Privacy policy

Privacy policy

Effective 25 October 2026

Hadi is an AI assistant that people use on WhatsApp. This policy explains what we do with your information. We wrote it to be read, not skimmed past.

Who we are

Hadi is operated by Upshift Technologies (“Upshift Technologies”, “we”), Islamabad, Pakistan. You can reach us at fawad.shah@upshifttechnologies.com.

Who can use Hadi

Hadi is available by invitation. It only answers WhatsApp numbers that we have added. Messages from numbers we have not added are ignored and not stored as conversations. Hadi is not intended for anyone under 18.

What we collect and why

Information	Examples	Why
Your contact details	Your name, email address and WhatsApp number	To set up your access and recognise you when you message Hadi
Your messages	Text, voice notes (which we turn into text), photos and PDFs you send, and Hadi’s replies	To understand and answer your requests
Records you ask Hadi to keep	Accounts, expenses, income, budgets, tasks, reminders, notes, zakat figures, invoices, generated documents	To provide the service: so Hadi can answer questions about your own records
Usage and technical data	When you used Hadi, which features, how much AI processing it needed (and its cost), error logs	To run the service, keep it secure, and enforce fair-use limits

We do not collect your contacts, location, or anything from your phone beyond what WhatsApp delivers to us with your message.

Who we share it with

We do not sell your information and we do not use it for advertising. To provide Hadi we rely on these providers, who receive only what they need:

Provider	What for	What it receives
Meta Platforms (WhatsApp Business Platform)	Delivering messages between you and Hadi	Your WhatsApp number and the messages, under WhatsApp’s own terms and privacy policy
Anthropic (Claude) and Google (Gemini)	Understanding your message and writing the reply; web search when you ask for current information	Your message, recent conversation, and the parts of your records needed to answer
Microsoft (Azure Speech)	Spoken replies, only if voice replies are switched on for you	The text of the reply
Amazon Web Services	Hosting our servers and database	Stored data, encrypted in transit
Google Drive	Encrypted backups of our database	Encrypted backup files only
Hysab Kytab (companion finance app)	Keeping your records in sync, only if you have an account there	Your accounts and transactions

We may also disclose information if the law requires it, or to protect people from harm or abuse of the service.

How we protect it

• Each person’s records are stored separately, and the database itself enforces that one person cannot read another’s.
• Connections to our servers use HTTPS, and database backups are encrypted.
• Every change Hadi makes to your records needs your approval first.
• Administrators can access the system for maintenance, security and support. We do not read your conversations as a matter of course; we may look at them if you ask us for help, or to investigate abuse or a security problem.

How long we keep it

We keep your messages and records while you use Hadi. When you ask us to delete your data, we remove it from the live system (see how to delete your data). Daily backups are kept for 30 days; a monthly backup is kept longer. Backups are encrypted and used only to recover from failures.

Where it is processed

Our servers and the providers above may be located outside Pakistan, so your information may be transferred to and processed in other countries.

Your choices and rights

• See or correct the information we hold about you — ask us, or ask Hadi directly about your records.
• Delete your data at any time.
• Stop using Hadi at any time. Tell us and we will stop messaging you and remove your access.

Write to fawad.shah@upshifttechnologies.com. We may need to confirm it is you before acting on a request.

Changes to this policy

If we change this policy in a way that matters, we will update the date above and tell people who use Hadi.