PRIVACY_POLICY

# SpendChat Privacy Policy

**Last updated: August 6, 2026**

SpendChat ("the app") is developed and maintained by Himanshu Keshri ("we", "us"). This

policy explains what data SpendChat handles and how.

## 1. No backend servers

SpendChat is an offline-first app. All of your financial data — accounts, transactions,

categories, budgets, savings goals, debts, and reports — is stored locally on your device

in a SQLite database. We do not operate any backend server, and we cannot access, see, or

recover your data. Nothing is uploaded to us.

## 2. SMS-based transaction import

With your permission, SpendChat reads incoming SMS messages on-device to detect bank

transaction alerts and pre-fill transaction entries for you to review. This processing

happens entirely on your device:

- Message content is parsed locally using on-device logic only.

- Message content is never transmitted off your device, and is never stored verbatim —

  only the structured transaction details you confirm (amount, merchant, date) are saved

  to your local database.

- You can deny or revoke this permission at any time in your device's app settings; you

  can still add transactions manually.

## 3. Local backup & restore

You can optionally create a backup of your data as a file stored in this app's private

storage on your device, optionally protected with a password you choose (AES-256

encryption). This backup file is never transmitted anywhere unless you explicitly choose

to share or move it yourself (e.g., to cloud storage you control).

## 4. Biometric authentication

If you enable app-lock, SpendChat uses your device's built-in biometric sensor (fingerprint

or face unlock) via the operating system to unlock the app. Your biometric data is handled

entirely by your device's OS and is never accessible to, or seen by, SpendChat or us.

## 5. Receipt photos

If you attach a photo to a transaction, the image is selected via your device's photo

picker and stored locally in the app's private storage. It is never transmitted anywhere

unless you choose to share it yourself.

## 6. What we don't do

- We do not show ads.

- We do not use third-party analytics or trackers.

- We do not sell or share your data with anyone, because we never receive it in the first

  place.

## 7. Data deletion

Because all data lives only on your device, uninstalling the app (or clearing its storage

in your device's app settings) permanently deletes all SpendChat data, including any local

backups stored in the app's private storage. There is no remote copy for us to delete.

## 8. Subscriptions and purchases

SpendChat is free to use for everyone at launch. If a paid subscription or one-time purchase

is introduced later, it is processed entirely through Google Play Billing. We do not collect,

see, or store your payment details (card numbers, billing address, etc.) — that information

is handled directly by Google Play under its own privacy policy. We only receive confirmation

of your purchase/subscription status from Google Play Billing, which we use locally on your

device to unlock premium features. This status is not linked to any of the financial data you

enter in SpendChat.

## 9. Changes to this policy

If this policy changes, we will update the "Last updated" date above and, for material

changes, note it in the app's release notes.

## 10. Contact

Questions about this policy or your data: **spendchat@gmail.com**