Privacy Policy
Mizan stores your financial data on your device. The app itself collects nothing about you. There are no accounts, no analytics, no ads, no third-party trackers, no cookies, no telemetry.
Data we collect
None. The app does not collect, transmit, sell, or share any personal data on its own.
Data stored on your device
- Expense, income and transfer entries (amount, category, optional note, date, optional account, optional receipt photo), plus the accounts, budgets, savings goals and debts you create.
- App preferences (currency, theme, monthly budget, biometric-lock, auto-lock timeout).
- Optional configured AI provider records: display name, base URL, model, and an API key, used only when you actively invoke the AI features.
- If you turn on automatic tracking (version 1.7 and later): the purchases waiting for you to confirm (amount, shop, the card's name and last digits, and the time), the purchases you added or skipped in the last 7 days so the same one is not offered twice, and which account each card pays from. On iPhone these are kept out of iCloud backups.
This data lives in the app's private sandbox. It is excluded from
Android cloud backup and device-to-device transfer (see
data_extraction_rules.xml). You can delete all expense
data from Settings → Delete all expenses, remove
configured AI providers from Settings → AI providers,
or uninstall the app (see
how to delete your data).
Network access (important)
The app sends your data to an AI provider only when you actively use an AI feature (chat, budget suggestions, category suggestions, or receipt scanning) and have configured an AI provider in Settings → AI providers. In that case:
- The app makes an HTTPS request to the provider you chose (e.g. OpenAI, Anthropic, OpenRouter, Groq, Google AI Studio, DeepSeek, a self-hosted endpoint, or any custom OpenAI-compatible URL you enter).
- For chat and budget suggestions, the request
body includes:
- Today's date.
- The currency you have configured (e.g. USD, AED).
- The total number of expenses on file.
- The last 7 days total, the last 30 days total and the last 90 days total.
- The top 8 categories from the last 30 days, with a per-category total. (If you have fewer than 8 categories used in that window, all of them are sent.)
- The 15 most recent entries: each one's date, amount, category, and the user-typed note (if any).
- The text of your question or prompt for the operation you triggered.
- For chat, up to 10 of your category names, so the assistant can log an expense or an income (including a monthly income, such as a salary) for you when you ask it to.
- For budget suggestions, your list of categories, so it can suggest a budget for each one.
- For the Auto (AI) category button on the add expense screen, the request includes only the note you typed, the amount, and your list of category names. It is sent only when you tap Auto (AI).
- For receipt scanning, the request includes only the receipt image you take or choose (resized to at most 1024×1024 pixels), your list of category names, and your currency setting. It is sent only when you tap Scan receipt with AI.
- Receipt photos you attach to an expense are never sent unless you scan them as described above. Account labels are never sent. The configured API key is sent in the HTTP header to authenticate to your chosen provider. It does not pass through any Mizan infrastructure.
- The provider's privacy policy and terms govern what happens to that data on their side. Read theirs before configuring.
If you do not configure an AI provider, the app never sends your expense data over the network. Apart from AI provider requests, the app connects to the network only in these cases, and none of them include your expense data:
- Mizan AI model download. If you choose to use
Mizan AI, the app downloads the model file from Hugging Face
(huggingface.co, from the
usemizanaccount) when you tap download, and again only if you tap Update to install a newer model. If you use the advanced option to supply your own model URL, the file is downloaded from that address instead. The download service's privacy policy governs that request. After the download, Mizan AI runs entirely on your device and your questions and expense data are not sent anywhere. - Purchases. When the app starts or returns to the foreground, it asks Google Play Billing for current Premium prices and whether you own Premium. Buying Premium or restoring a purchase also goes through Google Play Billing, as described under In-app purchases below.
- Update check. When installed from Google Play, the app asks Google Play whether a newer version is available when the home screen opens. Turning on Offline mode in Settings skips this check.
You can verify this with any network monitor or by running the app with airplane mode on. Chat, suggestions, and receipt scanning that rely on a cloud provider will simply stay unavailable; Mizan AI on the phone keeps working.
If you want fully local AI, there are two options. The simplest is Mizan AI (Premium), which runs a model on your phone after the model download described above. Alternatively, you can run a self-hosted server (e.g. Ollama on your own computer) and configure Mizan to talk to it as a Custom OpenAI-compatible provider pointed at your LAN IP. Traffic stays on your local network in that configuration.
Automatic tracking (optional, version 1.7 and later)
This section applies starting with version 1.7 of the app. Earlier versions do not have automatic tracking and never read your notifications. Automatic tracking is an optional Premium feature. It is off until you turn it on. When you pay with your phone, Mizan offers to add the purchase, and it never adds one without asking you first.
- Android. With your permission, Mizan reads notifications from Google Wallet and Samsung Wallet on your phone. Mizan explains this first, and you then allow notification access in Android settings. From a payment notification it takes only the amount, the shop and the card. Every other notification is ignored. The notification text is read on your phone and kept only until you next open Mizan.
- iPhone. Purchases reach Mizan only through a Shortcuts automation that you set up yourself in Apple's Shortcuts app. For each Apple Pay purchase it hands Mizan the amount, the shop and the card.
All of this is processed on your phone. Nothing about your purchases is sent to us or to anyone else. You can turn automatic tracking off any time in Settings → Automatic tracking. On Android you can also remove Mizan's notification access in Android settings, and on iPhone you can delete the automation in Shortcuts.
Permissions
INTERNETandACCESS_NETWORK_STATE(Android): used only for the network access described above (AI provider calls, the Mizan AI model download, and the Google Play update check) and for In-App Purchase and Restore Purchases (the platform store talks to Apple or Google directly via StoreKit or Play Billing).USE_BIOMETRIC(Android) andNSFaceIDUsageDescription(iOS): used only if you enable App Lock in Settings.- Camera and photo library: used only when you tap "Attach receipt" on an expense, or when you scan a receipt. Photos stay in app-private storage. A photo is uploaded only when you use receipt scanning, and then only to your chosen AI provider as described above.
POST_NOTIFICATIONS(Android) and notification permission (iOS): budget alerts, the monthly reminder, and the note that a Mizan AI answer is ready. All of them are scheduled and shown on the phone; nothing is sent to a server.FOREGROUND_SERVICEandWAKE_LOCK(Android): keep Mizan AI running on the phone while it finishes writing an answer, even if you switch apps.RECEIVE_BOOT_COMPLETED(Android): restores your scheduled reminders after the phone restarts.- Notification access (
BIND_NOTIFICATION_LISTENER_SERVICE, Android, version 1.7 and later): used only for automatic tracking, and only if you turn it on and allow it, as described above. You can take it back in Android settings at any time. - The Add purchase to Mizan Shortcuts action (iOS, version 1.7 and later): runs only from a Wallet automation you create, as described above.
The app does not use the microphone, and does not access contacts, location, calendar, or any other personal information beyond what this page describes.
In-app purchases
Mizan offers a Premium tier with three SKUs. Purchases are handled by the platform store (Apple StoreKit / Google Play Billing). Mizan does not operate a payment server; the platform store handles the transaction end-to-end. The app stores only the resulting entitlement state (active / inactive, tier, approximate renewal date) on this device.
Children's privacy
The app does not collect data from any user, regardless of age. It is suitable for users of all ages and complies with COPPA by virtue of collecting no data on its own.
App Store / Play Store disclosures
- Apple App Privacy: "Data Not Linked to You: Financial Info," collected only when the user enables the optional AI assistant. No data is used to track the user. The Mizan app, the developer, and any Mizan infrastructure does not see, log, store, or process AI-provider traffic in any form.
- Google Play Data Safety: App-collected data: none. Data shared with third parties: only when the user enables the optional AI assistant, in which case Financial Info (recent expense summary) goes to the provider the user picked. Encrypted in transit (HTTPS). Users can request deletion via Settings → Delete all expenses and Reset everything, or by uninstalling the app.
This website
Everything above is about the app. This section covers this website, usemizan.app.
- usemizan.app is a static site hosted on Vercel. Vercel processes standard request logs, such as your IP address and user agent, to serve and protect the site.
- The site uses no analytics and no tracking cookies.
- If you switch between the light and dark theme, your choice is
stored in your browser's local storage only (under the key
mz-theme). It is not sent anywhere. - Fonts are served from usemizan.app itself, not from a third-party font service.
- The feedback form sends what you type (the feedback type, your message, and an email address only if you give one) to Web3Forms, which delivers it to us. The form is protected by Cloudflare Turnstile, which checks that the request comes from a person; the Turnstile widget loads from Cloudflare on the feedback page only.
- The newsletter signup sends your email address to Buttondown, which runs the mailing list.
Contact
Questions: studio@usemizan.app
Have a question, bug report, or feature idea? You can also send feedback. No email address is required unless you want a reply.