Privacy policy

Effective 22 October 2026. Contact: qirshain.dev@gmail.com

Qirshain is a personal budget app for Android. This policy says what the app keeps on your phone, what it sends to our server, why, and how to delete it. It covers the Qirshain app and this website.

In short

• Your bank text messages are read on your phone and stay there.
• Your wallets, transactions and plans are saved to your account so they sync between your phones. Only you, and people you share a wallet with, can see them.
• If you turn on category sharing, shop names and the categories you pick are sent to suggest categories to other users. Never amounts, dates, card numbers or people's names.
• No ads, no analytics, no tracking. We do not sell your data.
• Deleting your account deletes your data from our server.

Bank text messages (SMS)

If you allow it, Qirshain reads text messages from the banks it supports, and only those. It reads messages already on your phone from a start date you choose when you set up a bank wallet, and new ones as they arrive. From each message it takes the amount, whether money went in or out, the last digits of the card or account, the shop or person, and the time, and adds a transaction to the wallet you linked to that card or account.

• The message text is kept in the app on your phone, so the same message is not added twice and you can see where a transaction came from. It is never synced or uploaded.
• Messages from other senders are not read. One-time passwords and notices from a bank are recognised and discarded.
• The transaction made from a message, including the shop or person the bank names, is saved to your account like a transaction you typed in.
• The app works without this permission. You can paste or share a message into it instead.

What is saved to your account

Qirshain needs an account, by email and password or with Google. What follows is stored on our server, sent over an encrypted connection, and readable only by you and the members of wallets you share:

• Account: your email, the name you give, and a colour. With Google sign-in, Google tells us your email and name. Passwords are handled by our sign-in provider and never stored in readable form.
• Your money records: wallets, including the bank and the last four digits of an account or card; transactions with their amount, date, category, tags and note; a place, people and photos if you add them; budgets, bills, recurring transactions, debts, events, goals and savings; your category rules; and your display and reminder settings.
• People you record: names, and an email or phone number if you add them, for debts and shared costs. Emails of people you invite to a shared wallet.
• Your devices: a device ID, the phone model, the app version, the last sync time, and a push notification token.
• Getting started: your answers to the short survey when you set up, including a goal you may type in.
• Help: messages you send through Contact us.

Shared wallets

When you share a wallet, the people you invite see its transactions, budgets and members. The first time you accept an invitation, we email you a six-digit code to confirm the address is yours.

Category sharing (optional)

To sort transactions into categories for everyone, Qirshain can send the name of a shop as your bank writes it, the category you picked for it from the app's list, and whether you count its payments as a subscription (yes or no). Nothing else: no amounts, dates, card digits, balances, message text or people's names. A category is suggested to other users only after several users picked the same one. The app explains this first, and nothing is sent unless you tap Share. You can turn it off in Settings; that deletes what you sent.

Reporting a problem

If you use Report a problem, we receive what you write, the topic you pick, the screens you visited just before, and a short list of the app's state (such as whether SMS reading is allowed and when the last sync ran), along with your account email. If you report a bank message the app misread, the app first replaces card and account digits, balances and people's names, shows you the result to edit, and sends it only when you tap Send. Reports are kept as issues in a private project on GitHub, where only the developer can read them.

What we do not collect

No contacts, no location in the background, no analytics, no advertising ID, and no ads. We do not sell, rent or trade your data, and we do not use it for advertising or research.

Who processes your data

• Supabase hosts our database, sign-in and photo storage.
• Google provides Google sign-in and delivers push notifications (Firebase Cloud Messaging).
• GitHub stores problem reports.
• Cloudflare hosts this website.

These providers process data only to run these services for us. Your data may be stored on servers outside Saudi Arabia.

On your phone

Everything works offline and is kept in the app's storage on your phone. Backups you make are locked with a password you choose and saved to a folder on your phone; we never receive them. A PIN or your fingerprint can lock the app.

Permissions the app asks for

• SMS: to read your bank's messages, as described above.
• Notifications: for new bank transactions, bills, budgets and reminders.
• Alarms and reminders: to remind you on time.
• Fingerprint or face: to unlock the app, if you turn it on.

Keeping and deleting your data

We keep your data while you have an account. You can delete your account in the app (Settings, Account and sync, Delete account) or as explained on the account deletion page. That deletes your account, every record listed above and your photos from our server. If you give a reason for leaving, we keep that reason without your name or email. Problem reports you sent stay as issues; ask us by email to remove them. You can export your transactions to a spreadsheet in the app at any time.

Security

Data travels over encrypted connections. Each account can read only its own data and the wallets shared with it, enforced by the database itself.

Children

Qirshain is meant for adults and is not directed at children.

Changes

If this policy changes, we update this page and its date.

Contact

Questions or requests: qirshain.dev@gmail.com