سياسة الخصوصية

Privacy Policy

Effective date: October 18, 2026.

For Google Play and App Store reviewers. Legal text to be finalised by the user/lawyer; items marked [CONFIRM] need technical confirmation from backend/flutter. Arabic version later at /ar/privacy/ or same page with toggle.

Sections

1. Who we are. Developer Hesham Elaw (https://heshamshawky.com/), contact support@mizaniti.app. App ID app.mizaniti. Website mizaniti.app.
2. Summary (plain English). Free: data stays on your device; no account, phone number or code needed. Backup, Pro or linked accounts: you sign in with Google, Apple or email (never a phone number) and we store the data needed. We do not sell personal data.
3. Data we process, by mode.

• Free, no account: ledger data (customers, suppliers, entries, notes, bill photos) is stored locally on your device. We do not receive it. [CONFIRM no analytics of ledger content]
• Country: you choose your country in the app. It is sent to us when you sign in, used for regional statistics and to set your default currency, never shown to other users (including linked counterparties), and deleted with your account. Without an account, it stays on your device.
• Account (backup / Pro / linked accounts): email or Google/Apple identifier, name if provided; ledger data you sync (parties, names, phone numbers, entries, notes, plans, books). Bill photos stay on device in v1.
• Linked accounts: the other party sees entries on the shared account only (amount, date, note, creator, status).
• Purchases: handled by Google Play / Apple through RevenueCat; we receive subscription status, not card data.
• Contacts: read only when you choose to add a customer from your contacts (permission requested at that moment); not uploaded unless you add the contact to a synced book.
• Camera/photos: only to attach bill photos.
• Advertising (free tier): small banners via [PLACEHOLDER ad network] which may collect device advertising ID. [CONFIRM and disclose in Data Safety / ATT on iOS]
• Diagnostics: [CONFIRM crash reporting provider].

4. WhatsApp and SMS. We prepare text and open WhatsApp or SMS; you send it. We do not access your WhatsApp account or messages.
5. Why we process data (purposes and legal bases). Provide the service, default currency, regional statistics, sync, linking, subscription, support, security, legal compliance.
6. Sharing. Service providers: hosting ([PLACEHOLDER VPS provider]), RevenueCat, Google/Apple sign-in, ad network, email provider. Linked counterparties as above. Legal requests. No sale of data.
7. International transfers. Server location [CONFIRM]; processors may be outside Egypt/KSA.
8. Retention. Local data until you delete the app. Account data while the account exists; after Pro lapses the oldest book's backup stays free and other books' server copies are deleted 90 days after Pro ends unless renewed; deletion on request/account deletion. Server logs (technical and security logs, without ledger content) are kept for 30 days.
9. Your rights and controls. Export (CSV/PDF), delete a book, delete account (in the app or from the public page https://mizaniti.app/delete-account/), contact for access/correction. Applicable laws: Egypt Personal Data Protection Law no. 151 of 2020, Saudi PDPL [lawyer to confirm].
10. Security. Encrypted in transit (HTTPS); access controls. No guarantee clause kept honest.
11. Children. Not directed to children under 13 (or 16 where required).
12. Old versions. Users of the earlier Mizaniti personal-budget app: their old data stays on device read-only; optional export. [CONFIRM wording]
13. Changes. Notice in app/site; date updated.
14. Contact. Email support@mizaniti.app.

Appendix: Data Safety form mapping (Google) and App Privacy labels (Apple) table: data type, collected?, linked to user?, purpose, optional?. To be filled by backend/flutter.