Sulha — Privacy Policy

Last updated 21 October 2026

Who we are

Sulha is published by Webcastle Media Private Limited ("we", "us"). You can reach us about anything in this policy at privacy@wizeb.com.

What the app stores, and where

Everything you enter in Sulha — amounts, dates, notes, the names of people you record money with, due dates and reminders — is written to a private database inside the app's own storage area on your device. That area is not readable by other apps.

We do not operate a server for this app. There is nothing to sign up for, no profile, and no copy of your book held by us. Your records exist on your device, plus wherever you choose to back them up.

Backup, and what it means

Backup is off until you turn it on. When you do, you choose where it goes:

• Your iCloud Drive, inside the app's own iCloud container under your Apple Account.
• Your Google Drive, inside the hidden application data folder that only Sulha can see under your Google Account.
• A file you export yourself and keep wherever you like.

In every case the destination belongs to you, not to us. We have no access to your iCloud or Google account and no ability to read what is stored there.

Before the backup file leaves your phone it is encrypted with AES-256-GCM using a key generated on the device and held in the device keychain or keystore. When you enable backup you are shown a twelve-word recovery phrase and asked to confirm you have saved it. That phrase is the only way to decrypt a backup on a different device. We do not have it, cannot recover it, and cannot read your backup without it. If you lose the phrase and lose the device, the backup cannot be opened by anyone, including us.

Sulha keeps one current backup rather than a history of old ones, so each successful backup replaces the previous file.

Google Drive access

If you choose Google Drive, Sulha asks you to sign in to Google and requests a single, narrow permission: access to its own application data folder in your Drive. This permission cannot read, list or modify any other file in your Drive. Sulha uses it only to write and read its own backup file. You can revoke it at any time in your Google Account settings, and delete the file yourself from Drive's "Manage apps" screen.

Contacts

When you record money with someone, you can type a name yourself or let Sulha fill one in from your address book. Sulha only asks for contacts permission at the moment you use that feature, never at launch, and the app works normally if you refuse.

If you allow it, only the contacts you actually select are copied into your Sulha book. Your address book is not uploaded, not indexed, and not sent anywhere.

Notifications

Reminders about money falling due are scheduled locally by your device's own operating system. There is no push server involved, and no reminder passes through us.

Analytics, advertising and tracking

Sulha contains no advertising, no advertising identifier, no third-party analytics and no tracking of any kind. We do not build a profile of you, we do not share anything with data brokers, and there is nothing about your finances for us to sell, because we never receive it.

This website

The app and this website are separate, and this section is only about the website. Nothing described here runs inside Sulha, and nothing here can reach your records: they are on your phone and in your own cloud storage, which this website has no access to.

Our marketing pages — this one, the support page and the home page — load Google Tag Manager, which in turn loads Google Analytics and Microsoft Clarity. Between them they record the usual things a website records: the pages you open, roughly where in the world you are, your browser and device type, where you arrived from, and how you move and scroll on the page. Clarity also records a replay of your visit to these pages. None of it is linked to a name, and we do not try to identify you from it. We use it to see which parts of the page people read and where they give up.

You can stop all of it. Browser do-not-track and tracking-protection settings, an ad or script blocker, or private browsing will each prevent these scripts from running, and the pages work normally without them. Google and Microsoft publish their own opt-outs at tools.google.com/dlpage/gaoptout and clarity.microsoft.com/terms.

Crash reports

If a future version of the app reports a crash, the report is limited to technical details — the model of device, the operating system version and where in the code the failure happened. Names, amounts, notes, phone numbers and email addresses are stripped before anything is sent.

Children

Sulha is intended for adults managing their own money and is not directed at children. We do not knowingly collect information from children, and since we collect nothing from anyone, there is nothing held about a child to delete.

Your data, and deleting it

Because your records are on your own device and in your own cloud storage, you control all of it directly:

• Export your book at any time as a PDF, spreadsheet or CSV file from More › Export.
• Delete everything by deleting the app from your device.
• Delete a backup by removing the file from your iCloud Drive or from Google Drive's "Manage apps" screen, or by deleting the file you exported.

There is no request to make to us, and no waiting period, because we hold nothing to release or erase. If you would like confirmation of that in writing, ask us and we will confirm it.

Changes to this policy

If the app ever begins to collect something, this page will be updated before that version ships, and the change will be described in the app's release notes rather than left here to be discovered. The date at the top always reflects the current version.