HisaabRakho keeps track of your spending. That is personal, so this page explains exactly what we keep and what we do with it.
What we store
- Your email address, to sign you in and to reply if you write to us.
- Your entries: the amount, the words you typed, the type (spent, sent, borrowed, lent), category, person, date and whether a payment was confirmed.
- UPI IDs you scan, type or choose to remember for a person, so we can open your UPI app for you.
- Sign-in data: a hashed one-time code (never the code itself), a session token stored as a hash, and the IP address that asked for a code, used only to limit abuse.
- Messages you send through the contact form.
What we never do
- We never ask for bank logins, card numbers or passwords, and never read your SMS.
- We never sell your data or show you ads.
- We never move money. Payments happen in your own UPI app.
Cookies and device storage
We use one cookie to keep you signed in. Your browser may also store a small amount of data on your device, such as which UPI app you used last, so the page can remember it. We don't use advertising or cross-site tracking cookies.
Camera
If you tap Scan, the page asks to use your camera to read a UPI QR code. Images are processed on your device and are not uploaded.
Where it is kept
Your data is stored in a managed database hosted in Singapore and the site is served through Vercel. Email is delivered through our email provider. These services handle data only to run HisaabRakho for us.
Keeping and deleting your data
Your entries stay until you ask us to remove them. To delete your account and everything in it, or to get a copy of your data, contact us from the email address you signed up with and we will do it.
Changes
If this policy changes in a way that matters, we will update this page and say so on it. Questions? Use the contact page.