Privacy Policy

Last updated: January 2026

1. Introduction

Welcome to MyHishob. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our app. By using MyHishob, you agree to the terms described in this policy.

2. Information We Collect

We collect information you provide directly, such as your name, email address, age, and financial data you enter (expenses, income, categories). We also collect usage data automatically, including device type, OS version, app version, and crash reports via Firebase Crashlytics. We do not collect payment card details or bank credentials.

3. How We Use Your Information

We use your information to provide and improve the MyHishob service, personalise your experience, send account-related notifications, and respond to support requests. We do not use your financial data for advertising or sell it to third parties.

4. Data Storage

Your data is stored in Google Firebase Firestore, hosted in the asia-south1 (Mumbai) region. Local device caching uses encrypted Hive storage. Firestore security rules restrict each user to their own data only.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share data only with Firebase (Google LLC) for database and authentication services, and Firebase Crashlytics for crash reporting. Family expenses you mark as shared are visible to your family group members. Personal expenses are never shared.

6. Your Rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, use the Profile section of the app or contact us via Help & Support.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data will be permanently deleted from our servers within 30 days. Anonymised usage statistics may be retained indefinitely.

8. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access. These include HTTPS/TLS, Firestore security rules, and secure credential handling. However, no method of transmission over the internet is 100% secure.