Privacy policy
2026-10-08 · Mohasiba · Kabul, Afghanistan
This policy covers Mohasiba, Bill by Mohasiba, Nirkh by Mohasiba, and the Date Converter, Tools and Support websites. Mohasiba operates from Kabul, Afghanistan, and primarily serves businesses in Afghanistan. Contact info@mohasiba.com about privacy.
Information we process
Account details include your name, email, sign-in provider, and phone number when you use phone features. Business records may include customer, supplier, employee or student details, transactions, invoices, photos and documents you choose to enter. We process subscription, payment and refund records. Security systems process connection information, verification attempts and device/session information. Do not send passwords, payment-card numbers or unnecessary identity documents in records or support requests. Support tickets include the subject, messages and attachments you submit. Date Converter and Tools calculations run locally; calculator inputs are not sent to a server by those tools.
Purposes and choices
We use this information to provide accounts, business workspaces, authentication, synchronization, support, payments and abuse prevention. Optional usage analytics and external diagnostic reporting on the main web app are off until you allow them in Privacy choices. Rejecting these options does not prevent using the service. Operational security and scrubbed first-party error reports remain part of maintaining the service. Marketing email requires a separate opt-in; agreeing to Terms does not subscribe you.
Providers and international processing
Google Firebase provides authentication, databases, file storage and cloud functions for Mohasiba and Bill. Nirkh also uses Mohasiba's API infrastructure hosted by Hostinger. Google or Apple process sign-in when selected. Namecheap Private Email delivers account emails; Telerivet and SMS providers support phone verification. HesabPay processes payments when selected. If enabled, Google Analytics processes usage events and Sentry processes scrubbed diagnostic events. AI features send the message, selected context and any submitted image or audio to OpenAI when you use them; optional browser speech recognition may involve the browser vendor. Google Fonts may receive connection information when pages request fonts. Providers may process information outside Afghanistan. Their own terms also apply to their services. Support messages and attachments can be forwarded to the Mohasiba team through its Telegram support bot. Opening a WhatsApp contact link involves WhatsApp. Do not attach private records that support does not need.
Business records and public sharing
The business using Mohasiba decides which records to enter and must have authority to process them, including any required guardian authorization for children's records and authorization for health information. Do not upload unnecessary sensitive information. Shared reports, school portals, published business information and receipt-verification links can disclose the fields included in them to recipients or anyone possessing a public link. Share only what is needed; check the preview and revoke or remove public material where the feature supports it. A link or QR code is not a promise of confidential access.
Storage, retention and security
Mohasiba stores records in cloud services and may retain offline copies in browser IndexedDB, localStorage and service-worker caches. Bill drafts and demo records, and Nirkh settings, may remain on the device. Cloud deletion does not erase exports, printed receipts or copies on another device. We use access controls and transport encryption; this is not end-to-end encryption or a guarantee against every incident. We retain business records while needed to provide the service and handle requests. Payment, fraud, legal and dispute records may need separate retention. We do not promise a fixed deletion or backup-expiry deadline that our systems cannot verify.
Requests and contact
Use Data requests to ask for access, correction, export or deletion, or email info@mohasiba.com from your account email. We verify identity and business ownership before disclosing or deleting records. Staff cannot authorize deletion of an owner's business. Requests may need clarification and legally required records may be retained with an explanation. A request is not confirmation of completed deletion. For records entered by a shop, school or other business, contact that business first; we can help identify the appropriate contact. Contact us promptly about accidental exposure or children's data collected without authority.
Updates
The date identifies this policy version. Material changes will be explained through the service or account communications. Your optional tracking choices can be changed at any time; a new purpose needs a new choice.