سياسة الخصوصيةPrivacy Policy

Last updated: 12 August 2026

1. Data We Collect

We collect the following data to provide our expense tracking service:

• Sign-in details: The email address, phone number, and/or Google or Apple account linked to your account, used for authentication and identification.
• Purchase data: Store, date, items, prices, categories, and notes you enter, along with budgets and monthly income if you provide them.
• Receipt images: Photos you choose to capture or upload so that invoice details can be extracted from them. They are stored attached to the purchase they belong to.
• Voice recordings: When you use voice logging, the clip is sent to be turned into expense details. We never store the audio itself; we keep only a daily counter of how many times the feature was used.
• Notification subscriptions: The device identifier and encryption keys needed to deliver reminder notifications, for each device on which you enable them.
• Time zone and language preference: Your time zone is captured automatically from your browser so reminders fire in your own local time, and your language preference is saved to customize the interface.

2. Storage and Retention

Your data is stored in an encrypted SQLite database on our servers. We retain your data for as long as you use the service. When you delete your account, all your data is permanently deleted and cannot be recovered. A record that a support access took place — its time and how long it lasted — survives deletion, while the stated reason is erased along with your account. What remains identifies nobody: once the sign-in identities are gone, the identifier it stores no longer points to anyone. It survives so the access remains accountable even after you have left.

3. Your Rights

You have the following rights:

• Right of access: You can export all your data as an Excel file from the dashboard.
• Right to erasure: You can permanently delete your account and all associated data from the dashboard.
• Right to rectification: You can edit your purchase data and categories at any time.

4. Data Sharing

We do not sell your data and we do not share it for any marketing or advertising purpose. Your data belongs to you. It leaves our servers only where that is necessary to operate the service, namely:

• Google Gemini or OpenAI: When you use invoice scanning or voice logging, the image or audio clip is sent to the artificial-intelligence provider the service relies on — either Google Gemini or OpenAI — so the expense details can be extracted from it, and the result is returned to you.
• Savings advice: About twice a month, the purchase lines from your last ninety days — the date, the shop, the item name, the category and the amount — are sent to that same artificial-intelligence provider so it can suggest specific ways to save money. Your receipt images, your voice recordings, your name, your email address and your phone number are not sent. The resulting advice is stored in your account and is deleted with it.
• Notification services: The text of a notification passes through your browser's or your device operating system's push service in order to reach you.
• Google and Apple: When you sign in with them, we only receive your email address and name.
• The payment provider: When you subscribe, the payment is processed by the payment provider (Paymob on the web, or Google Play inside the Android app). Your card details are entered with the provider directly; they do not pass through our servers and we do not store them. What we keep is the card type, the last four digits, the expiry date and the provider's subscription reference — enough to show you your payment method and manage your renewal.

5. Access by Our Support Team

In the ordinary running of the service, nobody at Fawatery reads your purchases. The administrative view shows aggregate figures only — how many accounts exist, how many purchases were recorded, which features are used — and no individual purchase, item, store, amount, or receipt image from any account.

When you ask us for help with a problem on your account, a member of the team may need to look at your data to resolve it. That access is subject to the following:

• A recorded reason: A reason must be stated before access is granted, and that reason is kept permanently.
• One account only: Access is granted to your account alone. More than one account can never be viewed at a time.
• A limited period: Access expires automatically after thirty minutes with no action required, and can be ended sooner.
• Read only: Support cannot change or delete your financial records through this access.
• A log you can read: Every access is recorded permanently, and you can review when your account was accessed and why from the account menu in the app, without contacting us.

Your name, email address, and phone number are visible to administrators in the account list without this procedure, because identifying the person who asked for help is a precondition of helping them. That list contains none of your purchase data.

6. Security

We use passwords encrypted to the latest standards, signed temporary tokens for sign-in, CSRF protection, and HTTPS encryption for all communications.

7. Deleting Your Account

You can permanently delete your account and all of your data at any time from the account menu in the app. Deletion is immediate and cannot be undone. Step-by-step instructions are on the account deletion page.

8. Contact

For any enquiry, or if you cannot access your account, email us at [email protected] from the address linked to it.