Privacy Policy

What the app reads

• SMS (Android): with your permission, the app reads your SMS inbox to find messages from banks and wallets. It skips one-time codes, offers and personal messages, and never stores personal messages.
• Bank app notifications (Android, optional): if you turn on notification access, the app reads notifications from bank and wallet apps only, to catch payments that don’t come by SMS. Notifications from other apps are ignored and never stored.
• iPhone: iOS doesn’t let apps read SMS. The shortcut you add passes the text of a bank message to the app, and the app only accepts text that looks like a bank message.

What is stored, and where

This is stored only on your phone, in the app’s private storage: bank messages, the transactions found in them, and your categories, budgets and settings.

System cloud backup and device-to-device transfer are turned off for this data. Your PIN and any AI keys you add are kept in the phone’s secure storage.

There are no user accounts, and we can’t see your data.

What leaves your phone

• Reading bank messages: to read the amount, shop and date, the app sends only the bank message text and the sender name (for example AlRajhiBank), encrypted, to Claude by Anthropic, and gets the result back. Tadbir keeps no copy of the message, and Anthropic handles it under its commercial terms. Personal messages and one-time codes never leave your phone.
• Tadbir server: messages pass through Tadbir’s server on the way to Anthropic. The server passes them on and keeps no message or answer. It keeps only usage counters tied to a random app id (hashed, not your phone number or name), your plan status, and in test versions a hashed network counter. These counters are deleted automatically. When Anthropic is busy, an import can wait in Anthropic’s queue, and Anthropic keeps that copy for up to 29 days. If you add your own key, messages skip the server.
• Your own key (optional): if you add your own AI key in Settings, bank messages go to the provider you picked instead, and that provider’s privacy policy applies.
• Backups and Excel exports: made only when you ask, and saved or shared where you choose. Backups are encrypted with a password you pick.

Usage statistics

To improve the app, we collect anonymous statistics through PostHog (based in the EU): the names of screens you open and buttons you tap, how long the app was open, how fast it opens and how often screens stutter, the type of any error or crash and where in the app’s code it happened (never the error text), your phone model, app version and language. They carry a random code made on your phone, and PostHog does not keep your IP address.

We never collect amounts, message text, bank, shop or category names, or anything that identifies you.

Statistics are on by default, and you can turn them off anytime in Settings → Privacy; the random code is then deleted.

Subscriptions and payments

Purchases go through the App Store or Google Play, and we never see your card details. We use RevenueCat to check whether your plan is active. RevenueCat receives an anonymous app ID and the purchase details from the store, not your name or email.

Problem reports

“Report a problem” in Settings opens your phone’s share menu with a short report: app and system version, language, how many messages and transactions the app holds, daily counts of messages (saved, payments, skipped, waiting, failed and duplicates) and short failure codes. It never includes amounts, shops or message text. Nothing is sent unless you choose where to send it.

Your control

• Turn SMS and notification access on or off anytime in your phone’s settings.
• Turn off usage statistics in Settings → Privacy.
• Export your data to Excel anytime.
• Uninstalling the app deletes its data from your phone. Backups and files you saved elsewhere stay until you delete them.

Under Saudi Arabia’s Personal Data Protection Law, you can ask what is collected about you and ask for it to be corrected or deleted. As your data lives on your phone, it is already in your hands. For any request, email us below.

Children

Tadbir is made for adults managing their own money and is not directed at children under 13.

Changes to this policy

If we change something important, we update this page and the “Last updated” date above, and explain the change in the app.

Contact

Questions about privacy: [email protected]