HissabAI

Privacy Policy

Last updated: March 2026

1. Introduction

HissabAI ("we", "our", or "us") is a WhatsApp-based personal finance assistant designed for users in Pakistan. Our service is accessible at hissabai.com. We help you track expenses, manage budgets, and understand your spending — all through WhatsApp. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use HissabAI.

By using HissabAI, you agree to the practices described in this policy. Please read it carefully.

2. Information We Collect

We collect the following types of information to provide and improve our service:

  • Phone number — used to identify your account and communicate via WhatsApp.
  • Name — collected during onboarding to personalise your experience.
  • Transaction data — expense and income records you share with us through WhatsApp messages.
  • Receipts — images or documents you send for expense tracking.
  • Payment records — subscription billing information processed through our payment provider.

3. How We Use Your Information

We use your information solely to operate and improve HissabAI:

  • To run the service and respond to your WhatsApp messages.
  • To generate spending summaries, reports, and budget alerts.
  • To process subscription payments and manage your account.
  • To send scheduled financial reports and reminders via WhatsApp.
  • To improve our AI and service quality over time.

We will never sell your personal data to third parties. We do not use your data for advertising or share it with advertisers.

4. WhatsApp & Meta

HissabAI operates through the WhatsApp Business API, which is provided by Meta Platforms, Inc. When you message us on WhatsApp, your messages are routed through Meta's infrastructure. Meta's own Privacy Policy and Terms of Service govern how Meta handles data on their platform. We recommend reviewing Meta's policy to understand how they process your messages. HissabAI only stores data that is explicitly saved to our systems as described in this policy.

5. AI Processing

To understand your messages and extract financial information, HissabAI uses the Anthropic Claude API. Your messages are sent to Anthropic's API for processing in order to identify transactions, categorise expenses, and generate responses. Only the structured transaction data extracted from your messages is stored in our database — raw message content is not retained after processing. Anthropic's use of data sent via the API is governed by their Privacy Policy.

6. Data Storage & Security

We take the security of your data seriously. Here is how we protect it:

  • Encrypted servers — your data is stored on servers with encryption at rest and in transit.
  • OTP authentication — access to your account and the web dashboard is protected by one-time passwords sent via WhatsApp.
  • Amazon S3 for receipts — uploaded receipt images are stored securely in Amazon S3 with access controls.

While we implement industry-standard safeguards, no system is completely immune to security risks. We encourage you to keep your WhatsApp account secure.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated personal data — including transactions, receipts, and profile information — will be permanently deleted within 30 days of the account deletion request. Payment records may be retained for longer periods as required by applicable law.

8. Your Rights

You have the following rights over your data:

  • Access — request a summary of the data we hold about you.
  • Export — download your transactions as a CSV file at any time from your dashboard.
  • Correction — correct inaccurate transaction records through WhatsApp or the dashboard.
  • Deletion — delete your account and all associated data.
  • Opt out of reminders — unsubscribe from scheduled WhatsApp reports and reminders at any time by messaging us.

To exercise any of these rights, contact us via WhatsApp at +923714224312.

9. Children's Privacy

HissabAI is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with their information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For minor changes, we will update the "Last updated" date at the top of this page. For major changes that materially affect how we use your data, we will notify you directly via WhatsApp before the changes take effect. Your continued use of HissabAI after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please reach out to us: