Phone State Access:

We access phone state (android.permission.READ_PHONE_STATE) to detect SIM country code for setting default currency, validate transactions, and prevent fraud.

Device Identifiers & App Usage Access:

We collect limited device identifiers that are accessible via the READ_PHONE_STATE permission. This data is used only to identify the device and to detect which apps are opened, so we can enable features like impulse-purchase blocking and spending-control nudges.

We do not collect call information, personal content, or any data unrelated to this specific feature. All collected data stays on-device unless explicitly needed for app functionality and is never sold or shared with third parties.

What We Collect:

• • Device identifiers accessible via phone state (e.g., non-persistent device ID, SIM country)
• • Phone number only if explicitly available and required for account verification and transaction validation
• • Email address for account management and notifications

Why We Collect:

To provide expense tracking functionality, validate transactions, prevent fraud, and deliver personalized financial insights. We do NOT read SMS or OTPs.

Data Retention:

We retain your data until you delete your account. Upon account deletion, all personal data is permanently removed within 30 days.

Data Sharing:

We do not share device identifiers or personal information with third parties except for essential analytics vendors (Google Analytics, Firebase) under strict contractual data protection agreements. No data is sold to third parties.

Security:

• • All data is encrypted in transit using TLS (Transport Layer Security)
• • Data is encrypted at rest using industry-standard encryption protocols
• • We implement regular security audits and updates
• • Access to user data is strictly limited to authorized personnel only