PRIVACY POLICY

Effective Date : 15 October 2026

Updated On : 25 October 2026

This Privacy Policy explains how the Aale mobile application ("Aale", "the app", "we", "us") handles information. Aale is published by Tukracraft ("the developer"), an individual developer based in India. By using Aale you agree to this Policy.

1. The short version

* Aale speaks your received UPI payments aloud and keeps a list of them on your phone.

* To do this it reads payment notifications from supported UPI apps on your phone (for example GPay, PhonePe, Paytm and BHIM).

* Your list of payments (amount, payer name, UPI app, time and, if shown, the payment reference number) is stored on your phone.

* To keep Aale working and to fix problems, Aale sends usage and crash information to Google Firebase. This never includes payer names, UPI IDs or reference numbers. When Aale cannot read a payment message from a supported UPI app, it sends only the message's pattern - payment words kept, every other word, name and number removed - so we can fix it.

* Backup is optional. If you turn it on with your Google account, Aale keeps a copy of your daily payments (amount, UPI app, time and whether it was spoken - no payer names) and your settings on our server, so you can get them back on a new phone. You can delete this backup and your account at any time.

* Aale cannot send, receive or move money. It only listens and speaks.

* We do not show ads, we do not use an advertising ID, and we do not sell your data.

2. How Aale reads notifications

Aale uses Android's "notification access", which you turn on yourself during setup. Before asking, the app explains what it reads.

* Android shows Aale every notification on your phone. Aale checks only which app sent it. If it is not from a supported UPI app, Aale discards it at once - it does not read, store or keep any part of it.

* From supported UPI apps, Aale looks only for "money received" payments. It ignores money you send, payment requests, offers, cashback, reminders and OTPs.

* For each received payment, Aale keeps: the amount, the payer's name and the payment reference number (if the UPI app shows them), the UPI app's name and the time.

* You can turn notification access off at any time in your phone's Settings. Aale will then stop speaking payments.

3. Information stored on your phone

* Your received payments - for Collections, Repeat and your totals.

* Your shop name and UPI IDs, if you add them.

* Your settings (screen and voice language, what Aale says, sounds, greetings, on / off switches, day-end time and other choices).

* A short list of recent notification keys - only so the same payment is never spoken twice.

You can remove all of this by clearing the app's data or uninstalling the app. Android's own backup may keep your settings, never your payments.

4. The voice

Aale speaks your payments using your phone's voice engine (such as Google's).

5. Permissions

* Notification access (needed for the main feature): to read payment notifications from supported UPI apps, as explained in section 2.

* Run in the background / ignore battery optimisation: so Aale keeps speaking payments when the screen is off.

* Notifications: to show that your soundbox is on, warnings if Aale stops, the day-end total and the daily-limit notice.

* Internet: for the services in sections 6 to 9 and for Google Play.

Aale does not read your SMS, contacts, photos, files, location, call logs, bank passwords or UPI PIN.

6. Usage and crash information (Google Firebase)

Aale uses Google Firebase Analytics and Firebase Crashlytics, services provided by Google, to see whether announcements work, to find and fix crashes and to improve the app.

* What is sent: how the app is used (for example "a payment was spoken", "setup finished", which screen was opened), timing and error details, app version, phone model, Android version, language, country and a Firebase installation ID. Payment amounts are included.

* What is never sent here: payer names, UPI IDs, phone numbers, payment reference numbers or the text of your notifications - except the message pattern below. No advertising ID is collected.

* When Aale cannot read a message from a supported UPI app that shows an amount (and is not one it already ignores, such as money you send, requests, offers or OTPs), it sends only the message's pattern: known payment words are kept and every other word, name, ID and number is replaced (for example "Rs ### received from * via *"). At most a few times a day; WhatsApp chats are never included. We use it only to teach Aale new wordings.

* How long: usage information is kept for 14 months and crash reports for up to 90 days.

* Aale also downloads settings from Firebase, such as which payment wordings to recognise and help articles.

* To ask us to delete this information, write to tukracraft.app@gmail.com using "Need help? Write to us" in Aale's Settings - that email already includes the installation ID we need to find your data.

7. Optional backup with your Google account

Backup is off until you turn it on in Settings > Back up my payments and sign in with your Google account.

* What is backed up: for each payment, the amount, the UPI app, the time and whether it was spoken; and your settings, including your shop name and UPI IDs for the QR. Payer names, payment reference numbers and notification text are not backed up.

* Your Google account: we receive your Google account's email address and an account ID from Google sign-in, used only to keep your backup yours and to give it back to you.

* Where: Google Firebase (Cloud Firestore and Firebase Authentication), a service provided by Google, stored in Google Cloud's Mumbai region in India.

* Why: so you can get your payments and settings back on a new phone by signing in with the same Google account.

* How long: until you delete your backup and account (section 8).

8. How to delete your backup and account

* In the app: Settings > Back up my payments > Delete my backup and account, then confirm. This deletes your backup and your Aale account from our server. Aale keeps working on your phone.

* Without the app: write to tukracraft.app@gmail.com from the email address of the Google account you used for backup, with the subject "Delete my Aale backup". We delete your backup and account within 30 days and confirm by email.

* Deleting your backup does not cancel a Google Play subscription - cancel that in the Google Play Store app.

9. Feedback you send

If you use "Feature requests & Feedback", your message - and your phone number or email only if you choose to add it - goes to our Google Form along with the app version, phone model, Android version, language and time. We use it only to read and answer your feedback. Write to us to have it deleted.

10. Payments for Aale

If you buy an Aale subscription, the payment is handled entirely by Google Play. We do not receive or store your card, UPI or bank details. Google's privacy policy applies to that payment: https://policies.google.com/privacy . To know your plan, Aale checks the purchase record that Google Play provides (not your payment details); if you use backup, this check can also be made by our server. To confirm a purchase, Aale sends Google Play's purchase token to our server, which checks it with Google Play.

11. Sharing you start

When you share a QR code, a total, a counter sign, an invite or an export of your payments (it includes payer names and reference numbers), you send it with your phone's own share tools to the app you choose. That is not a transfer of data to us. A QR code you share contains your UPI ID and shop name.

12. What we do not do

* We do not sell or rent your data to anyone.

* We do not share your data with advertisers or data brokers.

* We do not use advertising identifiers.

* We do not track your location.

13. Children

Aale is a business tool for adults (18 and over) who receive payments for a shop or business. It is not directed at children, and we do not knowingly collect personal information from children.

14. How long we keep information

* The list of payments and your settings on your phone: until you clear the app's data or uninstall.

* Usage information: 14 months. Crash reports: up to 90 days.

* Backup and account (only if you turned backup on): until you delete them.

* Feedback: until it is no longer needed to answer you, or until you ask us to delete it.

15. Your rights and grievances

You can ask us about, correct or delete the information we hold about you (sections 6 to 9). Write to the grievance contact below; we will reply within 30 days, or sooner where the law requires. You may have rights under India's Digital Personal Data Protection Act, 2023 and its Rules.

16. Security

Data on your phone is protected by your phone's own security, such as your screen lock. Data sent to Google Firebase is encrypted in transit and stored by Google with encryption. Your backup can be read only by your own signed-in account and by us for support and deletion. No method of storage or transfer is perfectly secure.

17. Not affiliated

Aale is an independent app. It is not made by, endorsed by or affiliated with NPCI, any bank, or any UPI app, including GPay, PhonePe, Paytm and BHIM. These names are used only to describe which apps' notifications Aale can read.

18. Changes to this Policy

We may update this Policy as Aale changes. When we do, we will update the "Updated On" date above and, for important changes, tell you in the app.

19. Contact and grievance officer

Tukracraft (grievance officer: the developer)

Email: tukracraft.app@gmail.com

This Policy is governed by the laws of India.