Privacy Policy

Last updated: 1 June 2026

1. Who we are

Hisabin Pte. Ltd. ("Hisabin", "we", "us") operates the Hisabin mobile and web application. This policy explains what data we collect, why, and how we protect it.

2. Data we collect

We collect information you provide directly (name, email address, profile details) and information generated by your use of the service (portfolio balances, pocket transactions, zakat calculations). We do not collect your bank credentials — all account connections use read-only OAuth tokens issued by your financial institution.

3. How we use your data

Your data is used solely to provide, maintain, and improve the Hisabin service. We do not sell your personal data to third parties. Aggregated, anonymised usage statistics may be used for product development.

4. Data storage and security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We store data on servers located in Singapore and the European Union. Access is restricted to authorised employees on a need-to-know basis.

5. Data retention

We retain your account data for as long as your account is active. You may export or delete your data at any time from the account settings screen. Upon deletion, personal data is removed within 30 days.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data; to restrict or object to processing; and to data portability. To exercise any of these rights, contact us at [email protected].

7. Cookies and analytics

We use essential cookies required for the service to function and, with your consent, analytics cookies to understand how the product is used. You may withdraw consent at any time via your browser settings.

8. Third-party services

We use a small number of vetted third-party processors (authentication, cloud infrastructure, customer support). Each is bound by a data processing agreement and held to equivalent security standards.

9. Children's privacy

Hisabin is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to this policy

We will notify you of material changes via email or an in-app notice at least 14 days before they take effect. Continued use of the service after that date constitutes acceptance.

11. Contact

Questions? Email [email protected] or write to Hisabin Pte. Ltd., 1 Raffles Place, #20-61, Singapore 048616.

enid