Privacy in the Tat’heer app
Version 2026-10-21 · Updated 21 October 2026
Tat’heer is operated by Sheriax Solutions Private Limited. This notice covers the Android app, its authentication service and its backend. The website notice covers the separate early-access list.
Tat’heer is intended for adults aged 18 and over.
Information used to provide the app
We use your email address, name, account identifier, sign-in and verification records to create and protect your account. Authentication is provided by Clerk. If you use a password, it is sent securely to Clerk for verification; the Tat’heer backend does not receive it.
The app stores financial records you choose to enter or import: account names and types, institution labels and optional last digits, balances, currencies, transaction amounts and dates, descriptions, categories and import fingerprints. It also stores your profile and setup choices.
When enabled and accepted by you, interest tracking stores policy acceptance, selected scan scope and progress, possible-interest entries, your reviews and corrections, and payment records and references you enter. Detection does not make a religious determination. A payment record is your report and does not establish receipt by a recipient.
Statements and device access
You select files using Android’s file picker; the app does not request access to your entire file collection. CSV files are parsed on your device. Selected spreadsheet files are sent to the backend for bounded extraction. Raw statement files are not permanently stored by this service; financial rows you explicitly confirm are saved to your account.
Live bank connections, statement-image extraction and provider-confirmed payments are currently unavailable. We do not collect bank passwords, read SMS messages or move money. These capabilities require new provider arrangements and an updated notice before launch.
Session credentials are encrypted using Android Keystore and excluded from Android backup. Biometric app lock uses Android’s device authentication; Tat’heer does not receive fingerprints or face templates. Exports are created locally and shared only to the destination you choose. You control copies saved or shared outside the app.
Providers, hosting and international processing
Cloudflare provides the API, D1 database, private R2 object storage, queues, background processing and public website. Cloudflare Email Routing receives messages sent to contact@tatheer.money and forwards them to the company's monitored Google Workspace mailbox. Clerk provides identity, sessions and authentication emails. These providers may process operational request information such as IP address, device/browser details and security events to provide and protect their services.
The production database runs in Cloudflare’s APAC region and the private bucket was provisioned with an APAC location hint. Processing can occur globally. These settings do not promise India-only storage or processing. See Cloudflare’s privacy policy and Clerk’s privacy policy.
Google processes Play distribution and platform diagnostics under its own policies and device settings. The app has no advertising, third-party analytics or third-party crash-reporting SDK. The usage-sharing preference currently remains a local choice and sends no usage analytics. We do not sell personal information or use financial records for advertising.
Retention and deletion
Your active account records are kept until you delete them or request account deletion. Account deletion blocks further ordinary writes and queues removal of your financial records, interest and payment records, private user files and Clerk identity. Our operating target is to complete verified deletion requests within 30 days; a failed background step remains pending and requires recovery rather than being reported as complete.
Minimal identity mappings, deletion receipts, identity-event identifiers and security records can remain for up to 90 days to prevent duplicate processing and support deletion recovery. Automatic cleanup removes expired records in bounded batches after erasure has completed. A failed or incomplete erasure must be resolved before its receipt is removed.
Cloudflare D1’s recovery window on the current Free plan is seven days. A minimal private deletion journal is stored separately for recovery, with an automatic 14-day expiry rule; provider removal of expired objects is asynchronous. Recovery copies age out under the provider’s window; they are not used as an active account after deletion. Before a restore is made available, the operator must reapply deletion requests so deleted records are not restored to use. Provider-managed security logs and recovery copies are governed by the provider’s retention terms; the 90-day application cleanup is not a claim that we can directly erase every provider backup.
Support messages in the company’s Google Workspace mailbox are used to answer requests and establish account ownership. Deletion-related correspondence is retained for up to 90 days after the request is completed. Records required by a specific legal obligation may be retained for that obligation; we will explain an applicable exception when responding to a request.
Your choices and contact
You can edit your profile and records, export your data, and request deletion in Settings. Removing only Tat’heer tracking data keeps your financial accounts and transactions. Uninstalling the app does not delete the server account.
You can also request account deletion on the web without installing or signing into the app. For access, correction, privacy concerns or support, write to contact@tatheer.money. Never send passwords, verification codes or bank-login credentials.