Privacy policy
Hissa is a shared expense ledger for households. This policy sets out what the app holds about you, why it holds it, and how you get rid of it.
1. What this covers
The Hissa mobile app and this website. It does not cover anything your flatmates do with information after they have seen it in a group you share with them.
2. What we collect
Your email address, and a display name — if you don’t choose one, we use the part of your address before the @. A user ID we generate for you. The expenses you enter: description, amount, date, and who paid. The groups you belong to, their names and invite codes. The months you open and close, and the settlement payments between you and your flatmates, including when each was marked paid. We also record when each of these was created and last changed.
3. What we do not collect
No location. No contacts. No advertising identifiers. No analytics SDK, and no third-party trackers. No payment details: Hissa records who owes what, and never moves money.
Signing you in does leave a trail we don’t choose to keep. Our authentication provider records your sign-in sessions, and its own audit log includes the IP address and the browser or device they came from; our email provider keeps delivery logs for the sign-in messages it sends you. None of it is used to profile or track you, and it goes when your account does.
4. Why we hold it
Solely to run the shared ledger for your group — to record what was spent, split it, keep the running balances, and settle the month. We do not use it for anything else, and we do not sell it.
5. Who else processes it
Three providers, all acting on our instructions:
Supabase — the database your entries live in, and the sign-in system.
Brevo — sends your sign-in and contact emails.
Vercel — serves this website, and keeps the request logs that come with doing so.
6. Who can see your data
Only the members of the groups you belong to. That is enforced at the database on every request, rather than by the app choosing what to show.
7. How long we keep it
Until you delete your account. Entries other members have already settled against are retained, with your name and email address removed from them, so that their closed months still balance.
8. Deleting your account
In the app, under More, tap Delete account. If you can't get in, use the deletion page. Your email address is released when the account goes, so you can sign up again from scratch whenever you like.
One condition, and it exists to protect the people you share with rather than us: we can’t delete your account while money is still outstanding in your name — a non-zero balance in a month that hasn’t been closed, or a settlement payment to or from you that nobody has marked paid. Settle those and the deletion goes through immediately.
9. Children
India’s Digital Personal Data Protection Act treats anyone under 18 as a child, and requires verifiable parental consent before their data may be processed. Hissa is not built for or directed at under-18s, we do not ask for anyone’s age, and we do not knowingly hold a child’s information. If we learn that we do, we delete the account and everything attached to it.
We do not profile anyone, track behaviour, or show advertising — to children or to anyone else. The Act forbids all three where children are concerned; none of them exist in Hissa at all.
10. Where your data is held
Your entries, your groups and your sign-in details live in a Supabase project hosted in Mumbai, India, and this website runs on Vercel’s Mumbai region. Both are inside India, so the ledger itself does not leave the country.
One thing does. Sign-in and contact emails go out through Brevo, a French company whose infrastructure is in the European Union, so your email address and the contents of those messages are processed there. India’s Digital Personal Data Protection Act permits this: it allows personal data to be transferred outside India except to countries the Central Government has notified as restricted, and no such restriction applies to the European Union. If that changes, we will move the data or stop the transfer, and this clause will say so.
Wherever it physically sits, the same rule holds: only members of your groups can read your entries, that is enforced by the database rather than by the app choosing what to show, and deleting your account removes it.
11. Changes to this policy
If this policy changes, the date at the top changes with it, and the current version stays at this address. If a change affects what we collect or who processes it, we will say so in the app before it takes effect.
12. Contact
To delete your account, use the deletion page or the Delete account button in the app, under More. For anything else, including any question about the data described above, use the contact form and a person will answer.