MyFinote Privacy Policy

This Privacy Policy explains how MyFinote ("we", "our", or "us") collects, uses, and protects your personal information when you use our mobile application. By using MyFinote, you agree to the practices described in this policy.

1. Information We Collect

• Personal Information: When you create an account, we may collect your name, email address, and country of residence.
• Financial Data: Budgets, transactions, income records, bills, lend & owe records, notes, and custom categories you create are stored exclusively on your device in a local SQLite database. This data never leaves your device unless you explicitly use the Backup & Restore feature or the Google Drive Backup feature.
• Income Data: Income entries you log (source, amount, date, notes) are stored locally on your device and are used solely to calculate net savings, income vs. expense comparisons, and financial summaries within the app.
• Google Drive Data: If you choose to enable Google Drive Backup, the app requests access to your Google Drive account using OAuth 2.0. We request the minimum required scope (drive.file) — this grants access only to files created by MyFinote in your Drive, not to your entire Drive. Your backup file is uploaded directly from your device to your personal Google Drive account; we do not store or access this file on our servers.
• Device Information: We may collect anonymised device identifiers, operating system version, and app version for crash reporting and performance monitoring.
• Usage Data: Aggregated, anonymised analytics (e.g., feature usage frequency) may be collected to improve the app experience.
• Biometric Data: If you enable the Biometric App Lock, verification is handled entirely by your device operating system. We do not collect or store any biometric data.

2. How We Use Your Information

• To create and manage your account and user profile.
• To provide, maintain, and improve all core features of MyFinote — budgets, transactions, income tracking, bills, lend & owe records, notes, categories, and financial analysis.
• To calculate and display income vs. expense summaries, net savings, and financial health scores using the income and expense data you enter.
• To enable Google Drive Backup, where your encrypted backup file is uploaded to your own Google Drive account on your request. We do not access, read, or retain the contents of your backup file.
• To send you on-device notifications (daily reminders, budget alerts, inactivity reminders, backup reminders) — only when you enable them in Settings.
• To personalise your experience — such as pre-selecting your currency and language based on your country.
• To comply with applicable laws and regulations.

3. Data Storage & Security

• All your financial data — including budgets (Monthly, Event, Trip, Custom), transactions, income records, recurring expenses, bills & payments, lend & owe records, notes, and custom categories — is stored locally on your device using SQLite.
• Local Backup: Backup files created via the local Backup & Restore feature are encrypted with a password you set. Without this password the backup cannot be decrypted or restored.
• Google Drive Backup: When you use Google Drive Backup, the encrypted backup file is transmitted securely over HTTPS directly to your Google Drive account using Google's APIs. MyFinote does not retain a copy of this file on any of our servers. The file is only accessible by you through your Google account.
• We strongly recommend using either the local Backup & Restore feature or Google Drive Backup regularly to safeguard your data against device loss or reinstallation.
• If you enable the Biometric App Lock, access to the app is additionally protected by your device biometric or PIN authentication.

4. Third-Party Services

• Authentication: We use Firebase Authentication (Google LLC) for optional email/password login, Google Sign-In, and Apple Sign-In. Please review Google's Privacy Policy.
• Google Drive API: If you enable Google Drive Backup, we use the Google Drive API to upload and manage backup files in your personal Google Drive. Access is granted via OAuth 2.0 using only the drive.file scope (limited to files created by this app). Please review Google's Privacy Policy.
• Crash Reporting: We may use Firebase Crashlytics to collect anonymised crash reports to improve app stability.
• We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5. Guest Mode

• MyFinote can be used without an account in "Guest Mode." In Guest Mode, all data is stored only on your device and is not linked to any user account.
• Google Drive Backup requires a signed-in Google account and is not available in Guest Mode.
• If you later sign in or create an account, your guest data remains on your device and is not automatically migrated to the new account.

6. Lend & Owe — Data Handling

• The Lend & Owe feature lets you record money lent to or borrowed from individuals. Records include the person's name, amount, date, description, and settlement status.
• All lend & owe records — including partial payments, settlement history, and net balance computations — are stored entirely on your device and are never transmitted to our servers.
• These records are for personal reference only and do not constitute legally binding financial agreements.
• Person names and contact references you enter are stored locally and are not used for any purpose other than displaying your records within the app.

7. Data Retention

• Your locally stored data is retained on your device until you uninstall the app or delete it manually.
• Google Drive backup files are retained in your Google Drive until you manually delete them. We have no control over files stored in your Google Drive.
• If you revoke Google Drive access from your Google Account settings, the app will no longer be able to upload or access backup files in your Drive.
• If you delete your account, all associated server-side data (such as authentication credentials) will be permanently deleted within 30 days.
• Locally stored data (budgets, transactions, income records, notes, lend & owe records, bills, categories) is not affected by account deletion unless you also uninstall the app.

8. Your Rights

• Access: You may request a copy of any personal data we hold about you.
• Correction: You may update your profile information (name, email, country, currency) at any time in Settings → Update Profile.
• Deletion: You may delete your account and all associated server-side data by contacting us. You may also revoke Google Drive access at any time via your Google Account settings.
• Portability: You can export all your financial data (including income records and lend & owe history) using the local Backup & Restore feature or Google Drive Backup (password-protected encrypted format).
• Opt-out: You can disable any or all notifications at any time from Settings → Notifications & Reminders.
• Google Drive Access: You can revoke Google Drive access at any time from your Google Account → Security → Third-party apps. This will prevent future backups but will not delete previously uploaded backup files.
• App Lock: You can enable or disable the Biometric App Lock at any time from Settings → Security.

9. Children's Privacy

MyFinote is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe your child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by displaying a notice within the app or by sending an email to the address associated with your account.

Your continued use of MyFinote after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: support.myfinote@gmail.com