PocketLedgerPrivacy Policy
The short version
PocketLedger keeps your money records on your phone. We do not run a server, we do not receive your records, and the app has no ads, analytics or trackers. If you choose to turn on Google Drive backup, an encrypted copy of your data is stored in a hidden folder of your own Google Drive, which the developer cannot open.
What the app stores on your phone
- Your records: earnings, expenses, categories, quick presets, EMI plans, loans, charity donations and your settings (language, currency, theme, reminders). They are saved in a local database that only the app can read.
- If you turn on app lock: a salted hash of your PIN, kept in the Android Keystore through secure storage. The PIN itself is never stored. Fingerprint or face unlock is handled by Android; the app never receives your biometric data.
What leaves your phone, and only when you choose it
| What | When | Where it goes |
|---|---|---|
| Encrypted backup file (your records, scrambled with AES-256-GCM) | After you connect Google Drive, once a day and when you tap Back up now | A hidden app-data folder in your Google Drive. It uses your Drive storage. Only this app, signed in to your Google account, can read it. |
| Google account ID, name and email | When you sign in with Google | Read through Google Sign-In on your device. The ID is used to build the backup encryption key and to check that a restore uses the same account. The email is shown on the Backup screen. None of this is sent to the developer. |
| Exported CSV or PDF reports | When you tap Export and pick an app to share with | The app you choose (email, Drive, messaging…). |
| Feedback email | When you tap Send feedback | Your email app opens with a message to the developer. It contains the app version, Android version, device model and app language, and no financial data. You can edit or cancel it. |
We ask Google for one permission only: access to the app's own hidden folder in your Drive (drive.appdata). The app cannot see your other Drive files.
What we do not do
We do not sell or share your data, show ads, use analytics or crash-reporting services, track your location, read your contacts or messages, or access your photos or files.
Notifications
Reminders (daily entry, EMI due, loan due) are created on your phone. They never contain amounts or full names, and they are hidden on the lock screen.
Permissions the app uses
Internet and network state (Drive backup), notifications (reminders, when you enable them), run at start-up (to restore your reminder and backup schedule), biometric unlock (when you enable it), vibration, and keeping the device awake briefly while a backup runs.
Your choices and deleting your data
- Turn off or disconnect backup: Settings → Backup → Disconnect. You can also delete the Drive backup there.
- Delete everything on the phone: Settings → Erase all data (optionally also deletes the Drive backup).
- Remove access from Google: myaccount.google.com → Security → Third-party access → PocketLedger.
- Uninstalling the app removes the local data. A Drive backup stays until you delete it as above.
Security
Backups are encrypted before they leave the phone. The key is derived from your Google account ID, which Google gives to the app when you sign in. That ID is stable but not secret, so the encryption protects against casual access to the file, not against someone who already knows your account ID. A passphrase option may come later.
Google API Services
PocketLedger's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Children
PocketLedger is not directed at children under 13.
Changes
If this policy changes, the new version will be published at this address with a new date.