Last updated: September 13, 2026
Notiscan is a 100% local, offline-first personal finance app. This policy
explains, in plain language, what data the app touches, where it goes, and
the few network connections that exist.
1. Your data stays on your device
Notiscan has no backend server and no cloud storage. All transactions,
categories, budgets, reminders, and settings are stored only on your device
(local database and private preferences). Your financial data is never sold,
shared, or transmitted for any purpose.
2. The only network connections that exist
Core features work fully offline. Internet access is used only for:
(a) Ads on the free tier, served by Google AdMob. Where required (e.g. EEA/
UK), a Google consent message (UMP) asks your choice first; ad
personalization follows that choice. The app does not read the Android
Advertising ID (the permission is removed from the final build).
(b) Purchase and subscription verification: Google Play Billing processes
payments and RevenueCat verifies your "Pro" entitlement. These services
receive purchase/entitlement information only — never your transactions,
notification text, or receipt photos.
The Pro subscription removes all ads.
3. What the app accesses (all optional)
• Notification access: if enabled, Notiscan reads notifications on-device
from the banks, e-wallets, or SMS apps you choose (or all apps in global
mode) to record income and expense entries automatically. Notification
text is processed entirely on-device and never transmitted. Revocable any
time in system settings.
• SMS relay without SMS permission: financial SMS alerts are captured only
through your messaging app's own notifications. Notiscan does not request
READ_SMS and cannot read your SMS database.
• Camera: used solely to scan paper receipts via on-device OCR (Google ML
Kit). Photos are kept in the app's private storage and never uploaded.
• Notification posting: used to deliver bill reminders and the optional
quick-action shortcut.
• Exact alarms: used to schedule your monthly bill reminders at the time you
choose.
• Scoped storage: writes only the PDF/CSV exports and encrypted backups you
explicitly create, to locations you choose.
4. On-device intelligence
Category suggestions and per-app classification memory are learned locally
from your own corrections (edits, confirmations, transfer toggles). This
memory — including which source app posted a captured notification — lives
only in your device's private preferences and is never shared.
5. Third-party components
• Google ML Kit (text recognition): runs on-device; no account or cloud
upload required for OCR.
• Google AdMob + Google User Messaging Platform (UMP): ads and consent
message on the free tier only.
• Google Play Billing: purchase processing.
• RevenueCat: subscription entitlement verification.
The app contains no analytics SDKs, no crash reporters, and no user tracking
of any kind.
6. Backups and exports
Backups are encrypted with a passphrase you provide and saved to a location
you choose; only you hold the passphrase. Receipt photos are intentionally
excluded from backups (your text history restores in full). CSV/PDF exports
are written to files you select. Notiscan cannot read these files back
without your passphrase.
7. Data deletion
Uninstalling the app or clearing its data permanently removes all locally
stored data, including receipt photos and learned memory. You may also
delete individual transactions, budgets, reminders, and receipt images from
within the app at any time. Encrypted backups you exported remain under your
sole control.
8. Children's privacy
Notiscan collects nothing that leaves the device and therefore does not
knowingly collect any data from anyone, including children.
9. Changes
If this policy changes, the updated version will be posted on this page and
re-shown inside the app on the next update. Continued use after changes
constitutes acceptance.
10. Contact
For questions about this policy, contact: [ISI-EMAIL-DUKUNGANMU@domain.com]