Effective 23 July 2026 · Last updated 23 July 2026
Your family's life belongs to your family. Wisal was built so that a household can keep its plans, health notes, money and memories in one place without handing that life to anyone else. This page explains exactly what we store, where it goes, and how you erase it.
Wisal is an independent app made by Hamza, based in Bangladesh. In this policy, "Wisal", "we" and "us" mean the maker of the app. "You" means the person using it.
If anything here is unclear, or you want your data removed, write to hamzamuhammad.trd@gmail.com. We answer every message.
Wisal only holds what you type into it. There is no hidden collection, and nothing is gathered in the background.
| What | Examples | Why |
|---|---|---|
| Account | Email address, sign-in credentials | To sign you in and sync your household |
| Family members | Names, relationships, birthdays, photos | So the app knows who your household is |
| Planning | Tasks, projects, events, responsibilities | The core of the app |
| Health | Appointments, records, medications you enter | To keep a family health history in one place |
| Money | Amounts, categories, budgets, debts, savings you enter | To track household spending |
| Daily life | Meals, recipes, shopping lists, workouts, journal entries | The modules you choose to use |
| Memories | Photos, stories, milestones you add | To keep family memories together |
| Messages | Family chat messages, voice notes, files | To let your household talk privately |
| Secure Vault | Notes you lock behind a PIN | For things only you should see |
Wisal does not collect: your location, your contacts, your other apps, your browsing, your device identifiers for advertising, or anything for profiling. There is no advertising SDK in this app.
By default everything stays in your phone or browser's local storage. If you never sign in, your data never leaves the device.
When you sign in, an encrypted copy syncs to Supabase, our database and authentication provider. Row-Level Security means each account can only ever read the household it owns or was invited into with a code. Nobody else — including other Wisal users — can reach your household's rows.
Data is encrypted in transit (HTTPS/TLS) and encrypted at rest by the provider.
Wisal includes an AI assistant. When you send it a message, we send that message together with a summary of your family data — things like how many open tasks you have, upcoming events, this month's spending, your shopping list — to Google's Gemini API so it can answer usefully.
This happens only when you send a message to the assistant. If you never open it, nothing is ever sent.
What is never sent: your Secure Vault, the PIN-protected private space, your passwords, and your family chat messages.
Google processes this as a service provider. See Google's Privacy Policy. Please avoid pasting information into the assistant that you would not want processed by a third party.
We do not sell, rent or trade your data. It is shared only with the services that make the app work:
We may disclose data if we are legally required to, but we have no interest in doing so and would tell you where the law allows.
The Secure Vault and the private Relationship space are locked with a PIN that only you know. We cannot see inside them, cannot recover them, and cannot reset your PIN. If you forget it, that content is gone. Please keep a backup of anything irreplaceable.
You are always in control. From inside the app:
You can also email hamzamuhammad.trd@gmail.com and we will delete your account and all associated data within 30 days. Backups you exported yourself are files in your own hands — we cannot reach those.
Wherever you live, you can ask us to:
Just write to us. There is no form to fill and no charge.
Wisal is designed for adults managing a household and is not directed at children. Parents and guardians may create profiles for their children within their own household, and are responsible for that information. We do not knowingly collect data directly from children. If you believe a child has created their own account, contact us and we will remove it.
We keep your data for as long as your account exists. Delete your account and it is removed from our systems, with backups cycling out within 30 days.
We use HTTPS/TLS everywhere, encryption at rest, Row-Level Security so households cannot see each other, and PIN protection for your most private spaces. No system is perfect — if we ever discover a breach affecting your data, we will tell you promptly and plainly.
If we change how data is handled, we will update this page and the date at the top. For anything significant, we will tell you inside the app.
Questions, worries, or a deletion request:
hamzamuhammad.trd@gmail.com