Last updated: August 2, 2026
Everything you record — expenses, loans, savings, extra income, your balance, your name, occupation and income figures, and any receipt photos you attach — is stored on your device. It is not shared with anyone and is not used for anything beyond showing you your own figures. The one copy that leaves the device is your backup, described below; receipt photos are never part of it and stay on the phone.
So a lost or broken phone doesn't take your records with it, Hijazi Wallet keeps one backup of your data under your account — refreshed about once a day and whenever you log out. It contains what you record: expenses, loans, savings, extra income and your profile figures. It does not contain your app-lock passcode, which never leaves your device's secure storage, or your Advisor conversations. The backup sits behind your account and no other user can read it. Restoring on a new phone replaces whatever is on that phone with the backup. To be plain about the limit: this is protected by your account and encrypted in storage by our database provider, not end-to-end encrypted with a key only you hold — so we could technically access it, even though we don't.
You sign in with your email address or your Google account. Your email is held by our authentication provider (Supabase) purely so we can recognise you next time and enforce your Advisor message limit. Signing in with Google shares your email address and name with us, nothing else. We do not use your email for marketing, and Hijazi Wallet does not use phone numbers or SMS at all.
Hijazi Advisor is the one part of Hijazi Wallet that sends information off your device, and only when you send a message. What goes out: your message, and a short summary of your finances — category totals, the names and balances of your loans and savings goals, and your income figures. Your full transaction list is never sent. That goes to our server and on to Anthropic, which runs the Claude model that writes the reply. If a question needs a price check, your search terms are also sent to a web search service. Anthropic doesn’t use your data to train its models. We store a count of how many Advisor messages you have sent and whether you have a subscription — nothing about what you asked.
If you turn on app lock, your passcode is stored in your device's secure hardware storage (Keychain on iOS, Keystore on Android) — the same protected storage used for passwords and payment credentials. Face ID / fingerprint checks happen entirely on your device through the operating system; Hijazi Wallet never sees your biometric data.
Hijazi Wallet does not sell or rent your data, and does not share it with advertisers or data brokers. There are no ads and no analytics or tracking SDKs in this app. Hijazi Wallet does not connect to your bank and never asks for banking credentials.
You can export everything Hijazi Wallet has stored as a CSV file at any time from Profile → Export my data. Profile → Delete my account erases all of your data on your device and deletes your Hijazi Wallet account and everything held under it on our server — your backup and your Advisor message count included. Both are permanent and cannot be undone.
Hijazi Wallet is not directed at children under 13, and we do not knowingly collect data from them.
If how Hijazi Wallet handles data changes, this page will be updated to reflect it.
Questions about this policy, or want us to delete your data for you? Email support@hijazionline.com.