(This is the text in privacy-policy.html. Placeholders in [brackets] are yours to fill before hosting.)
Last updated: [DATE] · Applies to the Orbit AutoFi Android app (com.orbit.autofi)
The short version. Orbit AutoFi runs entirely on your device. It has no internet permission at all, so it is technically incapable of uploading your data anywhere. There is no account, no sign-up, and no cloud. Everything the app reads from your notifications is processed and stored only on your phone. We — the developer — never see, collect, or receive any of it.
Orbit AutoFi ("the app", "we", "us") is a personal finance tracker developed by [Developer / publisher name]. This policy explains what the app does and does not do with your information. Contact: [your-support-email].
Orbit AutoFi is built to keep your financial information private by design, not by promise:
The app declares no INTERNET permission. Android therefore blocks it from opening any network connection — it cannot transmit data off your device even in principle.
There is no user account and no login. We never ask who you are.
All data lives in a private, on-device database that only the app can access.
We use no analytics, no advertising, and no third-party trackers.
To do its job, the app reads the content of notifications posted on your device (for example, transaction alerts from your bank or wallet apps). From those, it extracts details such as amount, transaction type, a masked account reference (last 4 digits only), payee, and date, and saves them locally so it can show your balance, budgets, and spending. This processing happens entirely on your device. The notification content and the transactions derived from it are never sent to us or to any third party.
Information we collect as a developer: None. Because the app has no network access and no account system, we do not collect, receive, store, or transmit any personal or financial information about you.
Every permission is used solely for on-device functionality; none is used to collect or transmit your data.
BIND_NOTIFICATION_LISTENER_SERVICE (core feature) — Reads notifications so the app can automatically detect and record your transactions (its primary purpose). You grant this manually and can revoke it anytime; you can also exclude any app from being read. Content is processed on-device only.
FOREGROUND_SERVICE / FOREGROUND_SERVICE_SPECIAL_USE — Keeps monitoring reliably running so transactions aren't missed; shows a persistent notification while active. Opt-in.
RECEIVE_BOOT_COMPLETED — Resumes monitoring after you restart your phone.
POST_NOTIFICATIONS — Shows the monitoring notification and optional budget alerts.
USE_BIOMETRIC (optional) — Fingerprint/face unlock for the app lock; biometric data is handled by Android and never seen by the app.
com.android.vending.BILLING — Google Play Billing for the free trial / Pro subscription. Payment is handled entirely by Google Play; the app never sees your payment details.
Package visibility (<queries>) — Not a runtime permission; lets the app show the name/icon of apps that sent notifications. Stays on-device.
5. How your data is stored and protected
Stored in a private SQLite database in the app's protected storage; other apps cannot read it.
Account numbers are stored masked (last 4 digits only).
Optional biometric app lock.
Cloud backup is disabled for the app.
Orbit AutoFi is free to use. An optional Pro subscription unlocks extra features and begins with a 7-day free trial.
All payments and the trial are managed and processed by Google Play; the app never receives or stores your payment information.
If you don't cancel before the 7-day trial ends, Google Play charges the subscription and renews it automatically until you cancel.
Manage or cancel anytime in Google Play Store > Subscriptions.
Google's handling is governed by the Google Privacy Policy.
We do not share, sell, rent, or disclose your information to anyone, because we never receive it. The only external party is Google Play, solely to process your optional purchase.
Your data stays on your device until you remove it. Clear it anytime via the app or Android's app settings; uninstalling the app permanently erases all of it. Because we never receive your data, there's nothing to request from us and nothing on a server to delete.
Not directed at children under 13 and does not knowingly process their data. As the app collects no data at the developer level, it presents no data-collection risk.
We'll revise the "Last updated" date on any change and note it where appropriate.
11. Contact at smarthomesolutionspvtlimited@gmail.com