Sahulat · Last updated 9 September 2026
Sahulat is a personal finance app. It records what you spend, earn, lend, borrow and save. That is sensitive information, and this policy sets out plainly what happens to it.
The short version: your financial records live on your own phone. They are uploaded to our server only if you create an account and use cloud backup, and only so that you can restore them on another device. We do not sell your data, we do not share it with advertisers, and there are no ads or trackers in the app.
Sahulat is developed by Nabeel Ur Rehman. For any question about this policy or about your data, write to nabeelshahid2@gmail.com.
| Information | Where it is kept | Why |
|---|---|---|
| Your financial records — expenses, income, accounts and balances, loans, committees, bills, split groups, vehicles and fuel logs | On your phone. Copied to our server only when you sign in and cloud backup runs. | To run the app, and to let you restore your data if you change or reset your phone. |
| Your email address | On our server, when you create an account or sign in with Google. | To identify your account and attach your backup to it. |
| Receipt and bill photos | On your phone only. They are never uploaded — a backup records the file's location, not the image. | So you can look back at a receipt. |
| Location attached to an expense | On your phone, and in your backup as part of that expense, if you chose to attach it. | Optional. Only recorded when you tap to add a location to an expense; the app never tracks you in the background. |
| Purchase information | Google Play holds the purchase; we store the confirmation against your account. | To verify a Premium subscription is genuine and still active. |
| Crash reports | Sentry (sentry.io) | So we learn when the app breaks. Deliberately limited — see below. |
The app is fully usable without an account. Everything works offline, on your device alone. Signing in adds cloud backup, Premium features and the ability to share a split group; if you never sign in, none of your financial records leave your phone.
Each of these permissions can be refused, and the rest of the app carries on working.
When the app crashes, a report is sent to Sentry so the fault can be found and fixed. It is set up to carry as little as possible: no name, no email, no IP address, and none of your financial data. It contains the error, where in the code it happened, and basic device details such as the Android version and phone model.
These services are used to run the app, and only for the purposes above:
Your backup and account details are kept for as long as your account exists. Delete your account and both are removed from our server; see below. Data on your phone is removed when you uninstall the app or clear its storage. Crash reports are kept by Sentry for 90 days.
Traffic between the app and our server is encrypted with HTTPS. Passwords are hashed, not stored. Sign-in tokens are kept in the Android Keystore rather than in ordinary app storage. You can also lock the app itself with a PIN or your fingerprint, in Settings.
No system is perfectly secure, and we cannot promise absolute safety. What we can say is that we hold as little as possible in the first place.
Sahulat is meant for adults managing their own money and is not directed at children under 13. We do not knowingly collect their information.
If this policy changes, the date at the top changes with it, and a significant change will be announced in the app before it takes effect.