Privacy policy

Last updated 15 June 2026

What we collect

Masareef stores the financial data you choose to import — bank statements, SMS notifications, and CSV exports — along with the transactions, categories, and merchants we derive from them. We also store your account email (from Google sign-in) so you can log in.

Your AI keys

Masareef runs on your own AI provider keys. We encrypt them at rest and never write them to logs. We only show the last four characters so you can recognise a key — the full secret is never displayed, exported, or sent anywhere except your chosen provider.

How we use your data

We use your data to classify transactions, answer your questions, and show you spending insights. Classification and question answering call the AI provider whose key you supplied. We do not sell your data, and we do not use it to train any model.

Retention

We keep your data for as long as your account is active. When you delete your account we deactivate it immediately and permanently erase your data — including imported files and encrypted keys — within 60 days.

Your rights

You can export a full copy of your data as JSON and CSV at any time from your account settings. You can also delete your account and all associated data whenever you like. Under the UAE Personal Data Protection Law and the GDPR you may request access, correction, or erasure of your personal data.

Contact

Questions about privacy? Reach us at hello@masareef.app or read our Terms.