Privacy Policy
Last updated: July 10, 2026

HisabKitab is a bookkeeping app for small and micro businesses. This policy explains what information we collect, why, and how we protect it.

What we collect

Account information: your phone number and/or email, and your name if you add one to your profile.

Business data you enter: income, expenses, sales, invoices, customers, debts, investments, budgets, and your business profile (name, logo, address, phone).

Usage data: basic device/browser information needed to keep the app working (e.g. offline sync state), stored locally on your device.

How we use it

To run the core bookkeeping features you use — recording transactions, generating invoices, calculating your dashboard and insights, and syncing your data across your devices.

To send you a one-time password (OTP) by SMS when you log in with your phone number.

If you choose to use the AI Financial Advisor on the Insights page, a summary of your business's calculated numbers (totals, ratios, category breakdowns — not raw transaction descriptions or contact names) is sent to our AI provider to generate advice. You control whether you use this feature.

Who we share data with

We don't sell your data. We share it only with the service providers that make the app work: Supabase (our database and authentication host), our SMS provider (to deliver login OTP codes), and Anthropic (to power the AI Financial Advisor, only when you use it). Each of these providers is bound to use your data solely to provide their service to us.

If your business has team members (Team & Staff), everyone you add with Admin or Viewer access can see the business data you grant them access to.

Where your data lives

Your business data is stored in our Supabase database. A copy is also kept on your device (offline storage) so the app keeps working without internet, and syncs back once you're online.

Your controls

You can download your data as CSV files anytime from Export Data, and permanently delete a business and all its records from Business Profile. Deleting a business cannot be undone.

You can turn off which in-app alerts you see from Notification Settings.

Security

Access to your business data is protected by your account login and, for shared businesses, by the role each team member is given. We rely on Supabase's infrastructure for encryption in transit and at rest.

Changes to this policy

If we make material changes to this policy, we'll update the date below and let you know in the app.

Contact us

Questions about this policy or your data? Email support@jaantrix.com.bd.