Zmahisab Privacy Policy

Effective date: 4 July 2026 · Contact: support@zmahisab.com

Zmahisab ("we", "us") is a digital khata (ledger) app that lets small business owners record customer credit and debit accounts. This policy explains what information the app collects, why, and the choices you have.

Information we collect

Account details — your email address, name, and optionally your phone number, country, and a profile photo. Your password is stored only in securely hashed form.
Ledger data you enter — your businesses, your customer records (names and, if you add them, phone numbers, addresses, and email addresses), and ledger entries (amounts, dates, and notes). This data is stored on your phone first and backed up to our servers so you can restore it and use multiple devices.
Contacts (optional) — if you choose "add customer from contacts", the app asks for contacts permission and uploads only the name and phone number of the single contact you pick, as a customer record. We never read or upload your full contact list in the background.
Device and diagnostic information — an app-generated device identifier (used to sync reliably and to de-duplicate entries), the app version, and technical error reports if the app or our servers hit a problem.

What we don't do: Zmahisab contains no advertising and no third-party analytics or tracking SDKs. We do not sell your data or your customers' data to anyone.

How we use information

To provide the service: storing, syncing, and restoring your khata.
To secure your account: sign-in, email verification codes, and password reset emails (delivered via our email service providers).
To support you and to fix errors and abuse.

Your customers' information

Customer records in your khata are entered by you and stored on your behalf solely to provide the service to you. You are responsible for having your customers' permission to keep their details in your ledger. Reminder messages and PDF statements are created on your phone and shared only through apps you choose (e.g. WhatsApp) — we do not message your customers.

Storage and security

Data is transmitted over HTTPS (encrypted in transit) and stored on our servers. Passwords are hashed; access to production data is restricted. Sensitive customer identity fields, where collected, are additionally encrypted at rest.

Sharing

We share data only with the service providers needed to run Zmahisab (server hosting, transactional email delivery), or if the law requires it. There is no sharing for advertising or marketing.

Data retention and deletion

Your data is kept while your account is active. You can delete your account at any time from Settings → Delete account in the app, or by following the steps on our account deletion page. Your account is deactivated immediately and permanently deleted after 30 days, including your profile, businesses, customers, and all ledger entries.

Children

Zmahisab is a business tool intended for adults (18+). It is not directed at children and we do not knowingly collect information from children.

Changes to this policy

If we change this policy we will update this page and its effective date. Significant changes will be announced in the app.

Questions or requests about your data: support@zmahisab.com.