Last updated: 15 October 2026.
HisaabNama is provided by Shafi. It helps you keep a personal or business ledger on your Android phone. Contact HisaabNama Support (shafi@shafiullah.dev) with privacy or support questions.
Your records
You choose the book details, people's names and contact information, amounts, dates, notes, categories, tags, recurring schedules, unfinished drafts and optional receipt photos you enter. Each book has its own encrypted database and protected keys on your phone. The encrypted book list contains book names, currencies and archive status. Language, appearance and app lock are shared across books. It does not require a HisaabNama server account or automatically send your ledger to us.
Receipt photos are selected using Android's Photo Picker, resized and converted to JPEG with original EXIF metadata removed. They stay with the encrypted book and are included in backups you create. The app does not request access to your entire photo library.
Choose from contacts uses Android's contact picker to read only the selected name and phone number. You review the details before saving them in the current encrypted book. Names keep their original text and script. The app does not request full address-book access, sync your contacts, or change the contact on your phone. Saved person details are included in the book's backups and exports you choose to create.
PDFs, voice notes and receipt text
PDF receipts and voice notes are optional. Microphone permission is requested only when you choose Record. Recording stays on the phone, lasts up to two minutes and stops when you leave the app. Recording scratch files are encrypted with a temporary key held only in memory. PDFs, saved voice notes and photos stay in the encrypted book and in its encrypted backups. Removing a saved attachment keeps it available to restore; discarding a draft removes files that belong only to that draft.
Receipt text recognition (OCR) uses bundled English and Urdu models on this phone. It does not upload your receipt to an OCR service or require a paid OCR account. The recognition score is an engine estimate, not a guarantee. You choose and correct the fields to fill, and must explicitly save the transaction separately.
PDF and audio previews use temporary readable files in the app's private cache. They are removed when the preview closes or at the next app start after an interruption. Choosing Open original or Share file creates a readable copy and grants the receiving app access through Android. Shared copies older than one day are removed at the next app start. Receiving apps may keep their own copies under their policies.
Optional Google Drive backup
You may authorize Google Drive backup. The app requests access only to Drive files it creates or you open with it through the drive.file scope. It encrypts backup contents on the phone with your recovery password before uploading them to your chosen Google account. Google processes account authorization, network requests, file names and storage under its own privacy policy (https://policies.google.com/privacy).
The app retains the selected Google email and, when you choose to save it, your recovery password in phone storage protected by Android Keystore. It does not retain Google bearer access tokens. Keep a separate private copy of your recovery password: we cannot reset it or decrypt a password-protected backup for you.
Automatic backup is optional and best effort, generally daily when connectivity and battery conditions allow. It retains seven active snapshots for the same book; older snapshots move to recoverable Drive Trash. Disconnecting Google stops scheduled backup for every local book using that account and revokes its authorization, but it does not delete existing Drive files. You control deletion of those files through Google Drive.
Exporting and sharing
You can save CSV/XLSX files, filtered PDF reports, encrypted backup files and PDF statements to destinations you choose through Android. CSV, XLSX and PDF exports contain readable financial information. Android and the receiving app or storage provider handle the files you save or share under their own policies. Generating a PDF creates a temporary local file; statement files older than seven days are removed when you next export a statement. Filtered exports use temporary files that are removed after saving or cancellation; shared copies older than seven days are removed when another filtered export is prepared. Drafts, tags, schedules and saved search filters stay in the encrypted book and are included in encrypted backups. Launcher widgets show only quick actions and expose no names, amounts or notes.
Phone security and reminders
Optional app lock uses Android's biometric or device-credential prompt. HisaabNama does not receive or store a biometric template or your phone's unlock credential. Reminder notifications use generic text without a person's name or amount and open the relevant ledger. You can control notification permission in Android Settings.
Android's automatic cloud/device-transfer backup is disabled for the book. Use HisaabNama's external encrypted backup for recovery on another phone. Phone system services remain subject to the phone provider's policies.
Keeping and deleting data
Records stay on the phone until you remove the app's data, uninstall it, or replace the book through a confirmed restore. Deleting an entry inside HisaabNama is recoverable and keeps its data/history for restoration. A confirmed restore creates an encrypted safety copy; key-recovery operations also preserve original encrypted files on the phone. These recovery copies remain local until the app's data is removed. Archiving a book keeps its records and keys while pausing its reminders and automatic backup. Rebuilding a damaged book list preserves the old encrypted metadata and pauses automatic backups; it does not replace financial records.
Clearing app data or uninstalling removes the local book, settings, protected key records and local recovery copies. Externally saved or shared files and Google Drive backups remain with the destination you chose; delete those separately if desired. Keep a usable backup before clearing data if you want to retain your book.
Business cards and credit warnings
Business cards share only the saved book details you select after reviewing the preview and choosing an Android destination. Phone, email and city start unselected. Card text excludes people, balances and transactions. Optional person credit-warning limits stay in the encrypted book and its encrypted backups. Warnings do not move money, block a valid save or provide lending. Receiving apps handle the shared text under their own policies.
Current integrations and future changes
The current build contains no advertising, subscriptions, HisaabNama server synchronization, analytics integration or crash-reporting integration. Android and Google services may process service information under their own policies. If we add integrations that change how information is handled, we will update this notice and any required disclosures before releasing them.
Barcode scanning
Inventory barcode scanning is optional and runs on this phone. Camera permission is requested only when you choose Use camera. Camera frames are not saved or uploaded, and capture stops when you leave the app or a code is found. Choose barcode image reads only the image you select, without retaining photo-library permission or a copy. Review the result before using it to search or fill the barcode field. A code becomes book data only when you explicitly save an item. Scanning never changes stock, posts a transaction or opens a URL automatically.