Privacy policy
Budget Tracker reads bank transaction-alert emails from your Gmail account so it can show you what you have spent. It runs entirely on your phone.
This page is generated from the same text the app shows you on first run, so the two cannot disagree.
What it does with your mail
Your email is read on this phone, and nowhere else.
There is no server. This app talks to Google and to nothing else — no account of yours is sent anywhere to be processed, because there is nowhere to send it.
It only looks at mail from the banks you connect.
The search is filtered at Google before anything is sent back, so mail from anyone else never reaches this phone at all. If no bank is configured, the app refuses to search rather than matching everything.
It only downloads the messages it can actually use.
It first asks Google for just the sender and subject. Only if those match a known alert does it fetch the message itself. Your bank's other mail — balances, statements, marketing — is never downloaded.
Nothing is sent away to be interpreted.
The app reads the alert and pulls out the amount, the card and the shop on this device.
The message itself is thrown away.
Once the amount has been read, the email is gone. It is not saved, and there is nowhere in the app's storage that could hold it.
Only the numbers are kept.
The amount, the last four digits of the card, the shop and the date. Not the message, not your inbox, not anything the app did not need.
Your Google sign-in is stored in the phone's secure keystore.
And it is read-only: the permission this app asks for cannot delete or send mail, because Google will not let it — that is enforced by the sign-in itself, not by the app behaving well.
What it deliberately does not do
- Your data is not backed up to Google Drive. Android would do this by default; it is switched off, because a backup of this app is a copy of every purchase it has seen.
- Nothing is copied when you transfer to a new phone, for the same reason. You reconnect and it rebuilds from your mailbox.
- There are no analytics, no crash reporting and no advertising. Nothing reports back on how you use the app.
Disconnecting
Disconnect tells Google to revoke this app's access, then forgets the sign-in. It does this in that order deliberately: dropping the sign-in first would leave permission granted at Google with no way to withdraw it from this phone.
Google revokes the whole grant, not one device. If you use this app on another phone with the same mailbox, that one stops syncing too and will need reconnecting.
Deleting your data
Delete my data removes every transaction, account and sync record this app has stored on the phone. It cannot be undone. Your email is untouched — nothing this app does can change your mailbox.
Google API Services User Data Policy
This app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: the data is used only to provide the spending features described above; it is not transferred to anyone except as necessary to provide those features (which, since there is no server, means it is not transferred at all); it is not used for advertising; and no human reads it.
Contact
Questions about this policy: privacy@sahadeosolutions.ca