1. The Short Version
Budget Tracker does not collect, transmit, or share your financial data with anyone — including us. The App has no account system, no server for your data, no analytics, no ad network, and no crash-reporting service. Everything you enter — transactions, accounts, budgets, and so on — stays on your device, encrypted, until you choose to export it yourself. The one exception is purchase handling: the App checks whether this device has unlocked Budget Tracker Pro using RevenueCat, a third-party purchase-processing service, and any purchase itself is processed by Google Play — see Section 5 for exactly what that involves.
2. What Data the App Stores, and Where
The App stores the following, locally on your device only, in an encrypted database:
- Transactions, accounts, categories, budgets, and recurring entries you create
- The display name and monthly income/budget figures you enter
- Your selected currency, language, and theme preferences
- A Zakat calculator entry (gold/silver price, nisab figures) if you use that feature
- A remittance (money-sent-home) log if you use that feature
This data is stored in a SQLCipher-encrypted local database. We — Bramora Labs — never see it, never receive a copy of it, and have no way to access it remotely, because there is no server for it to go to. Android automatic app backup is disabled, so the app's database is not included in Android Auto Backup — the only copy of your data that ever leaves this device is a backup file you explicitly choose to create and share yourself (see Section 4).
3. Biometric Unlock and PIN
The App is currently available for Android only. If you enable fingerprint/face unlock, that request is handled entirely by your device's operating system. The App never receives, stores, or has access to your actual fingerprint or face data — it only receives a yes/no result from the OS. If you set a PIN instead, it's stored using your device's secure, encrypted storage (Android Keystore, via expo-secure-store), not in the App's regular database, and never leaves your device. If an iOS version is released in the future, it will use the equivalent iOS Keychain storage, and this policy will be updated accordingly.
4. Backups and Exports
If you export a backup file, PDF summary, or CSV file, that file is generated entirely on your device and handed to your device's own share sheet (email, WhatsApp, Files app, etc. — whatever you pick). Bramora Labs never receives a copy. Backup files are encrypted with a password you choose at export time — you'll need that same password to restore it.
5. Third Parties
The App does not use any third-party analytics, advertising, or crash-reporting SDKs. The only outbound link in the App is an optional "follow us on Instagram" link in Settings, which opens Instagram in your browser or the Instagram app — Bramora Labs does not receive any data from that click, though Instagram's own privacy policy applies once you're there.
Budget Tracker Pro (extra features like PDF/CSV export) is available as an optional one-time in-app purchase. If you purchase Pro, the purchase itself is processed by the Google Play Store, and we use RevenueCat, Inc. to validate and keep track of that purchase. RevenueCat receives a randomly-generated anonymous identifier for your app install (not your name or email) and processes the purchase/transaction information associated with that identifier to provide Budget Tracker Pro's purchase functionality. RevenueCat does not receive your name, email address, or any of the financial data you've entered in the App. Neither Bramora Labs nor RevenueCat ever sees your card number or other payment details — that's handled entirely by Google Play. RevenueCat's own privacy policy is at revenuecat.com/privacy.
Because the App needs to know whether this device has already unlocked Pro — for example after a reinstall or a switch to a new phone — it asks RevenueCat for that purchase status each time the App starts, and again if you open the Go Pro screen so it can show current prices. This happens whether or not you have ever bought Pro. All RevenueCat receives in that check is the random anonymous install identifier described above and the purchase status attached to it — never your name, email address, advertising ID, contacts, or any of the transactions, accounts, or budgets you've entered in the App. Apart from these purchase-status checks and the optional Instagram link above, the App makes no network requests, and none of your financial data is ever transmitted anywhere.
6. Permissions the App Requests
- Biometric hardware (optional) — to unlock the App with fingerprint/face, if you choose to enable it. See Section 3.
- File/storage access — only when you choose to export a backup or import one you previously saved, or share a PDF/CSV.
- Internet access — used to check your Budget Tracker Pro purchase status with RevenueCat when the App starts, to show current prices if you open the Go Pro screen, and to process a purchase or a "restore purchases" through Google Play (see Section 5). It is never used to send your financial data anywhere.
The App does not request camera, location, contacts, microphone, or notification permissions.
7. Children's Privacy
The App is not directed at children and does not knowingly collect personal data from anyone, of any age. Nothing you enter in the App is transmitted anywhere, and the only data that does leave the device is the anonymous purchase-status check described in Section 5, which identifies an app install rather than a person.
8. Deleting Your Data
Because everything lives only on your device, you're always in full control:
- Delete individual entries any time from within the App.
- Uninstalling the App, or clearing its storage from your device settings, permanently deletes all of your data. Bramora Labs has no copy and cannot recover it for you.
- There is no Budget Tracker account to delete, and Bramora Labs has no server containing your budgeting data. RevenueCat processes the limited anonymous install identifier and purchase/entitlement information described in Section 5. To request deletion of that RevenueCat-associated data, contact us at bramoralabsupport@gmail.com; we can submit the request through RevenueCat. Google Play purchase records are maintained by Google and governed by Google Play's policies, so Bramora Labs cannot delete them.
9. Your Rights (GDPR / CCPA / similar)
Regulations like the GDPR and CCPA give you rights over personal data that a company processes. Bramora Labs does not collect, process, or store any of your personal data on our systems — it all stays on your device. Section 8 explains how to request deletion of the limited RevenueCat-associated data that RevenueCat processes for purchase functionality. If you ever have a privacy question or concern regardless, contact us using the details below.
10. Changes to This Policy
This Privacy Policy may be updated from time to time, for example if a future version of the App adds a feature that changes what's described above. Continuing to use the App after an update means you accept the revised policy.
11. Applicable Law
This Policy does not select a governing jurisdiction. Privacy rights and obligations depend on applicable mandatory law.
12. Contact
Questions about this Privacy Policy: bramoralabsupport@gmail.com