Privacy Policy

1. Summary of Key Principles

• Local-First Storage: Your financial transaction records, accounts, goals, and portfolio details are stored locally on your device using encrypted/secure local storage.
• No Server Storage: We do not host any remote databases. There are no user signup screens, login credentials, or profiles stored on our servers.
• Google Drive Backups (User-Owned): Backups are uploaded directly from your device to your personal Google Drive space. We do not have access to these files outside of the permissions you grant directly to the App.
• On-Device SMS Parsing (Optional Feature): If you enable the transaction wallet feature, the App reads transactional SMS alerts from recognized Indian banks locally on your device. SMS content is never transmitted to us or any third-party servers, and only the extracted transaction details are retained — not the original message text.

2. Information We Access and How We Use It

A. SMS Permissions & Transaction Detection

• Permissions Requested: The App requests read access to your SMS messages (android.permission.READ_SMS and android.permission.RECEIVE_SMS).
• Purpose: To automatically detect, parse, and catalog transaction alerts, bank account balances, and credit/debit notifications from Indian financial institutions, so you don't have to enter every transaction manually.
• Optional Feature: SMS-based transaction detection can be turned on or off at any time from Settings. If disabled, you can continue using MoneyMap by entering and managing transactions manually — the App remains fully functional without SMS access.
• User-controlled, on a per-user basis: This setting is controlled solely by you, the individual user, directly on your own device. It is not enabled by default without your action, cannot be turned on remotely by us or by anyone else, and your choice is specific to your device/account — it is never applied to or inherited by any other user.
• How it works: The scanning process runs entirely on your device. No SMS content is ever uploaded, transmitted, or sent to our servers or any third party. The App uses a strict whitelist of known Indian bank sender IDs (e.g., SBI, HDFC, ICICI, Axis). Only transactional SMS messages matching these whitelisted sender patterns are parsed. Personal, OTP, promotional, or non-financial messages are ignored and are never read, stored, or processed by the App.
• What is stored: Only the extracted transaction fields — amount, date, merchant/sender name, and category — are saved to the App's local database. The original raw SMS text is not retained once these fields have been extracted.
• No use for ads or profiling: Data derived from SMS is used solely to display and organize your transactions within the App. It is never used for advertising, profiling, or any other purpose.
• Retention & deletion: Extracted transaction records are kept locally until you delete them individually, clear the App's data, disable the SMS feature (which stops new detection but does not auto-delete past records), or uninstall the App.

B. Google Drive & Google OAuth

When you choose to back up your data, the App requests permission to access your Google Drive using Google OAuth with the following scopes:

• https://www.googleapis.com/auth/drive.file: View and manage Google Drive files and folders that you have opened or created with this app.
• https://www.googleapis.com/auth/userinfo.email: To display the connected Google email address in the sync status UI.

Purpose:

• To automatically create a folder named MoneyMap in the root of your Google Drive.
• To save your financial data as a compressed backup file (backup.mmbak), containing your accounts, transactions, categories, and goals in CSV format.
• To restore your data automatically on return visits or when installing the App on a new device.

Security: Google Drive acts as your personal cloud storage. The App only accesses the files it creates itself. We do not store, view, or control your OAuth credentials or drive files.

C. Financial & Investment Data

• Asset Tracking: You can log and track assets, mutual funds, stocks, and liabilities in the App.
• Market Price Synced Data: The App fetches current mutual fund NAVs and stock bhavcopy data from public endpoints. This data is downloaded to your device to calculate portfolio valuation. None of your portfolio holdings or asset counts are transmitted to external servers.

3. Data Storage and Security

Because MoneyMap is designed as a local-first application, security is maintained through the following design:

• Device Encryption: Your local financial records are stored using safe local database formats (Hive / Shared Preferences) protected by standard iOS/Android operating system sandboxing.
• Cloud Encryption: Your backups are stored in your Google Drive, secured by Google's industry-standard cloud security and authentication protocols.
• No Third-Party Analytics: We do not track your financial habits, net worth, or app interactions using tracking software.

4. Sharing of Information

We do not sell, rent, trade, or share your personal or financial information.

Because we do not collect or store your information on our own servers, your data is not intentionally shared with third parties, advertising networks, or other external services by MoneyMap. Your data resides on your physical device and, when you choose to use backup functionality, your personal Google Drive.

SMS data specifically is never shared with, sold to, or transmitted to any third-party server. All SMS parsing and transaction detection happens locally on your device only.

5. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. Since no personal data is collected or transmitted to us, parents can be assured that their children's data remains entirely local to the device.

6. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the App's features or legal requirements. Any updates will be made available directly in the App repository and settings. We encourage you to review this policy periodically.

7. Contact Us

If you have any questions or feedback regarding this Privacy Policy or our privacy practices, please contact us at:

Publisher: WidgetTree
Email: widgettree.dev@gmail.com