Privacy Policy

Last Updated: October 10, 2026

Welcome to Dahabna. This Privacy Policy explains what information is processed when you use our Android or iOS application, why it is processed, and the choices available to you.

1. Information We Collect

1.1 Account and Profile Information

Account creation is optional. If you sign in with Google or Apple, Firebase Authentication processes your account identifier, sign-in provider, authentication tokens, and the profile the provider returns: your email address, name, and profile photo link. Apple "Hide My Email" relay addresses are treated as email addresses. Our service stores your Firebase user identifier together with that email address, name, and photo link so that your price alerts and Premium entitlement work across sessions and devices. We also associate your account with notification preferences and subscription entitlement status. This data is collected only if you choose to sign in, and it is deleted when you delete your account in the app.

1.2 Financial Information Stored on Your Device

The app lets you enter financial information for portfolio, zakat, and retirement-planning features, which may include:

• Age and retirement age
• Monthly income and expenses
• Current savings
• Risk tolerance preferences

1.2.1 Portfolio Cloud Sync (optional)

If you are signed in, you may turn on portfolio cloud sync from the Portfolio screen. It is off unless you choose it. When it is on, your gold holdings and zakat payment records for every country you track are stored on our service, linked to your account, so that:

• your portfolio can be restored if you reinstall the app or sign in on another device; and
• our service can value the holdings of the country you are currently viewing once a day and notify you when that value has moved noticeably. The notification contains no amounts.

Only holdings data is uploaded: weight, karat, the prices and fees you entered, the purchase date, your notes, your zakat payment amounts and dates, and — if you link a bar to a manufacturer in the verification feature — that manufacturer name and the bar's serial number. Retirement-planning inputs and projections are never uploaded. The data is sent over an encrypted connection and is not shared with any third party or used for advertising.

You may also attach an ingot photo and an invoice photo to a holding. Both are optional. By default they are stored on your device only. While cloud sync is on, these photos are uploaded to our service and stored privately, linked to your account, so they can be restored with your holdings on another device. They are never shared with third parties and are not used for advertising.

You can turn cloud sync off at any time from the Portfolio screen. Turning it off deletes the copy held on our service, including any uploaded photos, and stops the notifications; the copy on your device is kept. Deleting your account also deletes it.

1.2.2 Ingot Verification

The ingot verification feature helps you check a gold bar against its manufacturer's own verification system. When you scan a code or photograph a serial number, the camera image is processed on your device only to read the code or text; the image itself is never uploaded. To look up a serial, the app (or our service on your behalf) contacts the relevant manufacturer's public verification page, or opens that page for you, sending only the serial number — never your name, email, or any other personal information. Dahabna is not affiliated with these manufacturers, does not certify gold, and only relays each manufacturer's own result.

1.3 Notifications and Alerts

If you enable notifications, Firebase Cloud Messaging processes a push-notification token and device/app information. Our service stores the token, alert preferences, and delivery state needed to send the alerts you request.

1.4 Advertising and Device Information

When advertising is enabled, Appodeal (our primary advertising provider), BidMachine and other Appodeal-authorized demand partners, and LevelPlay with Unity Ads as a fallback may process:

• IP address, advertising identifier, device and operating-system information, approximate location inferred from IP address, and network information
• Ad requests, impressions, clicks, rewards, revenue data supplied by an SDK, and fraud-prevention or diagnostic signals
• Your consent choices and, where applicable, the IAB Transparency and Consent Framework signal shared between advertising providers

We do not provide these advertising services with an Appodeal user ID, precise device location, purchase history, calendar data, or the financial values you enter in the app.

1.5 Advertising Measurement (Meta)

To measure whether an installation came from an advertisement on Facebook or Instagram, the app includes the Meta (Facebook) SDK. Each time the app is installed and each time it is opened, the SDK sends Meta an install or launch event together with device, app-version, locale, network and IP-derived approximate-location information and, subject to your device settings, the advertising identifier. On iOS the advertising identifier is sent only if you allow tracking in the App Tracking Transparency prompt; on Android you can reset or delete it in system settings. On Android the SDK also checks whether Meta's own apps (Facebook, Messenger, Instagram) are installed on the device, which Google Play classifies as "installed apps" data; no other installed apps are read. These two events run regardless of your analytics choice.

If you turn on anonymous usage analytics, six feature events are also sent to Meta so that advertising can be optimised for people who use the app: first activation, viewing gold prices, viewing ingot pricing, adding an ingot to the local portfolio, creating a price alert, and completing the retirement planner. They carry only the platform, the UI language and the originating screen. Dahabna does not use Facebook Login, does not send Meta any name, email, portfolio value, alert, or other financial data you enter, and does not show Meta advertisements inside the app.

1.6 Optional Analytics

Firebase Analytics collection is disabled by default and stays off until you answer the analytics prompt. If you turn on Share anonymous usage analytics in Privacy Choices, we record non-sensitive feature and monetization events, such as button usage, ad-provider attempts and impressions, fallback or suppression, rewarded-pass activity, paywall views, purchases, and restores. Financial values, account credentials, and advertising SDK keys or unit identifiers are not included.

If you decline the prompt, or later turn the setting off, we do not collect usage analytics. The installation count described in section 1.7 continues.

1.7 Installation and Active-Device Counts

Each time the app starts, regardless of your analytics choice, it sends one request to our service containing a device installation identifier (the Android ID on Android or the identifier for vendor on iOS), your Firebase user identifier if you are signed in, the platform, and the app version and build number. We use this only to count installations, daily and monthly active devices, and retention. It contains no advertising identifier, holdings, alerts, or feature usage, and it is not shared with advertising providers.

1.8 Purchases and Subscriptions

Google Play or Apple processes payment details. RevenueCat processes store transaction identifiers, product and subscription status, app user identifiers, and entitlement history so that Dahabna can provide Premium access and restore purchases. We do not receive your full payment-card details.

1.9 App Updates

At launch the app asks Shorebird, our code-update provider, whether an update is available. That check sends the app identifier, release version, installed patch number, platform, and CPU architecture. It contains no personal information.

Optional questionnaires

Surveys are optional. Submitted choices and free-text answers are stored to improve Dahabna, together with an installation identifier and submission receipt. Unclaimed guest participation is linked once to the first account you sign into; existing account answers take precedence. Account completion and reminders synchronize across devices. Skipping defers a survey for 24 hours; a completed questionnaire is not shown again.

Survey answers are not sent to advertising or analytics SDKs or written to application logs. Avoid entering sensitive personal information. Responses remain for product feedback until removed; deleting your account deletes account-linked responses. Device suppression records without an account identifier may remain to prevent repeat prompts. Unconfirmed submissions are stored locally until confirmed or no longer deliverable.

2. How We Use Your Information

We use the information as follows:

• Local Calculations: Your financial data is used solely on your device to calculate retirement projections and provide personalized recommendations.
• Authentication and Alerts: Account and notification data is used to secure sign-in, synchronize requested service state, and deliver alerts.
• Advertising: Advertising data is used to request, measure, limit, and protect ads and to grant verified rewarded benefits. Premium users and users with an active rewarded ad-free pass do not receive banners or interstitials.
• Purchases: Store and RevenueCat data is used to validate, restore, and maintain the Premium entitlement.
• Optional App Improvement: If you opt in, analytics events are used to understand feature reliability and usage.
• Advertising Measurement: Meta install and launch events are used only to attribute installations to Dahabna's own advertisements and, after analytics opt-in, to optimise those advertisements.
• Installation Counts: Installation records are used to measure how many devices use the app and how often, and to keep app versions supported.

3. Third-Party Services

3.1 Service Providers

The app uses the following service providers, each of which processes data under its own privacy policy:

• Appodeal and BidMachine for primary advertising and mediation
• Unity LevelPlay and Unity Ads for fallback advertising
• Google Firebase for authentication, messaging, and opt-in analytics
• RevenueCat for subscription and entitlement management
• Shorebird for over-the-air code updates
• Meta Platforms for measuring installs that came from Dahabna's own Facebook and Instagram advertisements
• Google Play and Apple App Store for app distribution and payment processing

3.2 Consent and Personalized Advertising

In regions where consent is required, the app presents an advertising consent message and stores your choices. LevelPlay reads the shared consent signal and does not present a second consent dialog. On iOS, App Tracking Transparency is a separate system permission. Refusing consent or tracking does not prevent use of the app; providers may instead serve contextual or non-personalized ads where permitted.

3.3 Gold Price Data

Our app fetches real-time gold prices from external APIs. No personal information is transmitted when retrieving this data.

4. Data Storage and Security

• Local Storage: All personal financial data is stored locally on your device using encrypted storage.
• Server Data: Account profile (user identifier, email address, name, photo link), notification, installation, configuration, and service-security records are stored only as needed to operate those features. Financial values entered for local calculations are not uploaded to our service, except for the portfolio holdings and zakat records of users who turn on portfolio cloud sync (section 1.2.1).
• Security: We use access controls, authenticated service endpoints, transport encryption, and platform security features. No system can guarantee absolute security.
• Retention and Deletion: Local data remains until you delete it, clear app data, or uninstall. Account and notification data is retained while the account is active and as reasonably required for security, legal, and operational purposes. Daily activity rows are deleted after 180 days; the per-device installation record is kept while the app stays in use. Deleting your account in the app deletes your profile, registered device tokens, price alerts, and any synced portfolio including uploaded holding photos, and unlinks your user identifier from installation records. Turning portfolio cloud sync off deletes the synced portfolio and its photos on its own.

5. Data Sharing

We do not sell your personal financial information. We share information only as needed to provide the app, comply with law, protect users and the service, or with your direction. This includes:

• Advertising and consent data with the advertising providers described above
• Install, launch and, after analytics opt-in, the six feature events with Meta for advertising measurement
• Account, messaging, and opt-in analytics data with Firebase
• Subscription and entitlement data with stores and RevenueCat
• Installation identifiers and account profile data are stored on our own service and are not shared with advertising providers
• Information required by law or necessary to prevent fraud, abuse, or security incidents

6. Children's Privacy

Our app is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

7. Your Rights

You have the right to:

• Delete local data through the app, by clearing app data, or by uninstalling
• Delete your account through the in-app account-deletion action
• Open Privacy Choices to review advertising consent where available
• Turn anonymous usage analytics on or off at any time; turning it off stops usage-analytics collection, while the installation count described in section 1.7 continues
• Control personalized advertising and the advertising identifier through your device settings, and control tracking through iOS App Tracking Transparency; denying tracking on iOS, or deleting the advertising identifier on Android, stops that identifier from reaching the advertising providers and Meta
• Request access, correction, or deletion where applicable by contacting us

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9. Contact Us

10. Legal Bases and International Processing

Depending on your location, processing is based on providing the service you request, legitimate interests such as security and fraud prevention, compliance with law, or your consent. Our service providers may process information in countries other than yours and use legally recognized safeguards where required.

11. Summary of Data Categories

This summary matches the Google Play Data safety and App Store App Privacy declarations for the current app version. "Collected" means transmitted off your device to us or a service provider; "shared" means transferred to advertising providers that use it for their own purposes.

Data	Collected	Shared	When	Purpose
Email address, name, profile photo link	Yes	No	Only if you sign in	Account management
User identifiers (Firebase, RevenueCat)	Yes	No	Always	App functionality, account management, installation counts
Purchase history	Yes	No	Only if you buy Premium	App functionality
Device and other identifiers (advertising ID, installation ID, push token)	Yes	Yes (advertising ID only, to ad providers and Meta)	Always	App functionality, analytics, advertising, fraud prevention, install attribution
Approximate location (from IP address)	Yes	Yes	Non-Premium users (ad providers); all users (Meta)	Advertising, fraud prevention, install attribution
App interactions	Yes	Yes	Ad interactions for non-Premium users; Meta install and launch events for all users; usage events only after opt-in	Analytics, advertising, install attribution
Installed apps (whether Meta's own apps are present, Android only)	Yes	Yes	Always	Advertising measurement
Crash logs and diagnostics	Yes	Yes	Advertising SDKs, Meta SDK	Analytics, advertising
Portfolio holdings and zakat records	Only if you turn on cloud sync	No	Not shared	Backup and restore, portfolio value notifications
Ingot and invoice photos you attach to holdings	Only if you turn on cloud sync	No	Not shared	Backup and restore
Retirement-planning data; precise location; contacts; other photos; messages	No	No	Stays on your device	Local calculations

© 2026 Dahabna. All rights reserved.