Last updated: 31 October 2026
The short version
Roz keeps everything on your phone. There is no Roz account, no Roz server, and the app never sends your data anywhere. It works fully in airplane mode.
What Roz stores
Your monthly income, your fixed bills, the spends you add or that Roz logs for you, your categories and your settings. For spends logged from a bank message, Roz keeps the text of that one debit or credit message so you can see where a spend came from and so the app can re-read it after an update.
SMS (Android)
If you allow it, Roz reads SMS from bank and UPI sender IDs to find debit and credit alerts. It ignores, and never stores, OTPs, personal messages, promotions and balance alerts. Messages are read and processed on your phone only and never leave it.
Payment notifications (Android)
If you turn on notification access, Roz looks only at notifications from payment and bank apps (such as Google Pay, PhonePe, Paytm and BHIM) to find completed payments. Notifications from every other app are ignored.
Shortcuts and sharing (iPhone)
iPhone does not let apps read SMS. If you set up the Shortcuts automation or share a message into Roz, only that message's text is handed to Roz, and it stays on your phone.
Security
Roz's database is encrypted on your phone with a key kept in the Android Keystore or iOS Keychain. You can also turn on App lock to require your fingerprint, face or phone PIN.
Sharing and selling
Roz does not share, sell or upload your data. There are no ads and no analytics. Roz does not include crash reporting.
Your control
You can export your spends as a CSV file at any time. Delete all data in Settings wipes everything Roz stored, including its encryption key. Uninstalling Roz also removes all of its data.
Children
Roz is meant for adults managing their own money and is not directed at children.
Contact
Roz is published by DesireDiv. Questions about this policy: hello@desirediv.com