Privacy Policy

1. Who We Are

Masrofna (operated by Masrofna) is a personal finance management application designed for UAE and GCC professionals. Our registered contact is support@masrofna.com.

2. What Data We Collect

We collect only what is strictly necessary to operate the service:

• Account information: Your name and email address when you sign up or sign in via Google.
• Financial data you enter: Transactions, budgets, debts, savings goals, accounts, and categories. This data is stored in your personal Supabase account and is only accessible by you.
• Subscription status: Your plan type (Free, Monthly, Quarterly, Annual) to determine which features you can access.
• Usage metadata: Basic analytics such as page visits (no personal identifiers attached).

3. What We Do NOT Collect

• We do not track your financial behaviour for advertising purposes.
• We do not sell your data to third parties.
• We do not share your data with banks, financial institutions, or government entities.
• We do not use cookies for advertising or tracking.

4. How Your Data Is Stored

Your financial data is stored in Supabase — a secure, SOC 2 Type II compliant cloud database. Each user's data is isolated using Row Level Security (RLS), meaning no other user or even our team can access your financial records.

Data is transmitted over HTTPS/TLS and encrypted at rest.

5. Payments & Billing

Subscription payments are processed by Paddle, our Merchant of Record and a PCI DSS Level 1 compliant payment provider. We never see or store your full card number. Paddle's privacy policy applies to payment data: paddle.com/legal/privacy.

6. Third-Party Services

We use the following services to operate Masrofna. Each has its own privacy policy, which we encourage you to review:

• Supabase — Database and authentication (supabase.com)
• Paddle — Payment processing / Merchant of Record (paddle.com)
• Google — Optional sign-in and optional Drive / Calendar import (accounts.google.com) — see Section 7
• Microsoft — Optional OneDrive statement import (microsoft.com) — see Section 7
• Anthropic ("Claude") — AI processing that reads imported statements/receipts to extract transactions (anthropic.com)
• Resend — Transactional email delivery (resend.com)

7. Google User Data & Connected Accounts

Connecting a Google or Microsoft account is entirely optional and powers two convenience features: importing financial documents, and showing relevant dates. You can disconnect at any time in Settings → Cloud Sources, which revokes our access.

The Google scopes we request, and exactly how each is used:

• Sign-in (openid, email, profile) — to create and sign you into your Masrofna account.
• Google Drive, read-only (drive.readonly) — used only to import bank/credit-card statements and financial documents. You either pick a specific file, or map a Drive folder so statements you place there import automatically. We read files solely to extract transactions; we never modify, delete, create, or share your Drive files.
• Google Calendar, read-only (calendar.readonly) — used only to display your upcoming calendar events alongside bills and reminders inside the app. We never modify your calendar.

How this data is handled: Imported documents are processed to extract individual transactions. To do this, the relevant document content may be sent to our AI processing provider, Anthropic ("Claude"), purely to convert it into structured transactions — it is not used to train any AI/ML model. The resulting transactions are stored only in your personal, access-controlled Supabase account. We do not retain your raw Google files beyond what is needed to complete an import, we do not sell this data, we do not use it for advertising, and no Masrofna employee reads it except with your explicit permission (e.g., for support), for security, or where required by law.

Microsoft / OneDrive: If you connect OneDrive instead, we request read-only file access (Files.Read) and use it the same way — only to import statements you choose — under the same handling rules above. Our use of Microsoft data complies with the Microsoft APIs Terms of Use.

8. Data Retention

Your data is retained as long as your account is active. If you delete your account, all associated financial data is permanently deleted within 30 days. You can export your data at any time via Settings → Export Data.

9. Your Rights

You have the right to:

• Access all data we hold about you (export via Settings)
• Rectify incorrect data directly within the app
• Delete your account and all associated data
• Port your data in JSON format at any time
• Object to any processing by contacting us

To exercise any of these rights, email us at support@masrofna.com.

10. Children's Privacy

Masrofna is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use of Masrofna after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions or requests, contact us at:

Email: support@masrofna.com
Website: masrofna.com