HissabAI
Login

Privacy Policy

Last updated: October 2026

1. Introduction

HissabAI ("we", "our", or "us") is a WhatsApp-based personal finance assistant designed for users in Pakistan. Our service is accessible at hissabai.com. We help you track expenses, manage budgets, and understand your spending — all through WhatsApp. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use HissabAI.

By using HissabAI, you agree to the practices described in this policy. Please read it carefully.

2. Information We Collect

We collect the following types of information to provide and improve our service:

  • Phone number — used to identify your account and communicate via WhatsApp.
  • Name — collected during onboarding to personalise your experience.
  • Transaction data — expense and income records you share with us through WhatsApp messages.
  • Receipts — images or documents you send for expense tracking.
  • Voice notes — transcribed to text so the entry can be recorded.
  • Names of other people you mention — for example the person in an udhar (loan) entry, so we can track who owes whom. Only you can see these records.
  • Payment records — subscription billing information processed through our payment provider.

3. How We Use Your Information

We use your information solely to operate and improve HissabAI:

  • To run the service and respond to your WhatsApp messages.
  • To generate spending summaries, reports, and budget alerts.
  • To process subscription payments and manage your account.
  • To send scheduled financial reports and reminders via WhatsApp.
  • To improve our AI and service quality over time.

We will never sell your personal data to third parties. We do not use your data for advertising or share it with advertisers.

4. WhatsApp & Meta

HissabAI operates through the WhatsApp Business API, which is provided by Meta Platforms, Inc. When you message us on WhatsApp, your messages are routed through Meta's infrastructure. Meta's own Privacy Policy and Terms of Service govern how Meta handles data on their platform. We recommend reviewing Meta's policy to understand how they process your messages. HissabAI only stores data that is explicitly saved to our systems as described in this policy.

5. AI Processing

To understand your messages and extract financial information, HissabAI uses the Anthropic Claude API. Your messages are sent to Anthropic's API for processing in order to identify transactions, categorise expenses, and generate responses. Your phone number is not sent to the AI. We store the structured transaction data extracted from your messages; a transaction's note may contain the words you typed (for example “biryani”). To follow a conversation, your last few messages are kept for up to 6 hours and then discarded. Our server logs do not record the content of your messages, and phone numbers in logs are masked. Voice notes are transcribed by Groq (Whisper speech-to-text) and the audio is not stored by us. Anthropic's use of data sent via the API is governed by their Privacy Policy.

6. Data Storage & Security

We take the security of your data seriously. Here is how we protect it:

  • Encrypted connections — data travels between you, WhatsApp, our website and our servers over encrypted (HTTPS) connections.
  • OTP authentication — access to your account and the web dashboard is protected by one-time passwords sent via WhatsApp.
  • Receipts — uploaded receipt images are stored in private storage on our servers and can only be opened by your own account.

While we implement industry-standard safeguards, no system is completely immune to security risks. We encourage you to keep your WhatsApp account secure.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account (send “delete my account” to HissabAI on WhatsApp and confirm), your transactions, receipts, budgets, udhar records, reminders and profile details are deleted immediately, and your phone number is removed from your account. Payment records are retained as required for billing and applicable law. To prevent repeated free trials, we keep a one-way fingerprint (hash) of a deleted phone number, from which the number cannot be recovered.

8. Your Rights

You have the following rights over your data:

  • Access — request a summary of the data we hold about you.
  • Export — download your transactions as a CSV file at any time from your dashboard.
  • Correction — correct inaccurate transaction records through WhatsApp or the dashboard.
  • Deletion — send “delete my account” to HissabAI on WhatsApp and confirm to delete your account and its data.
  • Opt out of messages — send STOP on WhatsApp to stop all reminders, reports and offers (send START to resume), or use “reminder off” / “reports off”. You can also choose alert types in your dashboard Profile.

To exercise any of these rights, contact us via WhatsApp at +923714224312.

9. Children's Privacy

HissabAI is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with their information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For minor changes, we will update the "Last updated" date at the top of this page. For major changes that materially affect how we use your data, we will notify you directly via WhatsApp before the changes take effect. Your continued use of HissabAI after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please reach out to us: