Privacy Policy — Girsh

Girsh is a personal subscription tracker for Android and iOS, published by Mali Fund. This policy explains, plainly, what the app does and does not do with your information.

The short version

Girsh keeps your subscriptions on your phone. The app works offline and never waits on a server to show you anything.

Using it requires an account, and a copy of your data is backed up to that account so you can restore it after reinstalling or use it on a second device. That copy is readable only by you: it is protected by database rules that check your account on every single request, not by the app being careful.

There is no advertising, no analytics, and no tracking of any kind.

Your account

To use the app you create an account with an email address and a password. Authentication is handled by Supabase, which stores:

• your email address
• a cryptographic hash of your password — the password itself is never stored, by us or by them
• the dates your account was created and last signed in

Your email is used to sign you in and to send a password-reset link if you ask for one. It is never used for marketing, never sold, and never shared.

What the app stores on your phone

Everything you type is written to your device’s private app storage:

• the name of each subscription and the website it is matched to
• its price, billing period and first billing date
• the cards you add, as a name you choose (for example “Al Rajhi”), a type (Credit, Debit or Prepaid) and the last four digits — the app has no field for a full card number, and never asks for one, a CVV, an expiry date, a PIN or any other payment credential
• optionally, the username or email address a subscription is signed up with, purely so you can remember which account it is on — it is never used to sign you in anywhere
• which billing dates you have marked as paid
• your settings: main currency, sort order, appearance, and reminder preferences
• the most recent exchange rates the app downloaded

This local copy is removed when you delete the app, or immediately when you use Account → Data → Delete all data — which also erases the backed-up copy in your account, not just the one on this phone. What is left there is an empty marker carrying no name, price, note or other detail: it exists only so the deletion reaches your other devices, instead of the subscription reappearing the next time one of them syncs.

What is backed up to your account

The same list above, apart from the cached exchange rates, is copied to your account so it can be restored. Concretely, that includes the last four digits of any card you added — never a full card number, because the app has nowhere to put one.

Two things protect it:

• Row Level Security. Every read and write is checked against your account by the database itself. A request carrying anyone else’s identity is rejected by PostgreSQL, not by the app deciding to be careful.
• Encryption in transit and at rest, provided by Supabase.

Deleting your account deletes this copy.

If you would rather nothing left the device at all, this version of the app cannot do that — an account is required.

What else the app sends over the internet

Two things, neither of which says anything about you.

Company logos. When a subscription is shown for the first time, the app requests that company’s icon from a public icon service using the company’s website address:

• www.google.com/s2/favicons

Those requests contain the company domain (for example netflix.com) and, as with any web request, your IP address, which that provider handles under its own privacy policy. They do not contain your prices, dates, notes, account, device identifiers, or anything else about you. Logos are cached on the device, so each one is normally fetched once. If you are offline, the app draws a coloured initial instead and works exactly as usual.

Exchange rates. So that amounts entered in another currency can be converted, the app downloads a public table of exchange rates from open.er-api.com (falling back to cdn.jsdelivr.net). The request asks for rates against the US dollar and contains nothing else — not your prices, not your currency choice, not your card details. Rates are cached on the device and refreshed at most twice a day. Offline, the app keeps using the last rates it downloaded, and if it has never downloaded any it simply says conversion is unavailable rather than guessing.

Notifications

Renewal reminders are local notifications scheduled on the device itself. Nothing is sent through a push server. Your phone may ask for notification permission; declining it disables reminders and nothing else.

What we do not do

• No advertising, ad identifiers, or ad SDKs
• No analytics, crash reporting or usage tracking
• No selling or sharing of personal data with anyone
• No access to your contacts, location, camera, microphone, files or SMS
• No reading of your bank or card accounts — the app has no connection to any bank

Children

Girsh is a general-purpose finance tool and is not directed at children under 13.

Deleting your data

• Your subscriptions and cards: Account → Data → Delete all data. This removes them from this phone and erases their contents from the backup in your account, leaving only an empty marker so the deletion reaches your other devices. Uninstalling the app removes only the copy on the phone.
• The account itself, your email address and everything left in it: request it on the account deletion page. Requests are completed within 30 days.

Changes

If this policy changes, the updated version is published at this same URL — https://malifund.com/girsh/privacy — and the date at the top changes. The URL never moves.

Contact

Questions about this policy: support@malifund.com