No bank linking, ever
We never ask for bank credentials, card numbers, or account access. Every number is one you type in.
Local-first storage
Your data lives on your device by default and works fully offline. Cloud sync is optional, not required.
No ads, no trackers
No advertising SDKs, no analytics, no data brokers. Nothing here is monetized by watching you.
Overview
BudgetWise (the "app," "we," "us") is a personal budgeting, net worth, debt, and bill tracker. This policy describes what information the app handles when you use it, published to accompany the Google Play listing for com.xihadulislam.myexpenses.
The short version: your financial entries are yours, stored on your device, never sold, never shown ads against. If you choose to sign in, a copy is best-effort synced to a private cloud database scoped only to your account, purely so your data can follow you to a second device — nothing more.
What we collect
Everything below falls into one of two buckets — what you give us, and what the app computes from it.
| Category | What it includes | Where it's stored |
|---|---|---|
| Account identity | If you sign in with Google: your name, email, and Google account ID. If you continue as Guest: nothing — an anonymous session only. | Supabase (auth only) |
| Financial entries | Accounts, transactions, budgets, net worth snapshots, debts, bills, savings goals, and categories you create. | On your device; optionally synced (see §04) |
| Receipt photos | Images you capture or pick to auto-fill a transaction via on-device text recognition. | On your device only — never uploaded |
| Purchase records | Subscription status and transaction receipts, handled entirely by Google Play Billing and RevenueCat. | Google / RevenueCat (see §05) |
| Notifications | Bill and budget-threshold reminders you schedule for yourself. | On your device — scheduled locally, no push server involved |
How it's used
- To run the app's core features — budgets, net worth tracking, debt payoff planning, bill reminders, analytics — computed directly on your device.
- To back up and sync your data across devices, only if you're signed in and only for the data types listed in §04.
- To verify and manage your Pro subscription through Google Play Billing.
- To send you the bill and budget reminders you've configured.
We do not use your financial data for advertising, and we do not sell or rent it to anyone, under any circumstances.
Cloud sync, precisely
Local storage is always the source of truth — the app works fully offline whether or not you're signed in. If you're signed in (Google or Guest), a best-effort background sync additionally mirrors the following to a private, access-controlled database:
Each row is protected by row-level security scoped to your account — no other user, and no BudgetWise employee in the normal course of operating the service, can query another person's rows. Receipt photos, household-member labels, and app preferences are never synced; they stay on-device.
Third parties we rely on
We keep this list short on purpose. Each service below performs one job and sees only what that job requires.
| Service | Purpose |
|---|---|
| Supabase | Authentication (Google Sign-In / Guest) and optional encrypted cloud sync of the data listed in §04. |
| Google Sign-In | Lets you create an account without a new password; we receive your name and email only if you choose this option. |
| Google Play Billing | Processes subscription payments. We never see or store your card details. |
| RevenueCat | Verifies subscription status against Google Play on our behalf. |
We do not use advertising networks, analytics SDKs, or crash-reporting services that collect personal data. There are no trackers in this app.
On-device AI
The AI Assistant's spending insights, savings suggestions, and anomaly flags are computed with rule-based logic that runs entirely on your device — nothing about your transactions or balances is sent to any AI or language-model service to produce them. Should a cloud-based AI feature ever be introduced in the future, this policy will be updated in advance to describe exactly what would be sent and why.
Security
Data stored on your device is protected by your device's own operating system and lock screen. Data in transit to our sync backend and RevenueCat is sent over encrypted (TLS) connections, and cloud-stored rows are access-controlled to your account only. No method of storage or transmission is perfectly secure, and we can't guarantee absolute security — but no bank credentials ever pass through our systems in the first place, which removes an entire category of risk by design.
Your choices
- Use it without an account. Guest mode never asks for your name or email.
- Export anytime. The Transactions and Analytics screens include a CSV export you control, sent only where you choose to send it.
- Turn off sync. Everything works fully offline; signing out stops future syncing.
- Delete your data. Uninstalling removes everything stored locally. To remove your synced cloud copy, contact us at the email in §11 and we'll delete it.
Children's privacy
BudgetWise is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we'll remove it.
Changes to this policy
If this policy changes in a way that affects what we collect or how it's used, we'll update the date at the top of this page and, for material changes, note it in the app. Continuing to use BudgetWise after a change means you accept the updated policy.