alerts. For any privacy question, email [email protected].
What we collect
Your account
- Username and password. Used to log in. Passwords are stored hashed by our sign-in provider; we never see them.
- Email address. Used to send the sign-up code, and later only to send codes for Forgot username and Forgot password. It is not shown to other users.
- If you sign in with Google: your Google account's email and name, from Google.
- Your role (owner or staff), your display name, and which business you belong to.
Your business
- Business name, plan and daily scan limit.
- The bank accounts you mark as your own (last 4 digits), so the app can spot payments sent to the wrong account.
- Staff invite codes and who used them.
Payments you record
- Photos of customers' payment screens, and of shop bills or cash bills when you add them.
- Details read from those photos: amount, transaction or reference ID, date and time, sender and receiver names, last 4 digits of the receiving account, and bank.
- Cash entries you add: amount, bill number, note and bill photo.
- Who added each entry, when, and every later edit, delete or restore (a change history the owner can see).
Text is read from photos on the phone itself, using Google ML Kit. Photos are not sent anywhere for reading.
Bank alerts on the owner's phone
This only happens on an Android phone where the owner turns on notification access for Aaj ka Hisab in Android settings.
- The app looks at incoming notifications and keeps only those that look like money received into your account (an amount plus words like received or credited). Sent, debited, OTP, chat and all other notifications are ignored and not saved.
- From a matching alert we save online only: amount, reference ID, last 4 digits of your account, and the time. The full message text is not uploaded.
- On the phone, a matching alert waits in a short queue until it is saved online, so nothing is lost when the internet is down. A short list of recent alerts is also kept on the phone to skip duplicates.
- You can turn notification access off at any time in Android settings. Verification then stops on that phone.
App lock
Your app PIN is stored on your phone only, as a salted hash. Fingerprint and face unlock are handled by Android; the app never receives your fingerprint or face data.
Feedback
If you send feedback from the app, we keep your message, any contact details you type, and the app version.
What we do not collect
- Your bank login, card numbers or PINs.
- Your contacts, location or other photos on your phone.
- Advertising IDs or analytics tracking.
Why we use it
- To run the app: log you in, show your business its payments and totals, and match photos to bank alerts.
- To keep accounts safe: daily limits, duplicate checks, the change history, and account recovery codes.
- To answer your messages and fix problems.
Who can see your data
- Inside your business: the owner sees all of the business's payments, photos, alerts and history. Staff see what their role allows in the app.
- Other businesses: cannot see your data. Access rules in our database keep each business separate.
- Us: only when needed to run the service, fix a problem you report, or handle a deletion request.
Services we use
| Service | What it does for us | Where |
|---|---|---|
| Supabase | Database, private photo storage and sign-in | Servers in Mumbai, India |
| Resend | Sends sign-up and recovery code emails | Sends from Tokyo, Japan |
| Google sign-in (if you use it), Google Play, and on-device text reading (ML Kit) | Google's own terms apply |
We do not sell or rent your data to anyone. We share it with others only if the law requires it.
How long we keep it
- Your data is kept while your account is active.
- When an owner deletes a payment, it is kept marked as deleted so it can be restored, until the account is deleted.
- When an account is deleted, its data is removed as described on Delete your account.
- Sign-up and recovery codes expire within minutes and are then useless.
Security
Data travels over encrypted connections (HTTPS). Photos sit in a private storage area that needs a signed-in member of your business to open. No system is perfectly secure, so keep your password and app PIN to yourself.
Your choices
- See and correct your data in the app.
- Turn off notification access at any time.
- Ask us for a copy of your data, or to delete it, at [email protected].
Children
Aaj ka Hisab is a business tool and is not meant for children under 13. We do not knowingly collect data from them.
Changes to this policy
If we change this policy, we will update the date at the top. If a change affects how we use your data, we will tell you in the app first.
Contact
Email [email protected].