Privacy Policy — Money Tracker

Money Tracker (“the app”, “we”) is a personal expense and budget tracker. This policy explains what data the app handles and why. We designed the app to keep your financial data on your device by default. We do not sell your data and the app contains no ads.

Summary

• Your transactions, categories, name, and settings are stored locally on your device.
• Signing in (optional) uses your email address to enable encrypted cloud backup.
• Cloud backups are end-to-end encrypted with a passphrase only you know — we cannot read them.
• The optional SMS feature reads bank messages on your device to suggest transactions; message content is not uploaded to us.
• You can delete all local data at any time by logging out, or by uninstalling the app.

Information we handle

1. Financial and profile data you enter

Transactions (amount, category, date, notes), account labels, your display name, and your currency preference. This is stored in a local database on your device. It is only sent off the device if you choose to create an encrypted cloud backup (see §4).

2. Account information (only if you sign in)

Sign-in is optional and only needed for cloud backup/restore. If you sign in with email or Google, we process your email address and an authentication session token. Authentication is handled by our backend provider, Supabase (which also acts as our identity provider for Google Sign-In). We do not receive or store your password in readable form.

3. SMS messages (optional, permission-gated)

If you enable “Sync bank SMS”, the app requests the READ_SMS permission to read transaction-related messages on your device and turn them into expense/income entries.

• SMS parsing happens entirely on-device.
• We do not transmit, upload, or share your SMS messages or their contents with us or any third party.
• The feature is optional; if you don't grant the permission, the rest of the app works normally.

4. Cloud backup data (optional)

If you create a cloud backup, your ledger is encrypted on your device (AES-256-GCM using a key derived from a passphrase you choose) before it is uploaded to encrypted storage (Supabase Storage), scoped to your account. Because encryption happens on your device with your passphrase, we cannot decrypt or read your backup. If you lose your passphrase, the backup cannot be recovered.

5. Device permissions

• Internet — used only for sign-in and cloud backup/restore.
• Biometric / device credential — used by your device's operating system to unlock the app. We never receive or store your biometric data.

How we use information

• To provide the app's core features (tracking, reports, currency display).
• To authenticate you and enable encrypted cloud backup and restore, if you opt in.

We do not use your data for advertising, profiling, or resale.

Sharing and third parties

We do not sell or rent your personal data. Limited data is shared only with service providers that make optional features work:

• Supabase — authentication and encrypted backup storage. See supabase.com/privacy
• Google Sign-In (if you use it) — see policies.google.com/privacy

Encrypted backup contents are opaque to these providers and to us.

Data retention and deletion

• Local data stays on your device until you delete it. Logging out erases all local data on the device; uninstalling the app also removes it.
• Account and backup data: to delete your account and any cloud backup, contact us at the email above and we will remove your stored backup and account record.

Data security

Backups are end-to-end encrypted with a passphrase you control. Network traffic uses HTTPS. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

Children's privacy

Money Tracker is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Effective date” above and, where appropriate, within the app or store listing.

Contact

Questions or data-deletion requests: pijushmanna12344@gmail.com