Privacy starts with clarity.

App policy effective date: October 8, 2026. The published app contact remains available.

Who controls your data

Pizat is provided by Omar Abdon, based in Kuwait. Privacy questions can be sent to [email protected].

What Pizat does

Pizat is a financial-memory assistant. It helps you capture, review, search, and summarize personal transaction records. It does not connect directly to banks, move money, provide credit, or provide investment advice.

Information processed on your device

Pizat can process transaction amount, currency, merchant, category, date and time, notes, payment labels, capture metadata, and the source text you choose to import. It also stores preferences such as home currency, language, onboarding state, and merchant-category memory. The main ledger uses an encrypted local database. Pending platform captures can also be held in bounded, app-private queues outside the ledger's encryption. Items are removed as capture processing acknowledges them or local data is reset; older items can also be removed when a queue reaches its capacity. Pending captures have no fixed time-based expiry.

Capture permissions

On Android, notification capture is optional. After you enable notification access, Pizat inspects notification title, text, and subtext locally and retains only signals that appear payment-related. On iPhone, transaction fields enter Pizat only through Shortcuts or App Intents that you configure and invoke. You can use manual and clipboard capture without enabling either platform capture method.

On-device intelligence

Deterministic parsing and bundled on-device models can help interpret capture text. Pizat does not send capture text to a cloud AI service in this Beta.

Currency conversion

When a transaction needs an estimated exchange rate, Pizat requests a rate from ExchangeRate-API using the three-letter source currency code. The request does not include the transaction amount, merchant, raw capture text, target currency, or ledger contents. The rate provider receives ordinary network information such as your IP address.

Sharing a merchant summary

You can preview a merchant summary and choose to share it through your device's sharing options. The summary contains the merchant name, reporting period, visit count, spending total and average, and counts of visits included in or excluded from the totals because of currency conversion. It excludes individual transactions, raw capture text, notes and internal identifiers.

After you confirm, Pizat passes the summary as readable text to the operating system. The recipient app you choose controls its further handling. Deleting data in Pizat does not delete copies you have shared.

Optional private-cloud backup

If you create a backup, Pizat compresses and encrypts its contents on your device with AES-256-GCM using a key derived from your passphrase. It stores the backup in your private CloudKit database on iPhone or Google Drive app-data storage on Android. The app decrypts the contents on your device when you provide the correct passphrase. Pizat has no passphrase-recovery feature.

The backup also contains metadata outside this passphrase encryption: backup identifiers and dates, app, database-schema and backup-format versions, platform, encrypted-file size and checksum, and encryption parameters. This metadata is accessible to the storage provider. Apple or Google processes account authorization, storage requests and ordinary network information under its own terms.

On Android, after you grant Google Drive access, opening Settings can check that access and retrieve the latest encrypted backup to read its metadata without showing another consent prompt. These requests can occur even when you are not creating a backup. Pizat requests access to its Drive app-data storage; it does not request Google profile or email scopes.

Advertising and Pizat accounts

Pizat includes no advertising features or Pizat-operated user account in this Beta. Optional cloud backup uses your Apple or Google account as described above.

Retention and deletion

Local transaction records remain until you delete them or reset local data. A deleted transaction has a short Undo window and is then permanently removed with its linked raw-alert audit rows. Settings includes a guarded action to delete all local Pizat data and restart onboarding. Cloud backups are separate: use Pizat's guarded cloud deletion action to remove them. Resetting local data does not revoke operating-system notification access, Google authorization, or remove your iPhone Shortcuts.

Security and your choices

Pizat uses an encrypted local ledger and encrypts backup contents before upload; backup metadata remains outside the passphrase encryption. Keep your device protected and store your backup passphrase safely; no one can restore the backup without it. You choose whether to enable platform capture and whether to create or delete a cloud backup.

Children

The Pizat Beta is intended for adults aged 18 and over in Kuwait who use it for personal spending awareness. It is not directed to children and does not create a financial-services relationship.

Changes

This policy may be updated as Pizat changes. The effective date above will identify the current version. Material changes will be described through the app or this page where appropriate.

Contact

For privacy questions or requests, email [email protected].

Website privacy

Website operator

Prosperity Front is a brand operated by Omar Abdon, based in Kuwait. It is not a registered company. Omar Abdon is responsible for this website and the enquiries received through it.

Hosting and website requests

Cloudflare hosts this static website and processes the requests needed to deliver and secure it, including network information such as your IP address. We do not add analytics scripts, advertising pixels, tracking cookies, sign-up forms or user accounts to this website.

Email enquiries

Messages sent to our domain email addresses pass through Cloudflare Email Routing to the operator’s mailbox, hosted by Google. These providers process message content and delivery information to route, deliver and protect email. The mailbox address is not published. Do not send bank credentials, private transaction records or backup passphrases.

Correspondence and deletion requests

We use correspondence to respond to your enquiry and manage any resulting work. We retain correspondence while needed for those purposes and any applicable obligations. You can ask about or request deletion of correspondence by email. We will review the request, explain any information we need to retain, and take practical steps for information under our control. Provider records and copies held by other recipients are subject to their own handling; we do not promise immediate deletion from every provider system.

Website privacy contact: [email protected].