Privacy policy

Introduction

Masareefy helps you track your expenses and income — by voice, too. This page explains, as plainly as we can, what data we collect, what we do with it, and how we protect it.

Masareefy is operated by Omar Amin, an individual based in Egypt, who is responsible for your data.

If anything here is unclear, reach us at masareefy.eg@gmail.com.

What we collect

Sign-in info: when you sign in with Google or Apple, we receive your name and email so we know it’s you.

Your money data: the amounts you log (expenses and income), the category, any note you add, and the date.

Subscription info: if you subscribe, our billing provider (RevenueCat, working with Apple or Google) tells us which plan you’re on and your purchase history, including whether you’re in a free trial and whether it will renew. We use it to unlock your features and to remind you about two days before a free trial turns into a paid subscription. We never see or store your card number.

App settings: things like language, text size, and reminders.

If you allow notifications: we store your device’s notification “address” (push token) so we can send your reminders and important notices about your account (like a free trial about to end). It is deleted with your account.

If you turn on bank transaction capture: we use the transaction text and bank or wallet name from a bank message on iPhone, or from a new SMS or bank/wallet app notification on Android, to prepare a transaction for your review. Android SMS access never reads your message history.

Voice: when you use the voice feature we record the clip temporarily to understand what you said, then delete it right away (details below).

Why we’re allowed to use your data

We process your entries, sign-in details, and settings to provide the app you asked for (performance of our contract with you).

Optional features — voice, the roast, Apple Pay import, bank transaction capture and learning — run only on your consent, given when you switch them on and withdrawable anytime in Settings.

Usage analytics runs by default under our legitimate interest in improving the app and seeing what breaks — with no financial data and no IP address — and you can switch it off anytime in Settings.

We keep crash reports and abuse-detection signals under our legitimate interest in keeping the app secure and working.

Voice & AI

When you tap the mic and speak, we send the audio clip to Google’s Gemini service to turn it into text and pull out the amount and category.

We never store your audio. We analyze it and discard it immediately — the only thing saved is the numbers and text you confirm.

This means the audio leaves your device to a third party (Google) to be processed. We don’t store it at all, and Google processes it under its own API terms and does not use it to train its models.

If you turn on the roast feature (Ersh’s playful take on your spending), we send the details of the expense you just logged — the amount, note, and category — to Google’s Gemini to write the line. This feature is off by default and only runs when you switch it on.

If you import Apple Pay payments while subscribed to Pro, we send each transaction’s merchant name — without the amount — along with your category names to Google’s Gemini so it can file the expense under the right category automatically. We don’t send the amount or the note, Google doesn’t store the name or use it to train its models, and the merchant-to-category mapping we learn stays on your device only.

If you turn on bank transaction capture, we take the transaction from a bank message on iPhone. Android has two independent options: SMS access delivers each new SMS to Masareefy only as it arrives — with no access to message history — so bank texts still work when Messages notifications are off; notification access lets Masareefy see the sending app and text of each new notification so it can capture InstaPay, Telda, and bank/wallet app alerts. Filtering happens on your phone and anything that does not look like a bank or wallet transaction is immediately discarded. A clear ATM cash withdrawal may wait on the review screen so you can choose a reminder, count the full amount as spending, or remove it; it is never counted automatically. OTPs, promotions, and balance-only messages are not captured. If we do not yet have a built-in reader for that bank, we send the transaction text — after stripping your balance, account number, and reference number on your device — to Google’s Gemini to pull out just the amount, and Google does not use it to train its models. If you leave “Learns your bank’s messages” on (it is on by default), whenever you fix or confirm a transaction on the review screen we keep the text — without your balance, account number, or reference number — stored privately to you, so we can teach the app to read that bank on its own later. You can turn off SMS or notification access, learning, or capture for a specific bank in Settings.

How & where we store your data

Your data is saved first on your device, and synced to a secure server (Supabase) so you find it on any device, even if you change phones.

The connection to the server is encrypted, and no one can access your data except you and anyone you’ve shared an account with.

If you enable App Lock, its timeout and account binding are kept in the phone’s secure storage. Masareefy asks the operating system to verify your biometric or device credential and never receives or stores that credential.

The servers we use may be located outside Egypt, and your data is processed by the providers listed below. We choose established providers and rely on the data-protection commitments in their terms to safeguard your data when it is transferred abroad.

Who we share it with

We never sell your data or use it for ads — ever.

We rely on providers that run the app: Vercel for web hosting and web API requests, Supabase for storage and database, Google for AI features (Gemini), sign-in, and Android push delivery (Firebase), Apple for sign-in and iPhone push delivery (APNs), Sentry for crash reports, PostHog for usage analytics, RevenueCat for subscription management, and Resend to deliver support email. The app asks GitHub Pages (run by GitHub) for app updates; GitHub sees your IP address as any website would, and we send it nothing about you. Each only receives the part it needs for the service to work.

When you send us feedback (Settings → “Tell us what you think”), we email your message to ourselves through Resend so we can reply and fix the issue, along with your account ID, the screenshot if you added one, your email if you typed it, your device and app version, your plan, and how many entries you’ve logged. That email stays with us even if you delete your account — and we don’t use it for anything else.

Crash reports

If the app crashes or hits a technical problem, an automatic report is sent to a service called Sentry telling us what happened in the code — never your amounts, notes, or voice. The report is tied to your account ID so we can help if the problem is on your end, and we use it only to fix bugs.

Usage analytics

Usage analytics is on by default, and you can switch it off anytime in Settings → Advanced → “Help improve Masareefy”.

We record simple usage events in PostHog — like which screen opened or which feature was used — never your amounts, notes, voice, or any financial data. We also strip your IP address before the event is stored, so we never learn your location.

These events are tied only to your account ID so we can understand the journey and detect abuse. We don’t track you across other apps and we never sell this data.

Your rights

You can view and edit your data inside the app at any time.

Export (portability): download a complete JSON archive anytime for free. Your first Excel or CSV report is free and later reports require Pro. CSV/XLSX imports are read on your device and are not sent to AI.

Delete: permanently delete your account and all your data from Settings → Account → “Delete my account.” This wipes your data from the server, with no undo (what stays is listed under “Data retention” below).

Withdraw consent: turn any optional feature (voice, roast, Apple Pay, bank transaction capture and learning, analytics) off anytime in Settings — this doesn’t affect processing done before you switched it off.

Object or restrict: you can ask us to stop or limit a particular use of your data.

Complain: if you think we mishandled your data, reach us at masareefy.eg@gmail.com, and you also have the right to complain to the competent data-protection authority in your country.

Data retention

We keep your data as long as your account is active. The moment you delete your account, it’s deleted. Voice, as noted, is never stored in the first place. After 20 free bank automations in a month, extra messages remain encrypted on that device for up to 90 days (maximum 500) without Gemini processing; they are removed if you delete the account, app, or protected feature data.

Crash reports (Sentry) and usage events (PostHog) tied to your account ID are kept for a limited period by those providers; support messages you send us stay in our support inbox even after you delete your account; your purchase history stays with Apple or Google and with RevenueCat; and encrypted backups may retain deleted data briefly before it rolls off.

Children

The app is not aimed at children under 13, and we don’t knowingly collect data from them.

Changes to this policy

We may update this page from time to time. If something important changes, we’ll let you know inside the app. The last-updated date is shown above.

Contact us

Any question about your privacy? Email us at masareefy.eg@gmail.com.