Your data, and how to delete it
Applies from 7 October 2026
Everything you enter, and everything the app reads from your SMS messages, stays in the app's private storage on your phone. All of your data is on your phone, so you are in full control of it.
In short
- The app does not connect to the internet. It does not have Android's internet permission, so it cannot send or receive anything over a network.
- There is no account. No sign-up, no login.
- We collect nothing. We never receive your expenses, income, messages or anything else you enter.
- Nothing is sold or shared. There are no ads, analytics, tracking or crash reporting in the app.
- You can delete everything yourself — delete entries in the app, clear the app's storage, or uninstall it.
What is stored on your phone
Everything is kept in the app's private storage, in a database and a settings file. Other apps cannot read them.
| Data | What is stored | How long it's kept |
|---|---|---|
| Expenses | Amount, date, category, note, tags, account and split group. For SMS-detected entries, a numeric fingerprint of the message (never its text). | Until you delete it |
| Income | Amount, date, source, note and account, plus the message fingerprint for SMS-detected income | Until you delete it |
| SMS review queue | Amount, date, merchant or payer, sender (for example VM-HDFCBK), message
text, suggested category, and whether it's an expense or income | Until you add or discard it |
| Discarded detections | The message fingerprint only | Until you clear the app's storage, so discarded messages don't come back |
| Recurring transactions | Name, amount, note, schedule, and whether it's an expense or income | Until you delete it |
| Accounts and transfers | Account name, type, colour and opening balance. Transfer amount, date, note and the two accounts. | Until you delete them |
| Lent & borrowed | The other person's name, the amount, direction, dates, note and whether it's settled | Until you delete it |
| Budgets and savings goals | Monthly and category budgets, the rollover setting, savings targets | Until you change them or clear the app's storage |
| Categories | Your custom and hidden categories, and the category you chose for each merchant | Until you change them or clear the app's storage |
| App lock | Whether it's on, a salted hash of your PIN (never the PIN itself), the biometric setting, and the wrong-attempt count and cooldown time | The PIN hash is kept until you clear the app's storage, so App lock can be turned back on. The attempt count resets when you unlock. |
| Settings | Theme, accent colour, language, currency, the bill reminder setting, which in-app notifications you've read or dismissed, which alerts were already sent, and first-run choices | Until you clear the app's storage |
| Bill photo (temporary) | A photo taken with the camera for Scan a bill | Deleted as soon as its text is read |
If you use the Lent & borrowed feature, that includes the names of other people. A photo you pick from your gallery for Scan a bill is read on your phone but not copied; a photo taken with the camera is deleted right after its text has been read.
What is never collected, and never sent
We do not collect any personal data through the app. We do not run servers for the app, and the app contains no analytics, advertising, crash-reporting or tracking code. The app does not transfer your data anywhere, inside or outside your country.
The app requests exactly four Android permissions: SMS (RECEIVE_SMS and
READ_SMS), notifications, and the biometric permission that Android grants
automatically. Permissions it does not have:
- Internet or network access
- Contacts
- Location
- Camera
- Photos and media, or storage
- Phone or call logs
- Sending SMS
- Microphone
- Accounts
- The advertising ID
Android's Google Drive backup is turned off for the app, and the app does not write your data to Android's system log. Your data leaves the app only in ways you choose: backups and exports you save or send somewhere, notifications and widgets you enable, and Android's device-to-device transfer if you use it when setting up a new phone.
The only information we can ever receive is email you send us — your email address and whatever you write, used only to reply to you — and the aggregated statistics Google Play gives every developer, such as install counts and ratings, along with crash reports Android collects from people who chose to share usage and diagnostics data with Google. Those reports contain technical details such as the error, the device model and the Android version. They do not contain your transactions or messages.
SMS: what is read and what is ignored
SMS access is optional. With it, the app finds bank and payment transactions in your SMS so you don't have to type them. Messages are read on your phone and never sent anywhere. Without it, you add transactions by hand and everything else works.
Import your expenses automatically
Allow access to read your SMS messages so the app can detect bank transactions and load all your
existing expenses automatically. Nothing ever leaves your device.
This is the message the app shows before Android's SMS permission prompt. You can choose Not now, and you can change your choice later in Android Settings.
What happens to a message
- A message arrives. Android passes each new SMS to the app, and the app checks the text, on your phone, to see whether it reports a completed transaction.
- Not a transaction? It's ignored and nothing is stored.
- A transaction? The app reads the amount, the date, whether money left or arrived, and the merchant or payer. It suggests a category and puts the transaction in your review queue. Nothing is added to your records yet.
- You review it. You add it, changing details if you like, or you discard it. Either way, the message text is deleted from the app. An added transaction keeps a numeric fingerprint of the message, and a discarded one leaves only that fingerprint, so the same message is never shown to you again.
- Inbox checks. When you first allow SMS access, and whenever you tap Refresh SMS detection, the app checks the messages already in your inbox the same way. Messages you have already added or discarded are skipped.
Ignored, with nothing stored
- Personal messages
- Promotions and offers
- One-time passwords
- Debits that are only scheduled or requested
- Failed or declined payments
The app has to read messages from every sender, because it can't tell which ones come from your bank without reading them. That check happens entirely on your phone.
The app never sends SMS, never deletes or changes your messages, does not read MMS, and is not your default SMS app. SMS content is never uploaded, shared, sold, or used for advertising or analytics.
How to delete everything
Keep a copy first, if you want one
Clearing the app's storage and uninstalling are both permanent. If you want to keep your data, export a backup first: in the app, open Backup and restore and export a backup (JSON) or a spreadsheet (CSV).
Then delete it all
- Android Settings › Apps › Expense Tracker › Storage & cache › Clear storage, or uninstall the app.
- This permanently deletes all records, settings and your PIN. (Menu names vary slightly between phone makers.)
- Delete any exported files wherever you saved them.
Every other control
| To do this | Do this |
|---|---|
| Delete a transaction | Tap it, tap the delete icon, then Delete. You can undo this for a few seconds. |
| Delete several transactions | Long-press one, tap the others to select them, then delete. |
| Discard SMS detections | Tap the "detected from SMS" banner, then Discard all, or review them one by one and discard the ones you don't want. |
| Stop SMS reading | Android Settings › Apps › Expense Tracker › Permissions › SMS › Don't allow. Records you already added stay until you delete them. |
| Turn off notifications | Android Settings › Apps › Expense Tracker › Notifications. |
| Delete everything | Android Settings › Apps › Expense Tracker › Storage & cache › Clear storage, or uninstall the app. This permanently deletes all records, settings and your PIN. Export a backup first if you want to keep your data. (Menu names vary slightly between phone makers.) |
| Delete exported files | Delete them wherever you saved them. |
| Take your data elsewhere | In the app, open Backup and restore and export a backup (JSON) or a spreadsheet (CSV). |
There is no account to delete
Because we never receive your data, we cannot view, correct or delete it for you. We're happy to help you do it on your phone — email info@klglobaltech.in.
The full policy
This page is a summary of how the app handles data. The complete Privacy Policy lists every permission, everything stored, how SMS messages are handled, what each backup and export contains, the third-party components in the app, and the security measures behind all of it.
Something not covered here? Get in touch.