Ma7fzty.

Written to the app’s private storage on your phone, readable only by the app itself:

• @budget_app_state_v1 — one key holding everything you enter: transactions (amount, date, category, note, account), categories, accounts, budgets, debts, savings goals, and any payment methods you choose to save.
• Your settings, in the same key: language, currency, theme, font size, the daily-reminder time, and — only if you turn the lock on — your 4-digit passcode and whether fingerprint or face unlock is enabled.
• Receipt photos you attach stay as image files in the app's private storage; the transaction keeps only a reference to the file.

• Your finances. Transactions, balances and debts never leave your phone unless you export or share them yourself.
• Your voice. The app never records or saves audio — it keeps only the text of the transaction you confirm.
• Your fingerprint or face. Android performs the check and tells the app only whether it passed.
• A push token or device identifier. The app never registers for push messages; its reminder is scheduled locally on the phone.
• No analytics, telemetry, tracking pixels, or advertising of any kind.
• No accounts, no sign-in, and no personally identifying information — not your name, email, IP address, or device fingerprint.
• Nothing is ever sold, rented, or shared with data brokers, advertisers, or any third party.
• No remote code. Everything runs from the app bundle Google Play reviewed; nothing is downloaded and executed at runtime.

CAMERAoptional

Takes a receipt photo when you tap the camera button on a transaction. Declining only disables that button — you can still pick a photo from your gallery.

RECORD_AUDIOoptional

Listens only while the voice-entry sheet is open, so you can say a transaction instead of typing it.

POST_NOTIFICATIONSoptional

Shows the daily reminder you set up in Settings. Turning the reminder off stops it entirely.

RECEIVE_BOOT_COMPLETED · WAKE_LOCK · VIBRATE

Let the daily reminder survive a phone restart and arrive on time. Used by the reminder and nothing else.

USE_BIOMETRIC · USE_FINGERPRINT

Unlocks the app with your fingerprint or face, if you turn that on. Biometric data never reaches the app.

READ_EXTERNAL_STORAGE · WRITE_EXTERNAL_STORAGE

Declared by the photo and file libraries for older Android versions, to pick a receipt image or save an export you asked for.

INTERNET · ACCESS_NETWORK_STATE

Included by default by React Native, the framework the app is built on. The app has no server and makes no network requests of its own.

Optional permissions are requested the first time a feature needs them — Android asks you first, and declining turns off that one feature and nothing else.

• Google speech services

  Only when you use voice entry. Your phone's speech recognition, provided by Google, hears what you say and returns the text; depending on your phone and language, Google may process that audio on its servers, under Google's own privacy policy. The app itself never sends or stores the audio, and typing a transaction works exactly as well without it.

• Voice entry is the only feature that may need an internet connection. Everything else works fully offline.
• Settings → "Delete all transactions and settings" erases everything the app stored, without uninstalling it.
• Data lives in the app's private storage, inside Android's app sandbox — other apps cannot read it, and it is never synced to a server of mine.
• If you have Android's own device backup turned on, Android may include the app's data in your encrypted Google backup so it comes back on a new phone. That backup belongs to your Google account and I cannot see it; you can switch it off in Android's backup settings.
• Uninstalling the app deletes everything it stored. Exports and backups you create are ordinary files you control — they go only where you send them.

• Erase everything the app saved from its Settings screen, whenever you like.
• Uninstall the app and everything it stored on your phone is deleted with it.
• Revoke any permission from Android’s app settings — the rest of the app keeps working.