Privacy Policy

This Privacy Policy explains how Spendora (“the App”, “we”, “us”) handles information when you use the Android application. Spendora is designed so your financial entries stay under your control — primarily on your device, with optional Google services you choose to connect. We do not operate a Spendora cloud backend that stores your expenses or email bodies.

1. Who we are

Spendora is a personal expense-tracking app for Android (package ). For privacy questions, contact: .

2. Data we collect

2.1 Information you provide

Profile details you enter (e.g. name, mobile number, optional photo, preferred currency).
Income and expense transactions you create or confirm (amount, category, notes, payment method, dates).
Smart Coach teachings you save (sample text you paste, keywords, notes, income/expense/refund/ignore type).

2.2 Information stored on your device

Transactions and settings in an on-device database (Room).
Knowledge-base / Smart Coach rules under the app’s private files (including teach keyword → note mappings).
App preferences such as dark mode and backup toggles.

2.3 Permissions (optional features)

SMS — only if you use SMS scan, to read messages and suggest transactions.
Microphone — only if you use voice entry.
Biometric / device lock — to confirm sensitive actions such as erasing data.
Internet — for optional Google Sign-In, Drive backup, and fetching Gmail messages to scan.
Storage (older Android) — only where required for legacy file access; modern Android uses the system share / Downloads flow.

Without Google connect, data stays on the phone (and any local backup file you export/import).

3. Google Gmail access (readonly)

If you connect Google and grant Gmail access, Spendora requests the OAuth scope https://www.googleapis.com/auth/gmail.readonly.

Purpose: Fetch bank / UPI-style transaction emails within a date range you choose, then suggest candidates for you to review and add.
Access level: Read-only. The App does not send, delete, or modify your email.
Processing: Message content is processed on your device with rule-based parsers and your Smart Coach rules. Suggestions appear in the App; you decide what to save.
Not used for: Advertising, selling data, training unrelated AI models, or human review of your inbox by us.
No third-party AI APIs: Spendora does not send email bodies to paid cloud AI providers for parsing.

Spendora’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. SMS access

If you grant SMS permission and run a scan, the App reads SMS on your device to detect completed debit/credit wording. Promotional or “due to be paid” style messages are filtered where possible. Parsed suggestions need your confirmation. SMS content is not uploaded to a Spendora server.

5. Smart Coach (Teach me / Rule Generator)

Smart Coach lets you teach Spendora how to label future messages. You may paste sample SMS/email text and save keywords, notes, and types. Those rules are stored in the App’s private storage on your device (and in knowledge-base backups you explicitly create). They are used only to improve on-device suggestions. We do not receive those pastes on a Spendora server.

6. Google Drive backup

If you connect Google Drive, Spendora requests https://www.googleapis.com/auth/drive.file (files the App creates). The App creates a folder named Spendora in your Drive for backup files. We do not use Drive to browse your other personal files.

7. How we use data

To provide expense tracking, stats, PDF reports, and scan suggestions you request.
To apply Smart Coach rules you saved.
To backup/restore when you enable Drive or use a local backup file.
To secure erase actions with on-device authentication.

We do not sell your personal data. We do not use Gmail or SMS content for advertising.

We do not sell or rent your personal information. Data may be processed by Google only when you sign in and use Drive/Gmail features, under Google’s terms and your Google account controls. If you share a PDF or screenshot, that share is initiated by you (Android share sheet).

9. Retention & deletion

Local transactions remain until you delete them or erase data in Profile.
Erase options: Full, Today, or a particular period (transactions; profile can remain).
Smart Coach rules remain until you change them, restore a KB backup, clear app data, or uninstall.
Disconnect Google in Profile to stop Drive/Gmail access from the App. You can also revoke Spendora in Google Account → Security → Third-party access.
Delete backup files in your Drive Spendora folder anytime.
Uninstalling removes on-device App data (Drive copies remain until you delete them).

10. Your choices & children’s privacy

You can deny SMS, microphone, or Google permissions; related features will not work. Spendora is not directed at children under 13. We do not knowingly collect children’s data.

11. Security

Data is stored on your device and, if enabled, in your own Google Drive. Sensitive erase actions require device unlock. No method of transmission or storage is 100% secure; use a device lock and protect your Google account.

12. Google Play Data safety summary

For Play Console Data safety declarations, Spendora typically involves:

Financial info you enter or confirm (transactions) — stored on device; optional Drive backup you enable.
Personal info in profile (name, phone) — on device.
Emails — read only if you grant Gmail; processed on device for suggestions.
SMS / MMS — read only if you grant SMS and run scan; processed on device.
Not collected for advertising or sale.

Exact Play form answers should match this policy and the current app build.

13. Changes to this policy

We may update this page from time to time. The effective date at the top will change when we do. Continued use of the App after updates means you accept the revised policy.

14. Contact

Questions about privacy or Google API data use:
Email:
App: Spendora · Package · Version