Privacy Policy

Last updated: October 3, 2026

Mizan is a personal expense tracker. Your financial data stays on your device by default. We do not create accounts in your name, sell your data, or use analytics or advertising SDKs.

Data the app processes

• Your transactions (amount, merchant, category, date), budgets, assets and goals - stored on device.
• Bank messages you paste or share into the app - parsed on device; never sent to our servers.
• Voice for voice entry - transcribed by your device's own speech service under its maker's policies; we keep no recordings.
• Receipt photos - read on device, never uploaded.
• Bank notifications where your device's system allows reading them - only with your explicit permission, processed on device.

Sync and third-party services

• Sync and backup (Pro members): your data syncs and backs up to your own cloud account (iCloud or Google Drive, depending on your device); we cannot access it.
• Shared wallets: only that wallet's data (name, member display names, entries) is stored via iCloud (Apple devices) or Firebase by Google (any device), under an anonymous identity with no email or phone number. If you choose to link the account to Apple or Google to recover it on another device, your email and display name are stored in Firebase Authentication for that purpose only, and are deleted when you delete the account from Settings.
• Gold and exchange rates are fetched from public providers (goldprice.org, gold-api.com, open.er-api.com) without sending any data about you.
• Merchant naming: to resolve an unclear merchant, the merchant name alone (never amounts or accounts) may be sent to a maps service through our own proxy; you can turn this off in Settings.
• App integrity: the app sends Firebase App Check an attestation from your device's system that it is the genuine app, to protect shared wallets and merchant naming from abuse. It carries no data about you.
• Message-reading rules: the app downloads updates to its bank-message rules - download only, nothing from your messages is sent.

Permissions

Camera (receipts and shared-wallet invite codes), microphone and speech recognition (voice entry), Face ID/biometrics (app lock), notifications (reminders) - all optional, requested on first use.

Subscriptions

Payments go through the app store you purchased from; we never see or store your card details.

Retention and deletion

Data is kept while the app is installed. Deleting the app removes it from the device, while shared-wallet data and the sharing account remain until you delete them in Settings; “Erase all data” in Settings removes it and its backups from your cloud account; deleting a shared wallet removes its data from the sharing service.

Website waitlist

If you join the waitlist on our website, we store your email in Firebase only to tell you about the launch, and delete it on request.

Children

The app is not directed to children under 13.

Changes and contact

Updates are posted on this page. Contact: mizanappsa@gmail.com.