Privacy policy

This policy covers Moneymalist — Expense Tracker (com.moneymalist), referred to below as “the app”.

1. What we collect

Nothing. We operate no servers that receive your information, and we have no ability to see, retrieve, or restore anything you type into the app.

Everything you enter stays in the app’s private storage on your phone:

• Transactions — amounts, dates, categories, notes, and tags
• Budgets and budget categories
• Accounts and balances
• Your settings and preferences

This lives in a local database that other apps on your device cannot read. It is not transmitted to us. The app contains no advertising libraries, no analytics libraries, and no third-party tracking of any kind, and it creates no account or profile on any server.

2. What the app can and can’t see on your phone

The app has no access to your location, contacts, messages, call history, camera, photos, or files stored elsewhere on your device.

If you use voice entry, your speech is handled by your device’s own speech recognition to fill in the form. If you turn on the optional app lock, the app asks Android whether the fingerprint or face belongs to you and receives only a yes or no — your biometric data stays in your phone’s secure hardware and is never available to us.

Files you export (CSV or PDF) are written to the app’s own storage and are shared only if you choose to share them.

3. Google Sign-In and Google Drive backup (optional)

Backing up to Google Drive is optional and off by default. It only happens if you sign in with Google and switch it on. If you do:

• Google Sign-In tells the app which Drive account to use. Your name, email address, and profile picture come back from Google, stay on your device, and are used only to show you which account is connected.
• The app requests the drive.file scope — the narrowest Drive permission Google offers. It grants access only to files the app itself created. The app cannot see, read, or change anything else in your Drive.
• Backups are saved to your own Google Drive, under your own account. You can open or delete them yourself at any time.
• The files travel directly between your device and Google. We never receive, intercept, or store a copy.
• Your Google account information is never shared with anyone.

You can revoke the app’s access at any time at myaccount.google.com/permissions.

4. Android’s own backups

Android can automatically copy app data to your Google account. The app deliberately excludes your financial database from that, so your transaction history is never uploaded without you asking for it. Cloud backup happens only through the optional Drive feature in section 3.

5. Purchases

Premium is available as a subscription or a one-time purchase. All payments go through Google Play Billing. We never see or handle your card details, billing address, or any payment information. The app stores only a simple flag on your device recording whether Premium is unlocked. Subscriptions are managed in your Google Play account, and refunds follow Google Play’s refund policy.

6. Third parties

• Expo and React Native — the frameworks the app is built with. They collect no data in this app.
• Google Play Services — needed for Google Sign-In, Drive backup, and purchases. Google may collect standard information such as crash reports and install data according to your device settings and Google’s own privacy policy.
• Google Drive API — used only for the optional backup described above.

There are no advertising networks, marketing trackers, or third-party analytics services in the app.

7. Deleting your data

Because it’s on your device, you control all of it.

• Delete individual transactions, budgets, or accounts inside the app
• Remove everything at once: Android Settings → Apps → Moneymalist → Storage → Clear data
• Or uninstall the app, which removes all local data
• For Drive backups: open Google Drive, find the backup files, and delete them, then revoke the app’s Drive access

We hold no copy of your data, so there is nothing on our side to delete. If you have questions about deletion, email us and we will respond within 30 days.

8. Children

The app is not directed at children under 13. It collects no personal information from anyone, including children, and transmits nothing to us.

9. Security

• Your data sits in the app’s private storage area, isolated from other apps by Android itself.
• Sensitive values are held in encrypted device storage.
• You can optionally require a fingerprint or face unlock before the app will open.
• If you use Drive backup, those files are governed by Google’s security practices and your Google account settings.

No method of storage is completely secure. But because your data never travels to a server we operate, the risk is limited to your own device and your own Google account.

10. Contact

Questions about this policy or your data: moneymalist.app@gmail.com

11. Features we might add later

Everything above describes how the app works today. Some things people ask us for — sharing a budget with a partner, an assistant that answers questions about your spending — would need more than a single device holding everything.

If we build anything like that, it will be something you choose to turn on, never something that changes underneath you. We’ll update this policy first, explain in plain language what the feature involves and what leaves your device, and the rest of the app will keep working exactly as it does now if you’d rather not use it.

12. Changes to this policy

We may update this policy from time to time. Changes appear on this page with a new “last updated” date, and anything significant is also noted in the app’s release notes.

Moneymalist · com.moneymalist · app version 1.1.0