Privacy Policy for BachatSync (KharchaBook)

Effective Date: August 16, 2026 | Last Updated: August 16, 2026

            Key Summary: BachatSync is built on a local-first, zero-knowledge privacy architecture. Your financial data is stored locally on your device and encrypted client-side using AES-256 before any optional cloud backup. We never sell, track, or inspect your personal finances.
        

1. Core Privacy Principles

On-Device Local Storage: All accounts, budgets, categories, and ledger entries reside exclusively on your physical phone in a local SQLite database.
Zero-Knowledge Cloud Backups: When backing up to Google Drive or cloud sync, your archives are encrypted on-device with AES-256-GCM. We cannot read or decrypt your data.

2. Permissions & Data Usage

Notification Listener Service: Used to detect and suggest UPI transactions (Google Pay, PhonePe, Paytm, BHIM, Bank SMS). Parsing happens entirely on your device in memory. No notification texts are uploaded to any server.
Camera / Photos (Optional): Allows scanning receipts and bills for transaction attachments. Images remain local to your device.
AI Insights (Optional): If you use natural language input or the AI coach, only non-sensitive query text is sent securely to the AI API to return parsed entries or financial tips.
Firebase Crashlytics: Used for diagnostic crash reporting without any personal or financial information.

3. Data Sharing

We do not sell, rent, or trade your personal data with any third parties, data brokers, or advertisers.

4. Data Retention & Deletion

You have full ownership of your data. You can edit or delete entries anytime within the app. Uninstalling the app removes all local database files. You can delete cloud backups directly from your Google Drive storage.

5. Contact Us

For any privacy inquiries or support, please contact:

Developer: Akash Paswan
Email: akashpaswan1721@gmail.com
GitHub: github.com/akashpaswan1721/KharchaBook