Jezdan Privacy Policy
Jezdan is a personal expense tracker. It is designed so that your financial records stay on your phone unless you choose to back them up.
What stays on your phone
Your transactions, accounts, budgets, savings goals, chat messages and settings are stored on your device. If you do not sign in, they are never uploaded to our servers and we cannot see them. Uninstalling the app, or using Settings → Erase all data, deletes them.
If you make an account with an email
Instead of Google, you can make an account with an email address and a password. We store the address and a one-way hash of the password — never the password itself. The address is used to identify your account, to send you a code if you forget your password, and for nothing else. We do not send marketing, and we do not pass the address to anyone.
Changing your password requires a code sent to that address, so knowing an unlocked phone is not enough to take an account over.
If you share a household
A household lets several people keep one set of records. This is worth understanding before you start or join one:
- Everyone in a household sees the same records. Every transaction, account, budget, debt and goal in the household is visible to every member, including entries you added before joining.
- Joining merges your records into theirs. Leaving later does not take them back out.
- The shared records are stored against the account of the person who started the household. If they delete their account, the shared copy goes with it; every member keeps whatever is on their own phone.
- Members are identified to each other only by being in the household. We do not show your email address to other members.
- An invite code is only ever shown to the person who started the household.
If you would rather not share, simply do not join one — nothing else in the app changes.
If you sign in with Google
Signing in is optional. When you sign in with Google, we receive your Google account's email address, name and a Google account identifier, and use them only to identify your Jezdan account, show which account you are signed in with, and let you sign in again on another phone.
Cloud backup (Pro). If you are signed in and subscribe to Jezdan Pro, a copy of your records — transactions, accounts, budgets, goals, debts, the last 300 chat messages and your settings — is stored on our server (hosted by Supabase) so it can be restored on a new phone. It is sent over encrypted HTTPS and stored encrypted at rest. Only your signed-in account can read it; we do not use it for anything other than giving it back to you. The backup is kept until you delete it: Settings → Erase all data deletes your account and its backup. Signing out does not delete the backup.
What we process, and why
An account ID. When the app first connects, it creates a random identifier for your install. Until you sign in it contains no name, email or phone number. We use it to know whether you have a Jezdan Pro subscription and to apply daily usage limits. If you sign in with Google, your Google account is attached to this same identifier.
Pro and payments. Jezdan Pro is bought on our website. The payment itself is handled by Wayl, an Iraqi payment company: you pay them with your wallet or card, and we never see your card, wallet or payment details. We record which account bought which plan, the amount, and Wayl’s reference for that payment, so Pro can be switched on and so we can help you if a payment goes wrong. We use RevenueCat, a subscription service, to hold the record of which account has Pro. Wayl and RevenueCat process this under their own privacy policies.
Pro codes. If you redeem a Jezdan Pro code, we record which account redeemed which code and when, so that each code is used only once and your Pro time can be added up correctly. Codes that need a Google sign-in are tied to your Google account so Pro follows you to a new phone. This record is deleted with your account.
Messages sent to the AI (Pro only). Most messages are understood by the app itself, on your phone. When you are a Pro subscriber and the app cannot understand a message, that message's text — along with your category and account names, so it can be filed correctly — is sent to our server and passed to Google's Gemini AI to be read. When you use Ask about your money, a summary of your totals by category and account is sent the same way, never your individual transactions. We do not store these messages or summaries. Google processes them to produce the answer, under the Gemini API paid-service terms and its privacy policy, which do not allow it to use them to improve its products. We record only how many AI requests you made each day, to enforce limits.
Voice messages (Pro). When you record a voice message, the app records only while the recording bar is showing (at most one minute) and sends the recording, with your category and account names, to our server, which passes it to Google's Gemini AI to be transcribed and read. The transcript appears in your chat like a typed message. We do not store the recording: it is deleted from your phone once sent and is not kept on our server. Google processes it under the same Gemini API terms as messages, described above.
Receipt photos (Pro). When you choose to scan a receipt, the photo you take or pick is reduced in size and sent, with your category and account names, to our server, which passes it to Google's Gemini AI to read the shop and total. You confirm the entry before it is saved. We do not store the photo, and the app does not look at any other photo on your phone.
Error reports. If the app hits an error it cannot recover from, it sends a short technical report to our server: the error message, where in the app's code it happened, the app version and the Android version, linked to your account ID. It contains no transactions, messages or amounts. We use it only to fix bugs, and it is deleted with your account.
App lock and reminders. The app lock uses your phone's own fingerprint, face or screen-lock check; Jezdan never receives your fingerprint, face or PIN. The daily reminder is scheduled on your phone; no notification is sent through our servers.
What we do not do
- We do not sell your data.
- We do not show ads or use advertising or tracking SDKs.
- We do not collect your location or contacts, and we see no photos or files except a receipt photo you choose to scan, which is not kept.
Deleting your data
In the app: Settings → Erase all data deletes everything on your phone and your account on our server, including its cloud backup, subscription and usage records.
Without the app: email dananeer.app@gmail.com with the subject "Delete my Jezdan data". If you signed in with Google, send it from that Google address; if you never signed in, the account is anonymous, so include your payment reference if you had Pro, so we can find the matching records. We will delete them within 30 days.
Deleting your data ends your Pro access along with it: we cannot refund time you have paid for once the records are gone.
Security
All communication between the app and our server uses encrypted HTTPS. The server's credentials for AI and subscription services are never included in the app.
Children
Jezdan is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes, we will update the effective date above and, for significant changes, tell you in the app.
Contact
Jezdan — dananeer.app@gmail.com