Privacy policy

Last updated: 20 October 2026

Mizan AI ("the app") is provided by FAHAD SULAIMAN ALKHOWAITER Company, a limited liability company registered in Riyadh, Saudi Arabia (Commercial Registration 7055355676) ("we", "us"). This policy explains what personal data we collect, why, where it is kept and the choices you have. We handle personal data in line with the Saudi Personal Data Protection Law (PDPL).

1. What we collect

• Account details from the sign-in you choose (for example Google): your name, email address and the account's identifier.
• Financial information you add: accounts and balances, transactions, categories, budgets, savings goals, investments, debts and the app's settings — whether you type them in, import a statement, or ask Cortex to add them.
• Cortex conversations: the questions you ask, files you attach (such as a statement or a bill), and a summary of your figures that goes with each question so the answer fits your situation.
• WhatsApp (only if you link it): your WhatsApp number and recent messages with Cortex.
• Technical data: basic server logs (time, request type, result) used to keep the service running and secure.

We do not collect your bank passwords. The app never moves money or makes payments.

2. Why we use it

• To provide the app: keep your data in sync across your devices and show your budgets and insights.
• To answer your questions with Cortex.
• To secure the service, prevent abuse and fix problems.

We do not sell your data, show you ads, or use your data for advertising.

3. Where your data is kept

Your data is stored on our servers in Riyadh, Saudi Arabia (Alibaba Cloud's Saudi region, operated by Saudi Cloud Computing Company), on encrypted disks, and travels only over encrypted connections (HTTPS). The app also keeps an encrypted copy on your phone so it works offline.

4. Who we share it with

Only service providers that help us run the app, and only what they need:

• Anthropic (Claude), which generates Cortex's answers. Each question you ask Cortex — with any file you attach and a summary of your figures — is sent to Anthropic, which processes it outside Saudi Arabia. Under Anthropic's commercial terms this data is not used to train their models.
• Google, to sign you in when you choose Google sign-in.
• Meta (WhatsApp), only if you link WhatsApp, to deliver messages.
• Open-banking provider (when available): only after you explicitly consent in the app, a licensed open-banking provider will retrieve your account data from your bank on your behalf.
• Authorities, only where Saudi law requires it.

5. How long we keep it

We keep your data while your account exists. When you delete your account, your data is removed from our servers immediately, and from our encrypted backups within 14 days. Recent WhatsApp message history is kept for 24 hours.

6. Your rights

You can ask to access, correct or receive a copy of your data, withdraw a consent, or delete your account. You can delete your account at any time in the app (Settings → Account → Delete account), or email us at fahad@alkhowaiter.sa. You may also complain to the Saudi Data & AI Authority (SDAIA).

7. Security

We use encryption in transit and at rest, keep the database off the internet, and limit access to the servers to authorised keys. No system is perfectly secure; if a breach affects you, we will inform you and the authorities as the law requires.

8. Children

The app is intended for people aged 18 and over.

9. Changes

We may update this policy. We will show the new date above and tell you in the app about important changes.

10. Contact

FAHAD SULAIMAN ALKHOWAITER Company, Riyadh, Saudi Arabia — fahad@alkhowaiter.sa