Privacy Policy
Last updated: 4 August 2026
Unharam is a personal-finance app for UAE households. This policy explains what we collect, why, who we share it with, and the choices you have. It applies to our website at unharam.com and to the Unharam mobile apps.
1. Who we are
Unharam ("we", "us") is an independently operated app, and is the data controller for the information described here. For any privacy question, or to exercise a right below, contact machchhargita@gmail.com.
2. What we collect
| Data | Why we hold it |
|---|---|
| Email address and password (stored only as a secure hash) | To create and secure your account |
| Display name | To personalise the app |
| Transaction records you import or enter — date, amount, merchant, category, bank name, last four digits of a card | To show your spending, budgets and insights |
| Budgets, savings goals, zakat calculations and giving records | Core features you asked us to save |
| Questions you send to the in-app assistant | To generate an answer |
| Basic technical data — IP address, device and app version, error logs | Security, abuse prevention and fixing crashes |
We do not collect: bank usernames, passwords, OTPs or full card numbers. We have no connection to your bank and cannot move money.
3. How statement files are handled
When you upload a PDF or CSV statement, the file is parsed in your browser or on your device. The original file is not uploaded to us. Only the resulting transaction rows are saved to your account, and only if you choose to save them.
4. Why we may use your data (legal bases)
- To perform our contract with you — running the account and features you signed up for.
- Legitimate interests — keeping the service secure, preventing abuse, and fixing faults.
- Consent — optional emails such as the weekly review. You can withdraw this at any time.
- Legal obligation — where we must retain or disclose data by law.
We do not sell your personal data, and we do not use your financial data for advertising or profiling.
5. Who we share it with
Only the service providers needed to run Unharam, each bound to protect your data and to use it solely on our instructions:
| Provider | Purpose | What it can see |
|---|---|---|
| Supabase | Database, authentication, hosting of our backend | Your account and saved records |
| Vercel | Website and app hosting | Technical request data |
| OpenRouter | Powers the in-app assistant | The question you ask and the relevant figures needed to answer it |
| Email delivery (Supabase / Resend) | Verification and password-reset emails | Your email address |
We may also disclose data if required by law, or to protect our rights or the safety of users.
6. International transfers
Our providers may process data outside the UAE, including in the EU and the United States. Where that happens we rely on appropriate safeguards, such as standard contractual clauses.
7. How long we keep it
We keep your data for as long as your account is active. If you delete your account, we remove your personal data and financial records from our live systems immediately. Any residual copies held in our hosting provider's automated backups are overwritten on that provider's own rolling schedule. We may keep a minimal record where the law requires it.
8. Security
- All traffic is encrypted in transit (HTTPS/TLS).
- Data is stored by our hosting provider with encryption at rest.
- Row-level security isolates every account, so one user cannot read another's data.
- Passwords are hashed and never stored in readable form.
- Keys for third-party services stay on our servers, never in the app.
No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority if a breach affects you.
9. Your rights
Depending on where you live, you may ask us to:
- access a copy of your data;
- correct anything inaccurate;
- delete your account and data (see below);
- export your data — you can do this yourself from Settings;
- object to or restrict certain processing;
- withdraw consent for optional emails.
These rights are provided under the UAE Personal Data Protection Law and, for users in the EU/UK, the GDPR. Email machchhargita@gmail.com and we will respond within 30 days.
10. Deleting your account
You can delete your account and all associated data at any time from Settings → Delete my account inside the app. You can also request deletion without installing the app — see unharam.com/delete-account.
11. Children
Unharam is not directed at children and is not intended for anyone under 13. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
12. Cookies and local storage
We use only what the app needs to work — a session token to keep you signed in, and local storage for preferences such as your display currency. We do not use advertising or cross-site tracking cookies.
13. Changes to this policy
If we make a material change we will update the date above and notify you in the app or by email before it takes effect.
14. Contact
Privacy questions: machchhargita@gmail.com
General support: machchhargita@gmail.com