Privacy Policy

• We collect only what is needed to run the service.
• A group’s data is visible only to its members, and a direct expense only to its two people.
• No ads, no analytics or tracking tools, and we never sell your data.
• We use essential cookies only.
• You can ask us to delete your account at any time.

Hissas only records shared expenses and debts. It does not move money, process payments or connect to banks, and it never asks for card or bank details.

• Account data: your name, email address, password (stored hashed, so it can’t be read), phone number and profile photo if you add them, and your language and currency preferences.
• If you sign in with Google: Google shares your name, email and profile photo, which we use to create your account. We never receive your Google password.
• What you add: groups and their members, expenses and how they are split, settlements, and the receipt photos you upload.
• The in-app notifications we create for you, such as “a friend added an expense with you”.
• Security data: when you sign in we store your IP address and browser type with your session, and we use IP addresses to limit repeated sign-in and sign-up attempts.

We use your data only to run Hissas: showing balances and suggested settlements, sending in-app notifications and real-time updates, and protecting accounts. The only emails we send are about your account: email confirmation and password reset.

We don’t use your data for advertising or marketing profiles, and we don’t sell or rent it.

• A group’s expenses, settlements and receipt photos are visible only to that group’s members.
• A direct expense between two people is visible only to those two people.
• Your email and phone number are shown only to you, your accepted friends and people who share a group with you.
• Others can find you by name or by typing your full email address; search results never show emails, only your name and photo.
• Anyone who has a group’s invite link and an account can join that group and see its data; the link changes whenever a member is removed.

• Cloudflare hosts the app (Workers), the database (D1, with read copies in other regions to make the app faster) and your private files (R2). Data is encrypted in transit (HTTPS) and at rest.
• Emails (account confirmation and password reset) are sent through Cloudflare’s email service from email.hissas.net.
• Google, only if you choose to sign in with it. If your photo comes from Google, it is loaded from Google’s servers.
• Images you upload are compressed on your device and stripped of location (EXIF) data before upload, then stored privately and shown only to signed-in users.

We only use essential cookies, so there is no cookie consent banner:

• The session cookie keeps you signed in, for up to 30 days, renewed as you use the app.
• The __d1b cookie lasts 10 minutes and keeps what you see consistent with the change you just made.

The app also keeps copies of pages on your device for offline use, and a few small choices (such as dismissing the install suggestion); the saved pages are cleared when you sign out.

• We keep your data for as long as your account exists.
• Group members can delete the group’s expenses, and either person can delete a direct expense; its splits and notifications are deleted with it.
• Read notifications are deleted after 30 days, all notifications after 180 days, and expired sessions automatically.
• You can ask the Hissas team to delete your account and data, and we handle requests within a reasonable time. We delete your profile and personal data; financial records you shared with other people may stay visible to them where they need them for their own records, and we’ll explain what remains when we handle your request.

You can see your profile and change your name, phone number and photo at any time on the Account page (your email is your sign-in and can’t be changed), and you can ask the Hissas team to delete your data as described under “Retention and deletion”.

We use an encrypted connection, encrypted storage, passwords stored in a form that can’t be read, email confirmation and limits on repeated attempts. No system is perfectly secure, so use a strong password that you don’t use anywhere else.

Hissas is not for anyone under 13. If we learn that an account belongs to a child under that age, we will delete it.

We may update this policy; when we do, we change the “last updated” date at the top of this page.