1. Scope

This policy governs all data processed when you use the Jibiyar apps (mobile and desktop) and the jibiyar.com website. It forms an integral part of the Terms of Use.

2. Who is responsible for your data

The provider of Jibiyar is responsible for collecting and processing your data. Contact details are in the final section of this document.

3. What we collect

We collect only what the service needs in order to work:

• Account information: your mobile number or email address (for sign-in and authentication) and your display name, if you have entered one.
• Transaction data: the amount, currency, description, category, date and, where recorded, the beneficiary of each expense or income entry.
• Speech and its transcript: when you use voice entry, your audio is sent off to be turned into text and is not stored by us. The resulting text is kept as described in section 8.
• Chat messages: the text you write in the chat assistant and the replies you receive.
• Technical information: the app version and where the app was installed from. Device model, operating system version, language and network type are sent only if you choose to send a problem report (section 13).
• Device identifier: to prevent abuse of the free first month, we keep a hashed (one-way) identifier of your device, never the identifier itself.
• Error reports: when an error occurs, a technical error report is sent to our self-hosted system for debugging (section 12).
• Problem reports: only if you send one — your description, optionally a screenshot, and technical details. See section 13.
• Recent activity: if "Help improve Jibiyar" is on, the server keeps what you do in the app (chat messages, and creating, editing and deleting transactions and categories) for 24 hours. If you rate an answer or send a problem report in that time, the half hour before it is stored with it so we can find the fault. Voice is never stored.
• Website visits: on jibiyar.com, anonymous page-view statistics without tracking cookies; if you arrived through a campaign link, that campaign's code. See section 12.

4. What we do not collect

As an explicit commitment, we do not collect any of the following — not for ourselves and not for anyone else:

• Your location. The app requests no location permission.
• Your contacts, SMS messages, photos or device files.
• Banking details: card numbers, account numbers, PINs, or any data from your bank account. Jibiyar does not connect to your bank.
• Advertising identifiers or tracking cookies. There is no third-party advertising or behavioural analytics in the app, and the website sets no tracking cookies; the one exception is a campaign-code cookie that holds no identifier of you (section 12).
• We set up error reports so that they do not carry financial content, speech transcripts, phone numbers, email addresses or sign-in tokens.

5. Legal basis for processing

We process personal data only on one of the following bases, and each purpose has its own:

• Performance of the contract — creating and keeping your account, recording and showing your transactions, and providing the AI features. Without this processing the service you signed up for cannot be provided.
• Your consent — for notifications and for sending a problem report. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing before it.
• Legitimate interests — securing the service, preventing abuse, anonymous website statistics, keeping error reports so faults can be fixed, and improving the AI's answers with the ratings you give them. The "Help improve Jibiyar" switch is on for everyone, and a rating is stored only when you rate an answer yourself; switching it off in Settings deletes your ratings. We have weighed these against your rights, and you may object at any time.
• Legal obligation — where applicable law or an order from a competent authority requires it.

6. Purposes of processing

Your data is processed only to: provide and maintain the service; synchronise transactions across your own devices; build reports and spending analysis for you; authenticate and secure your account; handle your support requests; and fix technical faults.

We do not sell your data. We never sell, rent or otherwise make your personal or financial data available to any third party for advertising.

7. Speech processing and AI

When you record an expense by voice, your audio is sent to a speech-to-text provider to be turned into text. The text is then sent to an AI provider to extract the amount and category. Which providers are used can change; section 10 describes them and the transfers involved.

We do not store your recording. The audio stays in memory only while it is being transcribed and is then discarded: it is not saved on our servers and cannot be played back. How long a provider itself keeps data is governed by that provider's own terms.

The transcript is different: it is kept for up to 30 days to help us find faults, and it stays for good only as part of the expense or chat message you created. See section 8.

What the AI returns is a suggestion, not a fact. You can always correct the amount, the category and the date, and your correction replaces the suggestion.

8. How long we keep data

This section lists how long we keep each kind of data. Where a period is given, the data is deleted, or cut loose from you, automatically once it has passed.

• Transactions, categories and chat messages: for as long as your account is active. A chat message or transaction you delete is removed from our servers for good within 30 days. If "Help improve Jibiyar" is on, a text copy of it stays in your recent activity for up to 24 hours, and if you rate an answer or send a report in that time, it stays with that rating or report.
• Voice recordings: not stored (section 7). Voice transcripts kept for troubleshooting: 30 days.
• Records of AI use (which feature ran, which model, how large, what it cost — never the text itself): 13 months.
• Sign-in SMS log (masked number, status, cost): 90 days.
• Sign-in sessions: while they are valid, and for 30 days after they expire.
• Problem reports: screenshots and technical details for 30 days; a closed report is deleted 180 days after it was closed.
• Your ratings of AI answers: 12 months, or sooner if you switch "Help improve Jibiyar" off. The text of the answer you rated and the half hour of activity before it: 90 days.
• Recent activity: 24 hours, or sooner if you switch "Help improve Jibiyar" off.
• Error reports: 30 days. Warning-level server logs: 14 days.
• Website statistics: raw data for up to 25 months (section 12).
• The log of staff actions in the admin panel: 2 years.
• Backups: up to 30 days, then they rotate out. Data you have deleted can remain in a backup until it rolls over. We do not use a backup to bring back an account you deleted.
• “Delete account” in the app erases your data. Your account and the phone number or email address you signed in with, your transactions, categories, chat messages, corrections, ratings, problem reports and sessions are removed from our servers and cannot be recovered. Cost records of AI and SMS use are kept only with the link to you cut. Aggregated statistics that cannot be traced to a person may remain.
• One thing survives deletion and ties back to you only through a one-way fingerprint: a hash of your number or address together with your account's access dates, kept for up to 24 months so the free month cannot be claimed again by deleting and re-registering, and so that any remaining days of access come back with you if you return. If you remove a number or address from your account and the account has taken a free plan, the same hash is kept for that number or address, only to count the free months already taken. The full account is at jibiyar.com/delete-account.
• If you cannot get into the app, ask us through any channel in section 19. We will carry it out and tell you when it is done, within thirty days at the latest. This is your right and it is free.

9. Sharing with third parties

We do not sell your data and we do not give it to anyone for advertising. Only to these processors, and only as far as necessary:

• The hosting provider: on whose infrastructure our servers run.
• Speech and AI providers: your audio (for transcription) and the text of your entries and questions (for extracting details and answering). See sections 7 and 10.
• The email provider: your email address only, and only to send the one-time sign-in code.
• The SMS provider: your phone number only, and only to send the one-time sign-in code — if you sign in by phone.
• Competent authorities: only under a lawful order.
• Our website statistics and error-reporting systems are self-hosted and run on our own infrastructure (section 12).

10. Providers and transfers to other countries

Your account data is stored on servers that our hosting provider runs for us. For particular tasks we hand data to the following kinds of providers, and only as far as the task needs:

• OpenAI (OpenAI, L.L.C., USA), our speech-to-text and AI provider: when you use voice entry, chat or the savings analysis (in the iPhone app, only after you agree there), we send it your voice recording (to turn it into text; the audio is not kept once it has been turned into text), the text of what you said and the messages you type (to understand them and reply), and, for the savings analysis, a summary of your spending. OpenAI processes this data only to provide that service to us, does not use it to train its models, and is bound by its contract with us to protect it with the same or equal protection as this policy. In the iPhone app you can withdraw that agreement at any time in Settings (AI data sharing); the AI features then stop until you agree again.
• SMS.ir: your phone number and the sign-in code, if you sign in by phone.
• The email provider: your email address and the sign-in code, if you sign in by email.

Some of these providers are established in another country than our servers, and possibly than yours. Your data may therefore be processed in countries whose data protection rules differ from those where you live.

The safeguards depend on the provider. Ask us through section 19 and we will tell you which providers and countries apply to your data and what we rely on for each.

Using the service means that your data is transferred to these servers and providers to be stored and processed.

11. Security

Traffic between the app and our servers is always encrypted (TLS). Your sign-in tokens are held in the operating system's secure storage on your device — Keychain on iOS, EncryptedSharedPreferences on Android — and are never stored in plain text. Staff access to user data is restricted and granted on a need-to-know basis.

That said, as is true of any system, no method of transmitting or storing information is completely secure. We cannot guarantee absolute security, but we undertake to notify you at the earliest opportunity if a breach puts your data at risk.

12. Website analytics and error reporting

Website statistics. The jibiyar.com website counts visits with Umami, which we run ourselves at umami.jibiyar.com. It works without cookies and stores nothing on your device. It records which pages are viewed, the page you came from, your approximate country, the type of device, browser and screen, and how quickly pages load. It records no name, phone number or email address and builds no profile of you across sites. As with any website, your IP address reaches our server with each request; the statistics do not record it. Raw statistics are kept for up to 25 months.

Campaign links. For events and ads we create links such as jibiyar.com/r/BAIC2026. If you arrive through one, we count how often that code was opened and how often its install buttons were clicked. So that each visitor counts once a day, we make a one-way hash of your IP address and browser type with a random daily key. The address and browser type are not stored, and the hashes and the key are deleted the next day; only each code's daily totals are kept. On the Persian and English website, the campaign code is kept in a cookie for up to 7 days so that an install click can be tied to it. The cookie holds only the code and no identifier of you. The German website does not set it. If you then install the app from Google Play through that link, Play passes the code to the app with the install, and we keep it with your account to know which campaign brought you.

Error reports. When something fails in the website or in the app, a technical error report may be sent to our self-hosted error-tracking system (Bugsink). We set it up to leave out user identifiers, phone numbers, email addresses and what you typed. Error reports are kept for 30 days.

Why, and how to object. Both serve our legitimate interest in running the website and fixing faults (section 5). Because the statistics are not tied to you, we usually cannot pick out your visits; you can stop them yourself by blocking the script in your browser, and the website works the same without it. You may also object through any channel in section 19.

13. Problem reports

If you send a problem report from the app, the app first shows you what will be sent (“See what's sent”). A report can contain: what you wrote; one screenshot, if you attach it; the app version, device model, operating system version, language and network type; if "Help improve Jibiyar" is on, what you did in the app in the last half hour (messages and changes to transactions and categories); and a short technical trail of recent app events and request identifiers that helps us find the fault. A screenshot can show money and names, so check it before you send it.

How long: the screenshot, the recent activity and the technical trail are deleted after 30 days. The report text and our replies stay until the report is closed, and a closed report is deleted 180 days later. A report is also erased with your account, and you can ask us to delete one you sent through any channel in section 19.

Who sees it: only staff who handle support. Each time staff open a report, that is recorded in an access log. We send a report because you chose to, and you can leave it unsent.

14. Your rights

You have the following rights over your personal data, and exercising them is free:

• Access — find out what data we hold about you and get a copy of it. The app can export your data for you.
• Rectification — have inaccurate data corrected.
• Erasure — delete your account in the app, or ask us for your data to be deleted. Section 8 explains what is erased and what is not.
• Restriction — ask us to pause processing.
• Portability — receive your data in a structured, machine-readable format so you can take it elsewhere. The export in the app gives you that.
• Objection — object to processing based on legitimate interests, including website statistics and error reports (section 12).
• Withdrawing consent — at any time, without affecting the lawfulness of processing before it.
• Complaint to a supervisory authority — if you believe your data has not been handled properly you may complain to a data protection supervisory authority, for example where you live or work. That right is independent of our answer to you.
• To exercise any of them, contact us through any channel in section 19. We answer within thirty days at the latest.

15. Children

The service is not designed for people under 18. We do not knowingly collect data from children. If we learn that an account belongs to a minor without guardian consent, we will delete it.

16. Device permissions

The app asks for only these permissions, each solely for its stated purpose:

• Microphone: only for recording expenses by voice, and only while you are holding the mic button. The app does not listen in the background.
• Notifications: only for the daily reminder. Your operating system asks you for this permission once; it is optional, and declining it affects nothing else in the app.
• Internet: to synchronise with the server.

17. Notifications

The daily reminder is on by default: one silent notification a day, and only on days when you have not recorded anything. You can turn it off whenever you like, in the app's settings or in your OS settings. Its scheduling happens on your own device and sends nothing to the server.

18. Changes to this policy

We may update this document. The current version is always available in the app and at jibiyar.com/privacy. For a material change — particularly to what we collect or how long we keep it — we will notify you in the app before it takes effect and ask for your consent again.

19. Contact and complaints

For any privacy question or complaint, reach us through these channels. We answer requests about your data within thirty days at the latest:

• Email: ⁦info@jibiyar.com⁩
• Telegram: ⁦@Jibiyar_support_bot⁩
• Support page: ⁦jibiyar.com/support⁩
• If you are not satisfied with our response you may take the matter to the competent data protection supervisory authority.