1 Overview

Xeer is your digital financial twin app; helping individuals organize their personal finances, build financial security and well-being all within Sharia Compliance standards.

We describe Xeer’s vision as being your “Digital Financial Twin”; creating a place where you can mirror your real world financial estates without having direct access to your sensitive data sources. This way the data represents the actual financial estate with no negative effects on the financial components of the estate that might include bank account, credit and/or debit cards, real estate property, or any other financial assets. Xeer provides support, guidance, and advice based on your expenses, debt, savings and wealth inputs with better informative financial awareness support on your journey building financial security and well-being.

We prioritize the security and privacy of all personal and financial information, adhering to global security FinTech standards and regulations. Protecting your data isn’t just a legal duty, it’s the foundation of our trust with you, and a promise to give you a secure, reliable experience. Xeer is built with robust security measures to protect your data, giving you a peace of mind while managing your finances.

We do not share your personal data with third parties for marketing or advertising purposes, and we do not sell or rent your data. Xeer does not collect behavioral analytics, cross-app tracking data, or advertising identifiers. Any product-improvement insights we rely on come from voluntary inputs you provide directly (such as KYS), not from background tracking.

Xeer’s team take pride in being Sharia Compliant; we implement this throughout all our operational activities by having an Internal and External Sharia Auditing Teams for Xeer products, we align our products with International Islamic Fiqh Academy (IIFA) and Accounting and Auditing Organization for Islamic Financial Institutions (AAOIFI) standards and decisions, even strictly align this within our contracts, investments, and company structure.

2 Products & Services

Our offerings are categorized into the following:

a. Awareness

With literacy and educational awareness focused products, we ease the understanding and relatable complexity of financial constructs, products, and topics not to mention Islamic finance rulings and standards. That includes but not limited to “KYS”, our financial personality assessment, and “Jarida” — our knowledge-packed blog for financial insights and guidance.

b. Aiding Financial Utilities

Smart financial tools that each focus on solving one critical financial issue. Elevating the burdens of going through complicated calculations to have a simple answer guiding you on solid grounds for better financial decision making. That includes but not limited to “Wazin” currency and precious metal converter, Credit Card Debt Payoff Planner to eliminate credit card debt.

c. Digital Financial Twin

This is where Xeer shines the most with a current focus on tracking Net Worth, Wealth, and most Importantly Zakah. It’s designed to further expand on the simple financial utilities making it personalized, actionable, and cohesive. This is currently embodied in Zakah and Wealth tracker that automatically tracks Net Worth and Zakah Status for your specific situation, looking forward into expanding this soon.

3 Privacy & Data Protection

Our Privacy Stance

• Provide the best experience possible without any privacy concession.
• We do not track your personal financial records or behavior in the background. When we need insight to personalize the experience, we rely on information you provide directly and voluntarily — such as KYS — rather than passive tracking.
• We do not track your behavior on other websites or apps, and we do not share your personal data with advertising networks.
• When possible, Xeer will show the reasoning behind why you’re experiencing something differently, in plain terms.

User Data Categories

Because Xeer relies on Apple and Google secure sign-in, we only collect the data those platforms permit us to collect about you, plus what you provide directly in the app. To be transparent about what we collect and how long we keep it, we organize your data into four categories, each with its own retention and deletion behavior:

1. Essential Account Data

Essential Account Data includes your email, phone number, and your trial and subscription history. When you delete your account, this data is retained for up to 1 year from the deletion date, then permanently deleted. We keep it that long for one reason: to prevent repeated abuse of free trial offers, and to support fraud-prevention and legal purposes. After the 1 year passes, a returning user is treated as new. End-to-end encryption (TLS) protects this data between your device and our servers.

2. User Profile Data

User Profile Data is your personal profile and preference settings: gender, birthday, nationality, display language, calendar type, currency and precision settings, notification preferences, security lock type, and similar configuration. This data is permanently deleted when you delete your account (Phase 3 of Account Termination & Data Deletion, below).

3. Financial Data

4. Usage & Analytics Data

Usage & Analytics Data is behavioral and usage information collected as you use Xeer, aggregated and de-identified so it can no longer be linked to you or your device (“Aggregate/De-Identified Information”). It is retained indefinitely in this aggregated form and is not deleted when you delete your account, since it can no longer be linked back to you. We use Aggregate/De-Identified Information for any purpose, including research and marketing, and may share it with third parties in adherence with Privacy Protection Standards.

Data Sharing and Retention

We do not share your personal data or contact details with third parties for their own marketing purposes without your explicit consent, or unless you entered that data directly with that third party yourself. We do not sell or rent your personal data. The Xeer app does not use advertising networks, tracking pixels, cross-app advertising identifiers, or behavioral advertising — see Third-Party Tracking and Online Advertising below for how our off-app marketing works. We retain your data only for as long as necessary for the purposes outlined in this policy or as required by law.

Device Data Access

Xeer accesses push notifications (to deliver alerts), local on-device storage (for your preferences, receipts, notes, and exported reports), and biometric authentication (Face ID / Touch ID, optional, stored securely on your device only). All such data remains on your device and is not linked to your account or transmitted to our servers unless you explicitly choose to share it.

Third-Party Services

Xeer does not use advertising or marketing SDKs and does not track your behavior across other companies' apps or websites. We use the following limited third-party services strictly for app functionality, not advertising:

1. Firebase (Google)

We use Firebase services solely for core app functionality:

• Firebase Authentication — used to verify your identity during sign-in (Apple / Google / email).
• Firebase Cloud Messaging (FCM) — used to deliver push notifications to your device. An anonymous device token is used for delivery only.
• Firebase Crashlytics — used to diagnose crashes and improve app stability. It collects anonymous crash reports and limited device information (model, OS version, app version). It does not collect your name, email, phone number, or any advertising identifier, and crash reports are not linked to your user account.

Firebase Analytics is disabled in this app. We do not send usage events or behavioral analytics to Google.

2. Apple and Google (Platform Services)

Sign in with Apple, Google Sign-In, and subscription payments are processed by Apple and Google under their own privacy policies. Xeer does not receive your Apple ID password or payment instrument details.

Third-Party Tracking and Online Advertising

The services above run inside the app. Separately, Xeer runs marketing campaigns on third-party platforms — outside the app — and this is how your data is handled in that context:

1. Cookies and tracking technologies. Our advertising and analytics providers, such as Facebook pixels and Google marketing tools, may collect information about how you interact with Xeer's ads and marketing pages. These technologies operate outside the Xeer app, under those providers' own policies, which you already accepted with that provider.
2. Partner network and advertising services. We work with a credible network of partners to display interest-based advertising. This involves anonymous information collected over time — aggregate insights, common behavior, and ad interaction — but never your personal data. We use flocking-based anonymous identifiers rather than directly targeting identified users.

Information collected by Google in this context may include:

• Device information (e.g., IP address, browser type, operating system)
• Usage information (e.g., pages viewed, time spent on pages, clicks)
• Location data (if location services are enabled)
• Ad interaction information

For more information on how Google uses your data, please refer to the Google Privacy Policy.

We also strictly eliminate any advertising that does not follow our internal and external Shariah auditing standards issued by the Accounting and Auditing Organization for Islamic Financial Institutions (AAOIFI) and the rulings of Fiqh councils such as the International Islamic Fiqh Academy (IIFA) and Zakat House of Kuwait.

Infrastructure Specifications

Xeer’s infrastructure is built on the Amazon Web Services (AWS), which is used by leading financial companies worldwide. AWS adheres to industry standard security, privacy and compliance controls, including:

• ISO/IEC 27001, 27017 and 27018
• SOC 1/2/3
• PCI DSS
• CSA STAR

We employ a number of security measures to help keep your data safe, including 256-bit encryption to protect it at rest and Transport Layer Security (TLS) to protect it in transit.

We use tokenized authentication with Multi-Factor Authentication (MFA) on all internal systems and incorporate MFA support and mobile device management into our company devices.

4 Terms of Use

User Conduct Rules

• Providing accurate and up-to-date information when setting up your profile
• Refraining from abusive, harassing, or discriminatory behavior towards other users
• Respecting the privacy and data rights of others when interacting with others is applicable
• Promptly reporting any suspected security breaches or unauthorized access to your or others' data within Xeer

Acceptable Uses

• Using the app to securely manage your personal financial accounts, transactions, and data
• Accessing financial planning tools, budgeting features, and spending analysis
• Connecting third-party financial accounts and services to Xeer
• Utilizing the app's predictive analytics and scenario planning capabilities

Prohibited Uses

• Using the app for any illegal activities such as fraud, money laundering, or financing of terrorism
• Attempting to access or manipulate the personal or financial data of other users without permission
• Reselling or redistributing the app's content, features, or functionality
• Violating applicable laws, standards, regulations, or third-party rights through Xeer's use
• Interfering with or disrupting Xeer's servers, networks, or its other infrastructure components

Termination and Freezing

Freezing

We facilitate a freezing period of 30 days. During this period your account data won’t be accessible or be used by Xeer in any marketing Activities.

After the freezing period is over, we will notify you. However, if you decide to freeze and do not log in after the selected freezing period, your account will be permanently terminated after 1 year. On termination, your User Profile Data and Financial Data are wiped; Essential Account Data (email, phone number, and trial/subscription history) is retained for up to 1 year from termination, then permanently deleted — see User Data Categories above.

Account Termination & Data Deletion

You have the right to request your account and data to be deleted from our database. After the termination period, your User Profile Data and Financial Data are permanently wiped. Essential Account Data (email, phone number, and trial/subscription history) is retained for up to 1 year for fraud-prevention and legal purposes — see User Data Categories above for the full breakdown. The process goes through 3 phases:

Forced Termination and Suspension: Xeer's team holds the right to terminate or suspend any user account in case of noticing any prohibited, illegal, or against-user conduct activity.

5 Pricing and Payment

Subscriptions Tiers

Billing & Payments

Payment Processing

Apple or Google securely processes all subscription payments through your AppStore or Google Play account. Xeer does not currently offer any other way to process a paid subscription.

Refunds

We cannot process refunds directly. You must submit all refund requests to Apple or Google, subject to their specific refund policies.

Taxes

Displayed prices include applicable local taxes if any.

Changes to Subscriptions and Pricing

We hold the right to update subscription prices and/or features distribution/limitations over subscriptions. Pricing changes will be mostly related to major releases of features, major economic impact, and/or Payment Processor enforcement. We will notify a paid subscriber at least 30 days before any price changes take effect on their renewal cycle.

Subscription Management/Cancelation

Upgrading & Downgrading

The option to upgrade/downgrade your subscription tier or period is always available. Apple and Google automatically handle mid-cycle upgrades. They will calculate and apply any promotional discounts or prorated billing directly at checkout.

Cancelation

You must cancel directly through your Apple ID Account Settings or Google Play Subscription Center at least 24 hours before your renewal date. Deleting the app does not cancel your subscription. After canceling, your paid subscription access continues until the end of your current billing cycle. Your account will then downgrade to the "Basic Xeer" (Free) tier. You will lose access to paid features, your data will remain intact and accessible when you re-subscribe to the paid plan or download your user data as long as your account wasn't terminated/data deleted.

Freezing

Apple and Google will continue to deduct the subscription amount. As we cannot manage the billing cycle directly, in case you want to Freeze while on a paid plan subscription, you must request to unsubscribe directly from Apple or Google, subject to their specific policies.

Termination & Data Deletion

In case of terminating your account and deleting your data, you must cancel your subscription directly through your Apple ID Account Settings or Google Play Subscription Center at least 24 hours before the renewal date. Since deleting the account or the app does not lead to canceling your subscription, there are two scenarios we need to clarify:

6 Sharia Compliance Policy

Shariah References

Xeer's team is committed to operating in accordance with the principles of Islamic Financial Sharia Standards in adherence with the following references:

• The Holy Quran and Sunnah (Prophet's tradition).
• Rulings of Fiqh councils such as the International Islamic Fiqh Academy (IIFA) and Zakat House of Kuwait.
• Shariah standards issued by the Accounting and Auditing Organization for Islamic Financial Institutions (AAOIFI).

Compliance Mechanisms

Sharia Compliance Board:

Individuals and Entities that are performing Sharia Auditing and Review based on the references shared before. Members of Xeer's Sharia Compliance Review Board are announced on its public channels.

• Internal: A team of Internal Islamic Finance Experts who represents the 1st half of our sharia compliance review body.
• External: A team of External Islamic Finance Experts who represents the 2nd half of our sharia compliance review body.

Phases of which an Auditing goes through:

Transparency Disclosure

• Xeer allows users to view this Shariah policy through its application and website.
• The company may publish periodic partial/summaries/full reports of Shariah compliance issued by the Sharia Compliance Board as needed.
• Xeer does not offer any direct financing, savings, or investment services or products that brings in revenue in-house. Features/Products/Services of Xeer are limited to supporting financial utility tools, such as the Zakat calculator, Currency and Gold Converter Calculator, and others that have undergone a prior Shariah review.
• The financial and indicative information displayed should not be considered as financial advice, consultation, or investment forecasts. It should be treated as supportive, approximation tools only, without being relied upon for making binding financial decisions.
• Any use that violates the principles of Islamic Shariah or falls outside the scope of this policy is the user's responsibility.

7 Changes to This Policy

We may update this privacy policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes and obtain your consent where required.