Masarif • Legal Documentation

Privacy Policy

Effective Date & Last Updated: 29 October 2026

The Short Version

Masarif is built around a single, foundational principle: your financial data belongs exclusively to you and never leaves your device. The app operates without user accounts, without advertising, and without tracking or analytics SDKs. Cloud synchronization is entirely optional and connects directly between your phone and your personal Google Drive or iCloud storage, with no intermediate servers operated by us.

  • Stored exclusively on your device: All expenses, income, wallets, budgets, and receipt scans remain on your phone.
  • No accounts or tracking: We do not require registration, collect advertising identifiers, or use analytics SDKs.
  • On-device receipt scanning: Receipt recognition (OCR) runs locally on your device processor; receipt photos are never uploaded.
  • Personal cloud sync: Sync is an optional Pro feature using your private iCloud or isolated app folder in Google Drive only.
  • Total data control: Uninstalling the app erases all local data permanently. You can export or restore anytime.

1. Overview & Application Scope

Masarif ("Masarif", "the app", "we", or "the developer") is a personal finance and expense tracking application available for iPhone and Android devices, created by an independent developer in Libya. You can reach the developer by email at: m.eledrisse@gmail.com.

Masarif was engineered as an uncompromisingly private financial companion. We believe that financial tracking should never require surrendering your personal privacy. We do not collect, monetize, or harvest personal data.

2. On-Device Data Storage & Zero Tracking

All your personal financial data is stored exclusively and locally on your device storage. It is never uploaded to or hosted on servers operated by us. This local-only data includes:

  • Expense and income records, amounts, categories, and timestamps.
  • Wallets, payment methods, cash drawers, and bank accounts.
  • Custom categories, budget thresholds, and scheduled recurring expenses.
  • Application preferences, default currency, and display settings.
  • Captured receipt photos and the text extracted from them.

3. On-Device Receipt Scanning (OCR)

Masarif features automated receipt scanning and text recognition (optical character recognition). This processing runs entirely on your device using native operating system frameworks: Apple Vision on iPhone and Google ML Kit on Android.

Receipt images and extracted text are never transmitted or uploaded to remote servers. The image is processed locally, and resulting data is saved directly into your device database.

Masarif requires no account registration, no login credentials, displays no advertisements, collects no advertising identifier (such as IDFA or GAID), and incorporates no third-party behavioral analytics or tracking SDKs. We do not sell, rent, or share personal data with third parties.

4. App Lock & Biometrics

For added protection against unauthorized physical access to your phone, Masarif includes an optional App Lock feature. This feature integrates directly with native operating system security mechanisms (such as Face ID, Touch ID, fingerprint authentication, or device passcode).

Biometric data never reaches the application. Authentication is handled entirely by the operating system, which simply communicates a success or failure token to the app.

If you configure an optional custom application PIN, it is stored strictly on your device as a cryptographically salted hash within hardware-backed secure storage (iOS Keychain or Android Keystore-backed storage).

5. Push Notifications (Optional)

Push notifications are entirely optional and disabled by default. They can only be enabled if you explicitly toggle them on in the application Settings.

When notifications are enabled, the app transmits only the technical metadata strictly necessary to route notifications: an anonymous random install ID, the push token issued by Apple or Google, the platform (iOS or Android), the application language, the time zone offset, and the app version.

The sole purpose of this data is to deliver product announcements and helpful reminders. We emphasize: no financial data, transaction details, names, email addresses, or contacts are ever transmitted.

Notification records are stored securely in Google Firebase (Cloud Firestore) and delivered via Firebase Cloud Messaging (Google) and the Apple Push Notification service (APNs). When you turn off notifications in Settings, the app asks our server to delete this record; if the device is offline at that moment, the record is removed automatically after 90 days of inactivity at the latest.

Local reminders (such as budget alerts and scheduled expense reminders) are generated and handled entirely on your device without communicating with any external server.

6. Cloud Sync, Backup & Google API Limited Use

Cloud synchronization and backup is an optional feature available to Masarif Pro users, allowing synchronization across devices and off-device backups.

Masarif operates no intermediate servers for your financial data and cannot read or inspect your financial records. Synchronization connects directly from your device to your personal cloud accounts:

  • On iPhone: Synchronization operates through your personal iCloud account via CloudKit private database.
  • On iPhone and Android: Synchronization operates through your personal Google Drive account using exclusively the hidden application data folder (via the drive.appdata permission scope). The application can only view its own configuration and backup files and can never see or access any other files in your Google Drive.

Google's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Synchronization Controls & Disabling Sync

Data synced to cloud providers is encrypted in transit via HTTPS and stored by Apple or Google under their respective terms and privacy policies.

Disabling sync in the app stops synchronization immediately and deletes nothing in the cloud; users can permanently delete cloud backup files at any time from their iCloud or Google Drive account storage settings.

8. Manual Backups & Data Export

You retain complete control to export full data backups in our dedicated format or as CSV spreadsheets at any time, as well as restore your database from backup files.

These exported files are saved or transmitted strictly to destinations of your choosing (such as local device storage, email, or your personal storage targets).

9. In-App Purchases & Masarif Pro

The "Masarif Pro" upgrade is offered as a single, one-time purchase granting lifetime access to premium features (no recurring subscription fees).

All purchase and billing transactions are processed directly by the Apple App Store or Google Play Store. Masarif never collects, processes, or stores your credit card details or payment credentials; the app only receives confirmation from the store whether the Pro licence is owned.

10. Children's Privacy

Masarif is not directed toward children under 13 years of age, and does not knowingly collect personal information from children under 13.

11. Data Security & Encryption

Data stored on your device is protected by operating system-level encryption and sandboxing, supplemented by optional app-level PIN or biometric locking.

All network transmissions (to our push notification server and to Google Drive or iCloud) strictly utilize encrypted HTTPS/TLS connections.

12. Your Rights & Data Deletion

Because nearly all data resides on your device, you maintain full control over your information:

  • Local data: Uninstalling the application immediately and permanently erases all locally stored data.
  • Cloud copies: You can manage and delete cloud backup files directly from your personal iCloud or Google Drive settings.
  • Push notification records: You can delete the server record immediately by toggling off notifications in Settings. You may also contact us by email at m.eledrisse@gmail.com; because the install ID is visible in Settings only in debug builds, email us and we will delete your record as far as we can identify it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect product enhancements or regulatory updates. Any changes will be posted on this page with an updated "Last Updated" date. Effective date: 29 October 2026.

14. Contact Us

If you have any questions, requests, or privacy concerns regarding Masarif, please contact the developer by email at: m.eledrisse@gmail.com.

Questions About Privacy?

We welcome your questions and are committed to keeping your financial data secure. Contact us anytime.