Privacy PolicyOffline-first

Last updated: Nov 5, 2026 Version 3.0

Who We Are

TadbirLabs ("we", "us", "our") develops Tadbir, an Arabic-first, offline-first personal finance app. We are based in Egypt.

This policy applies to the Tadbir apps for Android and iOS and to the Tadbir pages at tadbirlabs.github.io. It explains what the app keeps on your device, what leaves your device and why, and the choices you have.

Information Stored on Your Device

Everything you enter in Tadbir is saved on your device, mostly in a local database. Attachments are saved as files.

• Your money records: accounts (with any IBAN or SWIFT code you add), transactions, transfers, recurring transactions, categories and tags, with their amounts, dates, titles and notes.
• Planning: budgets, savings goals and their deposits, and debts and their payments.
• Debt contacts: the people you add for debts, with a name and an optional phone number, email address and notes that you type in. Tadbir does not read your phone's contacts.
• Currencies: the currencies and exchange rates you add or edit.
• Attachments: photos and files you attach to transactions.
• Settings: such as language, main currency, theme, the display name and avatar you choose, reminder times and App Lock options.
• Premium status: whether Premium is active, and the anonymous ID that RevenueCat assigns to the app (see below).

If you turn on App Lock, your PIN is saved only as a salted hash in your device's secure storage (the iOS Keychain or the Android Keystore). Face ID and fingerprint checks are done by your device. Tadbir never receives your biometric data.

If automatic recurring transactions are on (they are by default, and you can turn them off in Settings), Tadbir adds due recurring transactions by itself: when you open the app and, on Android, in the background every few hours. This happens on your device and sends nothing over the internet.

If you copy account details, such as an IBAN, Tadbir places them on your device's clipboard.

Information That Leaves Your Device

Purchases and Subscriptions

When you open the app, view Premium plans, or buy or restore a subscription, and when your subscription renews, the following is processed by the App Store (on iPhone and iPad) or Google Play (on Android), and by RevenueCat, the service we use to manage subscriptions:

• An anonymous app user ID created by RevenueCat. It is not your name, your email address or your Apple or Google account.
• Purchase and subscription records from the store: the product, purchase and renewal dates, price and currency, store country or region, transaction identifiers and subscription status.
• Technical details needed to handle each request: the app version, the device model and system version, your device's language and region settings, the store country, and the IP address of the connection. On iPhone and iPad, this also includes Apple's identifier for vendor, an ID that is the same for all apps from one developer on your device.

Payment card details are handled only by Apple or Google. We never receive them. The app never sends your financial records (transactions, balances, budgets, debts, attachments and backups) to RevenueCat or to us.

Crash Reports and Statistics from Apple and Google

If you allow your device to share analytics or diagnostics with app developers, Apple and Google may give us crash reports and statistics about the app, such as crash logs, device model, system version and app version, through App Store Connect and Google Play Console. These reports describe crashes and app performance; they do not include your Tadbir database or attachments. You can turn this sharing off in your device settings.

Files You Export or Share

When you create a backup, export a CSV, PDF or database file, or share a file, the file is created on your device and goes only where you choose to save or send it. From then on, that destination's own privacy policy applies. Backup and CSV files also record details such as the export date, the app version and the number of records. Sharing a statistics chart first saves it as a temporary image on your device.

Keep these files private: backup and export files contain your financial data and are not encrypted by Tadbir.

Your Device's Own Backups

If your device backs up its apps (for example iCloud Backup on iPhone, or Google's backup on Android), those backups may include Tadbir's data, and Android may restore it if you reinstall Tadbir. These backups are run by Apple or Google according to your device settings and their privacy policies. We cannot access them.

When You Contact Us

If you email us or message us on Telegram, we receive your email address or Telegram account and whatever you include, such as screenshots or files. We use it only to answer you.

Third-Party Services

• RevenueCat: manages subscriptions and Premium status. Privacy Policy
• Apple App Store: processes in-app purchases on iPhone and iPad, and provides crash reports. Privacy Policy
• Google Play: processes in-app purchases on Android, checks that the app was installed from Google Play and has not been modified, and provides crash reports. Privacy Policy
• Telegram: only if you choose to contact us there. Privacy Policy

Tadbir does not include advertising networks, analytics or crash-reporting SDKs, social media SDKs, or location services.

How We Use Information

• To run the app's features on your device.
• To sell and deliver Premium, restore purchases, and prevent purchase fraud.
• To see subscription numbers and revenue in RevenueCat's dashboard.
• To find and fix crashes, using reports from Apple and Google.
• To answer your messages.
• To meet legal, tax and app store requirements.

We do not sell your information, and we do not use or share it for advertising.

App Permissions

Tadbir asks for a permission only when you use a feature that needs it. You can change permissions in your device settings at any time.

• Camera: to take a photo to attach to a transaction.
• Photos: to attach images you pick from your library. On Android, Tadbir uses the system photo picker and does not ask for storage access.
• Notifications: for the reminders and summaries you choose. They stay off until you turn them on, and they use general text that never shows your amounts or balances.
• Alarms & reminders, and run at startup (Android): to deliver your reminders on time when Android allows it, and to set them again after your device restarts.
• Face ID or fingerprint: only if you turn on biometric unlock in App Lock.
• Internet and billing: for purchases and Premium status checks.

Android also lists some technical permissions that do not give access to your personal data, such as network access, vibration and running scheduled tasks.

Tadbir does not ask for access to your contacts, microphone, location or phone calls.

Data Retention & Deletion

On Your Device

• Your data stays on your device until you delete it. You can delete individual records in the app. Deleted attachment files are kept in a hidden folder for 7 days, then removed the next time you open Tadbir.
• To remove everything, uninstall Tadbir, or on Android clear the app's storage in system settings. This removes the database, attachments and settings. On iPhone and iPad, the system may keep the App Lock PIN record (a salted hash, not the PIN itself) in the device keychain after you uninstall. It contains no financial data.
• Copies in your device backups, or in files you exported, stay until you delete those backups or files.

Purchase Records

Apple, Google and RevenueCat keep purchase records according to their own policies and legal duties, such as tax law. To ask us to delete the RevenueCat record of your purchases, email us with your App Store or Google Play order number, and we will delete the matching record. If you keep using Tadbir afterwards, RevenueCat starts a new anonymous record. Deleting the record does not cancel a subscription: cancel it in your App Store or Google Play account.

Support Messages

We keep your emails and messages only as long as we need them to help you and to keep basic records.

For step-by-step instructions, see Delete Your Data.

Security

• Your records are protected by your device's security: each app's data is kept separate, and modern devices encrypt their storage, protected by your device passcode. Tadbir does not add its own encryption to the database or to backup files.
• App Lock adds a PIN, Face ID or fingerprint check when you open Tadbir.
• Purchase information is sent to Apple, Google and RevenueCat over encrypted connections.

Your part: no method of storage or transmission is completely secure. Use a device passcode, keep your system updated, and keep backup and export files private.

Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict how it is used.

• Records on your device: you can view, change, export and delete them in the app at any time.
• Information held by RevenueCat, Apple or Google: email us and we will help. We may ask for details, such as an order number, to find the right record.
• No sale or targeted advertising: we do not sell personal information or share it for cross-context behavioral advertising, as defined by California law (CCPA/CPRA). We do not make automated decisions about you.
• EU, EEA and UK users: we process purchase information to provide the Premium features you request, and to keep purchases secure and reliable. You can also complain to your local data protection authority.

To make a request, email tadbirlabs@gmail.com. We will not treat you differently for using your rights.

Children's Privacy

Tadbir is a personal finance tool and is not directed to children under 13, or under the minimum age set by the law where you live. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to This Policy

We update this policy when the app, the services it uses, or the law change. The date at the top shows the latest version. For significant changes, we may also mention them in the app's store release notes.

Privacy Policy Version History

• v3.0 (Nov 5, 2026) - Rewritten to match how the app works today: added purchase data handled by RevenueCat, Apple and Google, device backups and store crash reports; corrected the permissions list; removed descriptions of cloud backup, encryption and other features the app does not have
• v2.0 (October 9, 2025) - Added comprehensive GDPR/CCPA rights, third-party SDK disclosure, detailed data retention policy, improved accessibility
• v1.0 (January 15, 2025) - Initial privacy policy published

Contact Us

For questions or requests about this policy or your privacy:

• Email: tadbirlabs@gmail.com
• Telegram: @tadbirlabs

---

This privacy policy is effective as of Nov 5, 2026, and applies to all users of the Tadbir apps.