PRIVACY POLICY

Last updated June 15, 2026

This privacy notice for Digital Miles ("we," "us," or "our") explains how we

collect, use, store, and share information when you use MyHisaab, including the MyHisaab mobile application.

MyHisaab is a personal finance tracking assistant. It helps users record

expenses, income, accounts, budgets, reminders, and related financial notes.

MyHisaab is not a bank, lender, investment adviser, or licensed financial

institution, and it does not provide banking, lending, investment, tax, or legal advice.

If you do not agree with this privacy policy, please do not use our Services. If you have questions, contact us at contactus@myhisaab.pk.

SUMMARY OF KEY POINTS

What information do we collect? We collect account information such as your

phone number, name, email address where provided, onboarding details, app preferences, and the financial records you choose to enter into MyHisaab.

Do we collect financial information? Yes. MyHisaab stores the expenses, income,

account names, budgets, categories, receipts, screenshots, messages, and related financial notes that you add to the app.

Do we process voice or images? Yes, only when you choose to use those features. If you record a voice message or upload/capture an image, we process that content to provide transaction logging, AI chat, receipt reading, and related features.

Do we share data with third parties? We share limited data with trusted providers only where needed to operate MyHisaab, such as AI processing, hosting, analytics, support, and communication. We do not sell your personal data.

How long do we keep data? We keep your information while your account is active

and as long as needed to provide the Services, comply with law, prevent fraud, resolve disputes, or maintain backups. When you delete your account, we remove your personal data from active systems, subject to limited legal, security, fraud-prevention, dispute, and backup retention.

What are your rights? You may access, update, correct, or delete your account

information. Depending on your location, you may also have additional rights under GDPR, CCPA/CPRA, or other regional privacy laws.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

Personal information you provide to us

We collect information that you provide when you create an account, sign in,

complete onboarding, use MyHisaab, contact support, or interact with app features. This may include:

• phone number
• name
• email address, if provided
• gender or onboarding details, if provided
• account preferences, such as currency, language, categories, and tracking cycle
• account names and shared-account information
• budget settings, opening balances, and summary settings
• expenses, income, transfers, reminders, goals, categories, notes, dates, amounts, and transaction descriptions
• chat messages and instructions you send to MyHisaab
• support messages and feedback
• privacy policy or terms acknowledgement records, where shown in the app

Financial information

MyHisaab stores the financial tracking information that you choose to enter,

upload, or generate through the app. This may include expenses, income, account names, budgets, categories, transaction dates, receipt details, bank-transfer screenshots, payment notes, reminders, goals, and reports. We use this information to provide financial tracking, summaries, AI chat, insights, and reports.

AI processing consent

MyHisaab requires your consent to process text messages, voice messages,

uploaded images, receipts, and related message content through trusted third-party AI tools. This processing is required for the app to understand your requests, create replies, log entries, read receipts, and provide core AI features. If you do not provide this consent, you will not be able to continue using MyHisaab.

Images, receipts, and camera/photo access

If you choose to upload an image, capture a receipt, or share a bank-transfer

screenshot, we process that image and related extracted text to provide receipt reading, transaction logging, AI chat, and support features. If you use the camera or photo picker in the mobile app, your device may ask for camera or photo-library permission. You can manage those permissions in your device settings.

Microphone, voice, and audio information

If you choose to record a voice message, we request microphone permission before recording. Voice recordings, transcripts, and related message content may be processed to provide AI-powered chat, expense logging, reminders, and support features. If you do not allow microphone access, voice recording will not work.

Information collected automatically

When you use MyHisaab, we and our service providers may automatically collect

technical and usage information, such as:

• IP address
• browser, device, operating system, and app version
• session and authentication information
• pages, screens, features, and actions used
• crash, diagnostic, log, and performance information
• approximate location inferred from IP address or service region

We do not ask for continuous GPS tracking as part of the current MyHisaab app

experience.

Notifications

MyHisaab may show in-app notifications, reminders, alerts, and account messages. If native push notifications are enabled in the mobile app, your device will ask for permission and you can turn notifications off in your device settings.

2. HOW DO WE USE YOUR INFORMATION?

We use your information to:

• create, authenticate, and manage your account
• send and verify login OTPs
• provide expense, income, account, budget, reminder, goal, and reporting features
• process text, voice, image, and receipt inputs
• generate AI replies, summaries, categories, and insights
• provide customer support and respond to requests
• send service messages, reminders, alerts, and in-app notifications
• improve app performance, reliability, safety, and user experience
• detect, prevent, and investigate fraud, abuse, technical issues, and unauthorized access
• comply with legal, regulatory, tax, accounting, and dispute-resolution obligations

3. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

We do not sell your personal data. We share information only where needed to

operate, secure, improve, or provide MyHisaab, or where required by law.

Third-party service providers

We may share limited data with trusted providers, including:

• OpenAI, to process the messages, receipts, images, voice transcripts, transaction context, and related inputs required to deliver AI-powered chat, expense logging, receipt reading, summaries, and insights within MyHisaab. Data sent to OpenAI is processed under OpenAI's Data Processing Addendum (https://openai.com/policies/data-processing-addendum). We do not permit OpenAI to use your data to train its models.
• hosting, database, storage, and infrastructure providers
• Google Analytics and Hotjar, to understand how users interact with MyHisaab, improve app performance, identify usability issues, and fix bugs. These tools may collect usage events, device and browser information, approximate location derived from IP address, session activity, and diagnostic data. We do not use these tools to sell personal data or track users across third-party apps or websites for advertising.
• crash reporting, monitoring, and product improvement tools
• communication providers used for OTPs, WhatsApp/SMS messages, notifications, or support
• support and operations tools used to handle user requests and service issues

Shared accounts

If you use shared-account features, information related to the shared account

may be visible to invited members or account participants according to the sharing permissions in the app.

Business transfers

We may share or transfer information in connection with a merger, financing,

acquisition, reorganization, sale of assets, or similar business transaction.

Legal and safety reasons

We may disclose information if required to comply with law, enforce our terms,

protect rights and safety, prevent fraud, or respond to lawful requests.

4. HOW LONG DO WE KEEP YOUR INFORMATION?

We keep your personal information while your account is active and for as long

as needed to provide MyHisaab.

We may retain some information after account deletion where necessary for legal, tax, accounting, security, fraud-prevention, dispute-resolution, backup, or legitimate business reasons. Backup copies may remain for a limited period until overwritten or deleted through normal backup cycles.

When we no longer have a valid reason to keep personal information, we delete or anonymize it. If immediate deletion is not possible, we securely store it and isolate it from further active processing until deletion is possible.

5. DO WE COLLECT INFORMATION FROM MINORS?

MyHisaab is not intended for children under 18. We do not knowingly collect data from or market to children under 18 years of age. If we learn that personal information from a user under 18 has been collected, we will take reasonable steps to delete it. If you believe we have collected information from a child under 18, contact us at contactus@myhisaab.pk.

6. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location, you may have rights under applicable privacy laws,

including GDPR, CCPA/CPRA, or other regional privacy regulations. These rights may include the right to:

• access the personal information we hold about you
• correct or update inaccurate information
• delete your account and personal information
• object to or restrict certain processing
• withdraw consent where processing is based on consent
• request a copy of your data where required by law
• opt out of sale or sharing of personal data where applicable

We do not sell personal data. To exercise your rights, use the account settings

in the app or contact us at contactus@myhisaab.pk. We may need to verify your identity before completing certain requests.

Withdrawing consent

If we rely on your consent for a feature, you may withdraw that consent at any

time. This will not affect processing that happened before consent was withdrawn.

Some features, such as voice recording, camera/photo upload, or AI processing,

may stop working if the related consent or permission is withdrawn. Because AI processing is required for MyHisaab's core service, withdrawing that consent may prevent you from continuing to use the app.

7. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers and some mobile operating systems include a Do-Not-Track ("DNT")

setting. There is no uniform standard for responding to DNT signals, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will update this policy.

Advertising tracking and Apple's Advertising Identifier (IDFA)

MyHisaab does not track users across third-party apps or websites for advertising purposes and does not use Apple's Advertising Identifier (IDFA). We do not build advertising profiles, serve targeted ads, or share your information with advertising networks.

8. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We may update this privacy policy from time to time. The updated version

will be indicated by an updated "Last updated" date and will be effective when posted. We encourage you to review this policy regularly.

9. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, email us at

contactus@myhisaab.pk.

10. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You can review or update your account details from the app settings where

available. For further help, contact us at contactus@myhisaab.pk.

Account Deletion

You have the right to permanently delete your MyHisaab account and associated

personal data at any time.

To delete your account:

1. Open the MyHisaab app

2. Go to Profile

3. Tap Delete Account

4. Type DELETE when prompted

5. Confirm your decision

Upon account deletion, we remove your personal data from active systems,

including account information, personal accounts, transactions, chat history, reminders, and notifications, subject to limited retention where required by law, fraud prevention, security, dispute resolution, or backups.

For any questions, contact us at contactus@myhisaab.pk.