Privacy Policy

1. Introduction

Welcome to Zakat Mizan. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our application or use our services.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the App, express an interest in obtaining information about us or our products and Services, when you participate in activities on the App, or otherwise when you contact us.

• Personal Info: Name, email address, password, and authentication data (e.g., Google or Dropbox OAuth tokens for backups).
• Financial Data: Asset values, currency preferences, and Zakat calculation histories that you input into the application.

3. How We Use Your Information

We use personal information collected via our App for a variety of business purposes described below:

• To facilitate account creation and logon process.
• To calculate and track your Zakat obligations accurately.
• To perform automated backups to your connected third-party accounts (e.g., Google Drive, Dropbox) if you explicitly authorize us to do so.
• To send you administrative information, such as Hawl reminders or subscription notices.

4. Google API Services Usage Disclosure

Zakat Mizan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, regarding Google user data:

• Access: When you connect Google Drive for backups, we request access only to create and manage files that Zakat Mizan itself has created. We do NOT ask for, nor do we have access to, your general personal files in Google Drive.
• Use: The requested Google Drive access is strictly used to upload, retrieve, and delete your encrypted Zakat Mizan backup files. We do not use your Google data for any other purpose, including advertising or data brokering.
• Storage: We securely store your Google OAuth access and refresh tokens in our encrypted database solely to facilitate seamless automated backups. We do not store your actual Google Drive files on our servers.
• Sharing: We do not share, sell, or transfer your Google user data (or your authentication tokens) to any third parties under any circumstances.

5. Other Integrations and Local Backups

In addition to Google Drive, Zakat Mizan offers integration with Dropbox to provide secure cloud backups. Similar to our Google integration, when you connect Dropbox, we request access only to a specific application folder. Your authentication tokens are stored securely and can be revoked at any time from your account settings or directly through the third-party provider.

Alternatively, you can choose to download and save your data locally as an encrypted json.enc file without needing to grant permissions to any third-party cloud provider.

6. Security of Your Information

We prioritize the security of your financial data. All sensitive data stored within our Prisma database is encrypted using industry-standard AES-256-CBC encryption. Furthermore, any critical security modifications to your account require verification through a secure 6-digit One-Time Code (OTC) sent to your email.

Despite our rigorous safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your password and OTCs.

7. In-Product Privacy Notifications

We ensure that users are fully aware of what data is being synced. In-product privacy notifications and explicit consent prompts are prominently displayed within the App's Backup Settings interface before any connection to Google Drive or Dropbox is initiated.

8. Contact Us

If you have questions or comments about this policy, you may email us at support@zakat-mizan.com.