Privacy Policy

1. 100% Local On-Device Data Storage

When you record transactions, accounts, categories, budgets, and attach receipt photographs, all data is written directly to a private, sandboxed SQLite database residing exclusively within your device's internal storage.

• Your financial records are never uploaded to any proprietary server or third-party database.
• You own 100% of your data. Uninstalling the app removes local files unless you have exported a database backup or synchronized with Google Drive.

2. Android Device Permissions

Wallet Manager adheres to the principle of least privilege. Every permission declared in our AndroidManifest.xml serves an explicit, user-facing function:

• Camera & Photo Storage (CAMERA, READ_MEDIA_IMAGES, READ/WRITE_EXTERNAL_STORAGE): Used strictly if you choose to attach paper receipt photos to your expense entries. All receipt images remain stored locally on your device.
• Daily Reminders & Boot (POST_NOTIFICATIONS, RECEIVE_BOOT_COMPLETED, VIBRATE): Used exclusively to deliver scheduled daily ledger reminders locally on your device, persisting reminders after device reboots.
• Internet Access (INTERNET): Used exclusively to communicate directly with Google Drive APIs for encrypted cloud backups (if enabled) and to check the official GitHub Releases API for app updates.
• In-App Updates (REQUEST_INSTALL_PACKAGES): Used strictly by the OTA updater to prompt you to install newly downloaded APK releases with your explicit confirmation.
• Biometric Security (USE_BIOMETRIC, USE_FINGERPRINT): Used to lock and unlock the app via your device's native hardware-backed BiometricPrompt (Fingerprint / Face Unlock). Biometric templates never leave secure hardware and are never accessible to the app.

3. Google Drive AppData Synchronization

If you optionally enable cloud backup, Wallet Manager communicates directly from your device to your personal Google Drive account via the official Google Drive API:

• The app requests only the restricted https://www.googleapis.com/auth/drive.appdata scope.
• Backups are stored inside your private Google Drive Application Data folder, which is hidden from standard folder browsing and inaccessible to other applications.
• Backups are encrypted on your device prior to upload.
• No intermediary or relay servers ever handle or inspect your Google OAuth credentials or backup files.

4. GitHub-Hosted Releases & Open-Source Transparency

Wallet Manager is free and open-source software licensed under the MIT License. The official installation APK packages are built transparently using GitHub Actions and hosted on official GitHub Releases:

• Source repository: github.com/iamkamleshmali/wallet-manager-km
• The landing page fetches latest release tags and package sizes directly from the public GitHub Releases API.
• Anyone is free to audit the source code, verify dependencies, or build the APK directly from source.

5. Website Analytics & Cookie Policy

This showcase website (wallet-manager-km.vercel.app) is hosted on Vercel. In keeping with our strict privacy philosophy:

• Zero Cookies: We do not set tracking cookies or cross-site tracking identifiers. You do not need to accept a cookie banner because no tracking cookies exist.
• Privacy-Friendly Analytics: The website uses cookie-free, anonymous page-view analytics (Vercel Analytics). The hosting provider (Vercel) may process standard server logs (e.g. IP address, request timestamp) as part of securely serving and operating the site.
• Local Storage: Your browser's local storage is used solely to remember your chosen theme (Light mode vs Dark mode).

6. Children's Privacy

Because Wallet Manager does not collect any personal data, it does not knowingly collect, store, or solicit information from anyone under the age of 13.

7. Questions & Contact

If you have any questions or feedback regarding this Privacy Policy or the security of Wallet Manager, please open an issue or start a discussion on our official GitHub repository:

Open an Issue on GitHub