How we keep your data safe

Everything between your device and Firdam travels over HTTPS (TLS encryption), and browsers are told to always use the secure connection. Your data is stored with our database provider, Supabase, which encrypts stored data (AES-256) and keeps backups.

The database itself checks every request: you can only read and change your own information, and the shared parts of a household you’ve joined. This is enforced by the database (“row-level security”), not just by the app’s screens, so it holds even if someone tries to call our servers directly.

Every change we make to Firdam is automatically tested to confirm that one family can’t see another family’s pantry, budget, plans or trackers.

Turn it on in Settings → Account. After your password, you’ll enter a 6-digit code from an authenticator app on your phone, so a stolen password alone isn’t enough. When it’s on, the database refuses to share any of your data with a session that hasn’t entered the code.

The zakat calculator works entirely in your browser: the gold, silver, cash and savings amounts you enter are saved only on your device and never sent to Firdam. Only a zakat or sadaqah payment you choose to record in your budget is saved to your account.

The app runs on Cloudflare’s global network, which absorbs traffic floods (DDoS), and our login provider limits repeated attempts. Pages send strict browser security rules that block other sites from framing Firdam and stop injected scripts from talking to unknown servers.

Subscriptions are handled by Stripe, a certified payment processor. Your card details go straight to Stripe — they never touch Firdam’s servers.

When you use an AI feature, we send only what that feature needs, and the AI provider doesn’t use it to train its models. Companion chat history is kept on your device. Receipt photos aren’t stored. Read more in our Privacy Policy.

• We don’t sell your data, show ads or use tracking cookies.
• Download everything any time: Settings → Account → Export my data.
• Delete your account and data any time: Settings → Account → Delete my account.

• Use a strong password you don’t use anywhere else (a password manager helps).
• Turn on two-step verification, especially if you track savings or zakat.
• Only invite people you trust into your shared household.
• Sign out on shared or public computers.
• Firdam will never ask for your password by email or message.

If you think you’ve found a security issue, please email privacy@firdam.com with the details. We’ll reply quickly and fix it. Please don’t access other people’s data or disrupt the service while testing.