Amanah·Finance Intelligence
Early Beta
Sign in

Operational Legal Notice · Early Beta

Privacy Policy

Effective Date: 29 September 2026·Status: Early Beta·Amanah Finance Intelligence
Operational Notice: This Privacy Policy explains how Amanah Finance Intelligence collects, uses, and safeguards information during its Early Beta. It accurately reflects our current technical architecture, service providers, and Google OAuth usage.

1. About Amanah Finance Intelligence

Amanah Finance Intelligence (“Amanah”, “we”, “us”, or “our”) is an Early Beta investment-intelligence software application operated from the United Arab Emirates (UAE).

Amanah is designed to help investors understand what they own, identify structural changes across portfolio snapshots, and inspect scoped Shariah-aware business-activity assessments. Amanah is a specialized software tool; it does not provide brokerage services, custody, order execution, or investment advisory services, and is not a bank.

2. Information You Provide to Us

Depending on how you interact with the Early Beta platform, we may collect the following categories of information:

  • Account and Authentication Data: Your email address, hashed passwords (where direct credential authentication is used), and user profile identifiers generated upon account creation.
  • Portfolio and Investment Records: Portfolio names, account labels, holding identifiers (symbols, tickers, ISINs where recorded), share quantities, documented cost-basis entries, transaction and cash balances that you input or import.
  • Uploaded Broker Statements & Spreadsheets: Files you explicitly upload to the platform for ingestion, including Interactive Brokers (IBKR) Activity Statements in CSV format and Amanah holdings CSV spreadsheets.
  • Research and Thesis Entries: Notes, investment theses, tags, and review markers that you record within the Security Workspace.
  • Feedback and Communications: Information you provide when submitting bug reports, feature suggestions, or feedback through the in-app feedback dialog or direct email.

3. Google Sign-In and Google User Data Disclosures

Amanah allows users to sign in using Google OAuth. If you choose to authenticate with Google, we access only the minimal, standard identity scopes requested by Supabase Auth:

  • Basic profile information (your name and profile avatar URL)
  • Your primary Google account email address
  • Your unique Google account identifier (OpenID subject token)

Strict Scope and Data Use Boundaries:

  • Amanah does NOT request, read, access, or store your Gmail messages, Google Drive files, Google Contacts, Google Calendar entries, Google Sheets, or any other Google service data.
  • Google account information is used solely to verify your identity, authenticate your session, and create/maintain your Amanah account.
  • We do NOT use Google account data for advertising, cross-site tracking, profiling, or lead generation.
  • We do NOT sell or transfer Google user data to data brokers, advertising networks, or third parties.

4. Technical Information, Session Cookies & Analytics

When you use Amanah, our infrastructure automatically processes technical information strictly necessary for secure operation:

  • Authentication Cookies & PKCE Tokens: We use strictly necessary first-party cookies and session storage (via Supabase Auth) to manage secure user authentication, PKCE token verification, and active session refresh. The application cannot function securely without these session cookies.
  • Infrastructure Security Logs: Our cloud hosting providers record standard HTTP request logs (including IP addresses, browser user-agents, request timestamps, and response status codes) to detect denial-of-service attempts, enforce rate limits, and maintain system integrity.
  • Privacy-Preserving Web Analytics: We utilize Vercel Web Analytics to monitor page load performance and aggregate page views. Vercel Web Analytics does not use persistent tracking cookies, does not follow users across third-party websites, and does not build individual user profiles.

Amanah does not deploy third-party advertising cookies, cross-site trackers, or social media tracking pixels.

5. How We Use Your Information

We process your data strictly for the following operational purposes:

  • Authenticating your account and verifying authorized access.
  • Displaying, storing, and organizing your portfolio holdings and broker provenance.
  • Executing deterministic calculations, such as portfolio asset concentration, sector exposures, and confirmed state changes between imported snapshots.
  • Presenting recorded business-activity Shariah assessments where such research context exists.
  • Enforcing database Row-Level Security (RLS) to ensure your portfolio data is strictly isolated from other users.
  • Responding to bug reports, diagnosing beta software issues, and communicating product updates.

6. Subprocessors and Cloud Infrastructure

We rely on reputable infrastructure providers to deliver the Early Beta service. These providers are bound by strict contractual data protection obligations:

  • Supabase Inc.: Database hosting (PostgreSQL), authentication services, and row-level tenant isolation.
  • Vercel Inc.: Application hosting, serverless function execution, and privacy-preserving web analytics.
  • Google LLC: Identity provider for optional Google OAuth authentication.

We do not share your portfolio records, broker statements, or identity information with any other external vendors, marketing agencies, or data aggregators.

7. No Sale or Commercialization of Data

Amanah does not sell, rent, monetize, or trade your personal data, portfolio holdings, or imported financial records to data brokers, advertisers, hedge funds, or any commercial third parties. Your data is used solely to provide and improve the Amanah platform for you.

8. Financial Data Sensitivity & Security Measures

We recognize that investment portfolio records and broker statements constitute sensitive financial information. To protect this data, we implement:

  • Database Row-Level Security (RLS): Every database query is constrained by tenant isolation policies enforced at the PostgreSQL engine level. Users cannot view or query another user’s data.
  • Encryption in Transit: All traffic between your browser, our application servers, and database systems is encrypted in transit using HTTPS/TLS as provided by our infrastructure providers.
  • Scoped Processing: Uploaded CSV statements are parsed to extract holdings and transactions, and raw unprocessed files are not made publicly accessible.
Security Disclaimer: While we maintain rigorous administrative, technical, and logical safeguards, no electronic transmission or cloud storage environment can be guaranteed to be 100% secure. Amanah operates as an Early Beta software service and does not claim specialized banking or institutional regulatory certifications.

9. Data Retention

We retain your account details and portfolio records for as long as your beta account remains active, and as operationally required to provide the service, diagnose reported software defects, or comply with applicable legal obligations.

If you request account deletion or close your account, your personal identifiers and associated portfolio records will be removed or anonymized in accordance with our operational maintenance cycles.

10. Your Rights & Choices

In accordance with generally accepted personal data protection principles (including the core principles of UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection / PDPL), you have the right to:

  • Access: Request confirmation of the personal data we hold about you.
  • Correction: Request correction of inaccurate account or profile information.
  • Deletion: Request deletion of your beta account and associated portfolio records.
  • Export: Request export or removal of the holdings data you have manually entered or imported.

To exercise any of these rights, contact us through the in-app feedback dialog or via our designated contact channel.

11. Cross-Border Data Processing

Amanah is operated from the United Arab Emirates. However, our primary cloud infrastructure providers (Vercel, Supabase, and Google) maintain data centers globally. By accessing or using the platform, you acknowledge that your information may be transferred to, processed, and stored on servers located outside your country of residence, where data protection standards may differ.

12. Children’s Privacy

Amanah Finance Intelligence is strictly an investment analysis application intended solely for adults who have reached the age of majority (18 years of age or older in most jurisdictions). We do not knowingly solicit or collect information from children or minors. If we learn that personal data of a minor has been collected, we will take prompt steps to delete it.

13. Changes to This Privacy Policy

As Amanah develops from Early Beta toward future releases, we may update this Privacy Policy to reflect technical, operational, or legal changes. Material updates will be posted on this page with a revised “Effective Date”. We encourage you to review this policy periodically.

14. Contacting Us

If you have questions, feedback, or privacy requests regarding this Privacy Policy or our handling of your data during the Early Beta, please reach out:

  • In-App: Use the “Feedback” dialog located in the top navigation bar of your dashboard.
  • Email: bassamkh17@gmail.com

For operational beta questions or limitations, please review our Learn about beta limitations.