Privacy Policy - FlowBudget

 # FlowBudget — Privacy Policy

**Effective date:** May 2, 2026

**App:** FlowBudget — Smart Tracker

**Developer:** Mohamed Yahyani

This policy explains what FlowBudget does — and more importantly, doesn't do — with your data.

## 1. The short version

FlowBudget is **100% local**. Every transaction, every category, every budget limit you set is stored on your device and **never sent to any server we control**. We do not have a backend. We do not have user accounts. We never see your financial data.

The only data that leaves your device is anonymous information used by two third-party SDKs: **Google AdMob** (which serves the ads that fund the app) and **Firebase Crashlytics** (which sends us crash reports if the app fails). Details below.

## 2. Data we collect ourselves

**None.** We have no servers, no analytics, no profiling. We do not collect your name, email, phone, transactions, amounts, categories, or any personal information.

## 3. Data collected by third-party SDKs

### Google AdMob (advertising)

The ads in FlowBudget are served by Google AdMob. AdMob may collect:

- Your device's **Advertising ID** (a resettable identifier, not your real identity)

- **Approximate location** (city-level, derived from IP address)

- **Device information** (model, OS version, language)

- **App interactions** (which ads you saw, tapped, etc.)

This data is used by Google to serve relevant ads. You can:

- **Opt out of personalized ads** in Android Settings → Privacy → Ads

- **Reset your Advertising ID** in the same place

- Read Google's full ad policy at <https://policies.google.com/technologies/ads>

### Firebase Crashlytics (crash reporting)

If the app crashes, we receive an anonymous report containing:

- **Stack trace** (the technical error)

- **Device model and OS version**

- **App version**

- An **anonymous installation UUID** (not linked to you personally)

This helps us fix bugs. No personal data is included. Read Firebase's privacy details at <https://firebase.google.com/support/privacy>.

Crashlytics is **disabled in debug builds** and only active in release builds installed via Google Play.

## 4. On-device processing (does NOT leave your device)

- **Receipt OCR scanning** uses Google ML Kit running entirely on your device. The photo, the extracted text, and the parsed amount/merchant **never leave your phone**. The temporary photo is stored in the app's cache and overwritten on the next scan.

- **Subscription detection** runs locally on your transaction history.

- **Cashflow forecast, weekly insights, what-if simulator** all compute locally from your local database.

## 5. Permissions

| Permission | Why |

|---|---|

| `INTERNET` / `ACCESS_NETWORK_STATE` | To fetch ads from AdMob and send crash reports to Crashlytics |

| `POST_NOTIFICATIONS` | To show daily reminders and budget threshold alerts |

| `RECEIVE_BOOT_COMPLETED` | To re-arm scheduled notifications after your device reboots |

| Camera (via system intent) | Optional, only when you tap "Scan receipt" |

We do not request location permission, contacts, microphone, or storage.

## 6. Data storage and backup

Your transactions are stored in a local SQLite database on your device. Android's built-in **Auto Backup** may upload an encrypted copy of this database to **your own Google Drive**, not ours. You can disable this in Android Settings → System → Backup.

## 7. Your rights and controls

- **Delete all your data**: Settings → Reset all data (in the app). This wipes the entire database and all settings instantly and irreversibly.

- **Uninstall the app**: removes all local data immediately.

- **Reset Advertising ID**: Android Settings → Privacy → Ads → Reset.

- **Opt out of personalized ads**: same Android Settings page.

We have nothing to delete on our side because we never received anything in the first place.

## 8. Children's privacy

FlowBudget is not directed at children under 13. The app does not knowingly collect data from children. Please do not use FlowBudget if you are under 13.

## 9. International users

The app is available worldwide. The third-party services (AdMob, Crashlytics) are operated by Google LLC in the United States. Your data may be processed in countries with privacy laws different from your own.

## 10. Changes to this policy

We may update this policy as we add features. The "Effective date" at the top will reflect the most recent change. Continued use of the app constitutes acceptance.

## 11. Contact

Questions about this policy or your data?

**Email:** support@coloka.ca

---

*FlowBudget is built around the idea that your money is your business. We mean it.*