Security & privacy
Your cases are yours. Here is exactly how we protect them.
How we protect your data
Short answer: your data is encrypted, readable only by you and your chamber, never sold, and deletable at any time.
Encrypted in transit and at rest
All traffic uses TLS (HTTPS). The database and file storage are encrypted at rest by our hosting provider. Login tokens on your phone are kept in the device’s secure storage.
Only you — and your chamber — can read your cases
Every table is protected by row-level security in the database: a lawyer can read only their own rows, or their chamber’s shared rows. API keys for AI and messaging stay on our servers, never in the app.
No browsing by staff
Our team does not read case content. If you ask support to investigate a specific problem, we ask for your permission first and access only what is needed. Access is logged.
Voice recordings deleted after 30 days
The mic only listens when you press it. Recordings are private, used only to create your draft, and deleted automatically after 30 days by default (you can change this). AI providers process them under API terms that exclude model training.
Fingerprint app lock
Lock Munshi with your fingerprint or device PIN so nobody else can open your diary on your phone.
Hide case names in notifications
For confidential matters, show only the time and court on your lock screen.
Export anytime
Download all your data as PDF or Excel — including after your plan ends. Your data is never held hostage.
Delete your account
Delete in the app (More → Privacy & security) or request deletion on the web without reinstalling. Completed within 30 days.
Daily backups
Your diary is backed up daily and restored when you sign in on a new phone.
Audit log for chambers
In chambers, see who added or changed what, and when. Clerks cannot delete records.
Data we collect
This table matches what we declare in Google Play’s Data Safety section and Apple’s privacy label. We do not sell personal data and do not use it for advertising. Full details are in the privacy policy.
| Data type | Examples | Purpose | Shared with | Optional |
|---|---|---|---|---|
| Personal info | Name, phone number, email, title, bar licence (optional), city, courts | Account, app functionality, communication | Processors only | No |
| Audio | Voice recordings you make in the app | App functionality (transcription) | Processors only (speech-to-text) | No |
| App content | Cases, hearings, clients, notes, outcomes, fees, transcripts | App functionality | Processors only (AI structuring) | No |
| Files and docs | Scanned or uploaded documents | App functionality | Processors only (storage) | Yes |
| Financial info | Purchase history and subscription status (no full card numbers) | Billing | Payment providers | No |
| App activity | Feature usage events | Analytics, improving the product | Processors only | No |
| App info and performance | Crash logs, diagnostics | Stability | Processors only | No |
| Device or other IDs | Push notification token | Notifications | Processors only | No |
All data is encrypted in transit. You can request deletion of your data at any time.
Sub-processors
These companies process data on our behalf, only to provide Munshi. We will update this list before adding a new sub-processor.
Cloud hosting and database
Storing your account, diary, documents and recordings, and running our servers
Location: Cloud data centre outside Pakistan
Third-party AI speech services
Turning your voice notes into text
Location: Outside Pakistan
Third-party AI language services
Structuring transcripts into case fields, writing summaries and answering Ask Munshi
Location: Outside Pakistan
Messaging services
The WhatsApp evening brief and sign-in codes
Location: Global
App platform services
Sign-in, push notifications, app builds and updates
Location: Global
Website delivery and security
Serving the website, blocking abuse and spam, privacy-friendly page statistics
Location: Global
Diagnostics and analytics
Crash reports and feature-usage statistics, without case content
Location: Outside Pakistan
Payment providers
Taking payments through app stores and licensed payment partners
Location: Pakistan and global
Where your data is stored
Your diary is stored in our secure cloud database in West EU (Ireland), with a copy on your phone for offline use. The website and web app are served through a global content delivery network.
Report a vulnerability
Found a security issue? Email [email protected]. Read our responsible disclosure policy and security.txt.
Questions
Does Munshi sell or share my data for advertising?
No. We never sell personal data and we do not run advertising. Data is shared only with the sub-processors listed on this page, to run the service.
Is my data used to train AI?
No. We use AI providers through APIs whose terms state that submitted data is not used to train their models by default. We do not train our own models on your recordings.
Can my chamber owner read my private cases?
Chamber members see the chamber’s shared cases according to their role. Your own Solo account’s cases are visible only to you.
What happens to my data if I stop paying?
Your account becomes read-only. Nothing is deleted, and you can export everything.
Is Munshi compliant with Pakistani data-protection law?
Pakistan’s Personal Data Protection Bill has not yet been enacted. We follow international good practice — purpose limitation, minimisation, consent, and access, correction and deletion rights — and applicable Pakistani law, including the Prevention of Electronic Crimes Act, 2016.
Last updated: 31 October 2026
Related
Stop chasing your diary. Start speaking it.
14 days free. No card. Set up in under a minute.