Effective: 29th April 2026
Privacy Policy
App: Artha Expense Tracker | Last updated: 2026-04-06
1. Overview
Lloma is a personal expense tracker. Your financial data stays on your device. We do not operate servers, collect analytics, serve ads, or transmit your data to any party other than Google Drive — and only when you explicitly connect it.
2. Data We Collect and How We Use It
2.1 Expense Records
What: Transaction title, amount, category, date, and income/expense flag.
Where stored: Locally on your device in an encrypted app database (Android private storage).
Who sees it: Only you. No data is sent off-device unless you choose to back up to Google Drive (see §3).
2.2 SMS Messages
What: Body text of SMS messages from senders you explicitly add to a trusted-senders list.
Purpose: To automatically detect and suggest expense entries from bank/e-wallet debit alerts.
Processing: Done entirely on-device. SMS bodies are parsed and then discarded; SMS body text is temporarily stored in a local on-device pending queue until you review and confirm or dismiss the transaction. It is deleted immediately on confirmation or dismissal, and is never transmitted off-device.
Who sees it: Nobody. SMS content never leaves your device.
Opt-in only: SMS capture is disabled by default. You must enable it in Settings and manually add trusted sender numbers.
2.3 Voice Input
What: Audio captured when you use the voice expense entry feature.
Purpose: To transcribe and parse a spoken expense description into a structured entry.
Processing: Android's on-device speech recogniser is used. Audio is processed by the operating system's speech recognition service (subject to your device manufacturer's and Google's privacy policies for on-device recognition).
Storage: Audio is never stored by Lloma. Only the recognised text is used temporarily to suggest an expense entry.
Opt-in only: Voice entry can be disabled in Settings.
2.4 Google Account (Google Drive Backup)
What: Your Google account email address.
Purpose: To identify which Google account is connected for Drive backup.
Where stored: Stored locally in app preferences on your device only.
Opt-in only: Google Sign-In and Drive backup are entirely optional. You can use Lloma without connecting a Google account.
2.5 App Preferences and Settings
What: Budget amounts, category lists, notification preferences, cycle start day, currency preference.
Where stored: Locally on your device (Android DataStore / private app storage).
Who sees it: Only you.
3. Google Drive Backup
When you connect Google Drive:
Lloma requests the drive.file scope only. This grants access only to files created by Lloma — it cannot read or modify any other files in your Google Drive.
Your expense data is uploaded as a CSV file (bajet_expense_backup.csv) and a small metadata file (lloma_backup_meta.json) to a folder named "Bajet Backups" in your Drive.
These files are stored in your own Google Drive account. Lloma's developer has no access to them.
Backups occur on a schedule you control (daily, weekly, monthly, manual, or off).
You can disconnect Google Drive at any time from Settings, and you can delete the backup files directly from your Google Drive.
Google's handling of data transmitted to Drive is governed by Google's Privacy Policy.
4. Third-Party SDKs
SDK
Google Play Services Auth
Purpose: Google Sign-In flow
Data sent off-device?: Only during sign-in (Google account token exchange)
Google Drive REST API
Purpose: Backup/restore
Data sent off-device?: Only your expense CSV when you trigger a backup
ML Kit Entity Extraction
Purpose: Parse amounts and dates from SMS text
Data sent off-device?: No — runs fully on-device
5. Permissions Explained
Permission and why it needed.
INTERNET: Required to communicate with Google Drive API for backup and restore.
RECEIVE_SMS: Required to read incoming SMS messages for automatic expense detection. Granted only if you enable SMS capture.
RECORD_AUDIO: Required to capture voice input for the voice expense entry feature. Only active while the microphone button is held.
POST_NOTIFICATIONS: Required to show budget reminders and backup status notifications.
RECEIVE_BOOT_COMPLETED: Required to reschedule background backup and reminder jobs after a device restart.
6. Data Retention and Deletion
All app data (expense records, settings, categories) is deleted when you uninstall the app or use "Clear Data" from Android Settings.
If you have connected Google Drive, your backup files in Drive are not automatically deleted on uninstall. You must delete them manually from your Google Drive.
You can export all your expense data as a CSV at any time from the app and delete the app entirely.
7. Children's Privacy
Artha is not directed at children under 13. We do not knowingly collect personal information from children.
8. Changes to This Policy
If this policy changes materially, the updated version will be published with a new "Last updated" date. Continued use of the app after changes constitutes acceptance of the revised policy.
9. Contact
For questions about this privacy policy or your data, contact the developer at the support address listed on the app's store page