Privacy Policy
Overview
Zakah Wealth ("we," "our," or "us") is a personal wealth management and Zakat calculation mobile application developed to help Muslims track their assets, manage finances, and calculate their obligatory Zakat with confidence. This Privacy Policy explains how we collect, use, protect, and handle your information when you use our application ("the App") available on the Google Play Store and Apple App Store.
We are committed to transparency and to protecting your privacy. We have designed this App with a privacy-first, local-first architecture: the vast majority of your personal and financial data never leaves your device unless you explicitly choose to enable our optional cloud backup feature.
By downloading or using the Zakah Wealth App, you agree to the terms described in this Privacy Policy. If you do not agree, please discontinue use of the App.
Information We Collect
We collect the minimum information necessary to provide you with the features of the App. Here is a clear breakdown of what we collect and where it lives:
Information You Provide Directly
- Account Information: When you sign in with Google, we receive your name and email address from your Google account to identify your account.
- Financial Data: Asset values, wealth records, Zakat calculations, and any other information you manually enter into the App. This data is stored locally on your device.
- Preferences & Settings: Your in-app configuration choices, such as enabling or disabling SMS transaction detection, notification preferences, and display settings.
Information Collected Automatically (On-Device Only)
-
Bank Transaction Notifications via SMS (Optional): If you grant the
RECEIVE_SMSpermission, the App reads incoming SMS messages locally to detect bank transaction notifications. No SMS content is stored beyond what is parsed into a transaction record, and no SMS data ever leaves your device. See Section 3 for full details. - Crash & Diagnostic Data: Anonymous crash reports may be collected by the platform (Google Play / Apple App Store) to help us identify and fix bugs. This data is governed by Google's and Apple's respective privacy policies and does not include your personal financial data.
Information We Do NOT Collect
SMS Permission & Processing
This section constitutes the Prominent Disclosure required by the Google Play Developer Program Policies for apps using sensitive SMS permissions. Please read it carefully before granting this permission.
Why We Request This Permission
Zakah Wealth offers an optional feature that automatically detects incoming bank transaction SMS notifications — such as account debit or credit messages sent by your bank — and uses the parsed transaction amount to update your wealth records hands-free. This eliminates the need to manually enter every transaction.
How SMS Data Is Processed
- 100% On-Device Processing: All SMS reading and parsing happens exclusively on your device, in memory, in real time. No SMS messages, their content, sender information, or parsed data are ever uploaded to our servers or transmitted to any external system or third party.
- Financial Messages Only: The App automatically filters incoming SMS messages using pattern recognition. It only processes messages that match recognized bank transaction notification patterns (e.g., debit/credit alerts). All other messages — including personal conversations, OTP codes, promotional messages, and non-financial notifications — are immediately discarded without being read, stored, or processed.
- No Storage of Raw SMS: The App does not store the raw text content of any SMS message. Only the parsed transaction amount and date (if successfully identified) may be stored locally as a wealth record entry on your device.
- No Background Surveillance: The SMS listener is strictly limited to detecting financial transaction notifications and has no capability to read, record, or monitor personal communications of any kind.
Your Control Over This Feature
- Optional Permission: You are not required to grant the
RECEIVE_SMSpermission to use the App. All core features — manual wealth entry, Zakat calculation, and Google Drive backup — remain fully functional without it. - Easy Toggle: You may enable or disable SMS transaction detection at any time by navigating to App Settings → SMS Auto-Detection.
- Revoke via System Settings: You may revoke the SMS permission at any time through your Android device's system settings under Settings → Apps → Zakah Wealth → Permissions.
Compliance Statement
The use of the RECEIVE_SMS permission in Zakah Wealth is solely and exclusively
limited to detecting bank transaction notifications for the purpose of automated local wealth
tracking. This use is directly related to the core functionality of the App and does not
involve any secondary use, sharing, or selling of SMS data. This declaration is made in
compliance with the
Google Play Developer Program Policies on Permissions.
Google Drive Cloud Backup
Zakah Wealth offers an optional cloud backup feature powered by your personal Google Drive account. This feature is entirely opt-in and is designed with your privacy and security as top priorities.
How It Works
- Your Drive, Your Data: When you enable cloud backup, the App connects to your own personal Google Drive account using Google's official OAuth 2.0 authorization. The App only accesses a private, app-specific folder within your Google Drive — it cannot read, modify, or access any of your other Google Drive files.
- Encryption Before Upload: Your financial data is encrypted locally on your device using strong encryption before it is uploaded to Google Drive. This means that even in the unlikely event of a data breach at Google's infrastructure, your data would remain unreadable without your encryption key.
- No Developer Access: We (the Zakah Wealth development team) have zero access to your Google Drive account, your backup files, or the contents of your encrypted backups. Your data belongs exclusively to you.
- Restore Anytime: You can restore your data on a new device by signing in with the same Google account and triggering a restore from within the App settings.
- Delete Anytime: You may delete your backup files directly from your Google Drive at any time. This does not affect the local data on your device.
Google Drive API Scopes
The App uses the restricted Google Drive scope
https://www.googleapis.com/auth/drive.appdata, which grants access only to
an isolated app-specific folder that is invisible to you in the regular Google Drive
interface and inaccessible to any other app or person. This is the narrowest possible
Google Drive scope and is used in accordance with
Google API Services User Data Policy.
Google Sign-In
Zakah Wealth uses Google Account Sign-In as its authentication method. Signing in with Google provides a secure, password-free way to identify your account, link your optional cloud backup, and protect your data.
What We Receive from Google Sign-In
- Email Address: Used as your unique account identifier to associate your local data with your cloud backup and to support account-related requests (e.g., deletion requests).
- Display Name: Used to personalize your in-app experience (e.g., greeting you by name on the dashboard).
- Profile Photo URL (optional): Displayed within the App as your account avatar for visual identification.
What We Do NOT Receive
- We do not receive your Google password or any authentication credentials.
- We do not access your Gmail, Google Calendar, Google Contacts, or any other Google services beyond Google Drive (if you choose to enable backup).
- We do not share your Google account information with any third party.
Your use of Google Sign-In is also governed by Google's Privacy Policy.
How We Use Your Information
We use the information described in this Policy solely for the following purposes:
- Provide Core App Functionality: Enable you to track your wealth, manage assets, and calculate Zakat accurately.
- Automated Transaction Detection: Parse bank SMS notifications locally to update your wealth records automatically (only with your permission).
- Account Authentication: Verify your identity via Google Sign-In to allow secure access to your account and cloud backup.
- Cloud Backup & Restore: Encrypt and store your data in your personal Google Drive app folder and restore it upon request.
- App Improvement: Use anonymous crash reports to diagnose and fix technical issues.
- Compliance & Legal Obligations: Respond to lawful requests from authorities where required by applicable law.
We do not use your information for advertising, profiling, behavioral tracking, or any purpose not described in this Policy.
Data Sharing & Third Parties
We do not sell, rent, trade, or share your personal data with third parties for commercial purposes. Period. The only instances in which data may be shared with third parties are:
- Google LLC: When you use Google Sign-In or enable Google Drive backup, your data interacts with Google's services under Google's Privacy Policy. We use only the minimum required scopes and do not control Google's data practices.
- Platform Providers (Apple / Google): Anonymous, aggregated crash diagnostics may be collected by Apple or Google through their standard platform services. This data does not include your financial information.
- Legal Disclosure: We may disclose information if required by a valid court order, subpoena, or other legal process, or if we believe disclosure is necessary to protect the safety of any person or to prevent fraud or illegal activity.
We have no advertising partners, analytics vendors, or data brokers. We do not use cross-app tracking technologies.
Data Security
Protecting your financial data is our highest technical priority. We employ multiple layers of security to safeguard your information:
Local Database Security
- Encrypted Local Storage: All financial data stored on your device is encrypted using the platform's secure storage mechanisms (Android Keystore / iOS Secure Enclave) to prevent unauthorized access.
- No Unnecessary Network Transmission: Your financial data is never transmitted over any network unless you explicitly initiate a Google Drive backup. There is no background data sync to our servers.
- Sandboxed App Data: Your data is stored in the App's sandboxed storage directory, inaccessible to other apps installed on your device (standard OS security).
Cloud Backup Security
- End-to-End Encryption: Data is encrypted on your device before upload. Our servers never see your plaintext data.
- HTTPS / TLS in Transit: All communication with Google Drive APIs occurs over encrypted HTTPS connections.
- Google Drive Security: Your backed-up data benefits from Google Drive's enterprise-grade infrastructure security.
While we implement strong security measures, no method of electronic storage or transmission is 100% secure. We encourage you to protect your device with a strong lock screen passcode and keep your operating system and App updated to the latest version.
Data Retention & Deletion
We retain your data only as long as necessary to provide the App's services or as required by applicable law. You have full control over your data and may delete it at any time.
Deleting Your Data
- In-App Deletion ("Danger Zone"): You can permanently delete all your financial records, account settings, and locally stored data directly from within the App by navigating to Settings → Danger Zone → Delete All Data. This action is irreversible and immediately erases all your data from the local database on your device.
- Account Deletion: To fully delete your account, navigate to Settings → Danger Zone → Delete Account. This removes your account record and all associated local data from the App.
- Cloud Backup Deletion: You may delete your Google Drive backup files at any time directly from your Google Drive account (look in the hidden App Data folder) or by using the option in Settings → Cloud Backup → Delete Backup.
- Request via Email: If you are unable to access the App, you may request account deletion by emailing us at support@zakahwealth.com with the subject line "Account Deletion Request." We will process your request within 30 days.
Uninstalling the App
Uninstalling the App removes all locally stored data from your device. If you have enabled cloud backup, your backup files will remain in your Google Drive until you delete them manually or request their deletion as described above.
Children's Privacy
Zakah Wealth is not directed at or intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided personal information through the App, please contact us at support@zakahwealth.com and we will take prompt steps to delete that information.
Your Rights
Depending on your location, you may have rights under applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or similar legislation. These rights may include:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data (see Section 9 for how to exercise this right directly in the App).
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to our processing of your data for specific purposes.
- Right to Withdraw Consent: Withdraw consent for any permission (such as SMS) at any time without affecting the lawfulness of prior processing.
Because most of your data is stored locally on your device, you already have direct and immediate control over it through the App's settings. To exercise any of the above rights or for questions about your data, please contact us at support@zakahwealth.com.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, features, or applicable legal requirements. When we make material changes, we will notify you by:
- Posting the updated Policy on this page with a new "Last Updated" date.
- Displaying an in-app notification when you next launch the App after significant changes.
We encourage you to review this Privacy Policy periodically. Your continued use of the App after changes are posted constitutes your acceptance of the updated Policy. If you do not agree with the updated terms, you may delete your data and uninstall the App as described in Section 9.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, our team is here to help.
Get in Touch
We aim to respond to all privacy-related inquiries within 5 business days and to account deletion requests within 30 days.
support@zakahwealth.com