Networth & Cashflow Tracker - Privacy Policy

PRIVACY POLICY Networth & Cash Book Android package: com.networthcashbook.app Effective date: 5 September 2026 Last updated: 5 September 2026 1. SUMMARY Networth & Cash Book is a personal ledger. Everything you enter stays on your phone. There is no account to create, no server that receives your records, and no analytics, advertising or tracking of any kind. Two things can leave your phone, and only because you ask them to: a) A backup you choose to save to your own Google Drive. b) A report or backup file you choose to share through your phone's share sheet. The app also fetches public share prices if you use the NEPSE portfolio feature. Those requests carry a share symbol and nothing about you. 2. WHO IS RESPONSIBLE This app is published by an independent developer. For any question about this policy or about your data, write to: [YOUR CONTACT EMAIL] We will answer within 30 days. 3. WHAT THE APP STORES ON YOUR DEVICE The app stores the following in its own private storage on your phone: - Cash book accounts and their entries: amounts, dates and times, notes, descriptions or categories, itemised lines, and account names. - Assets, liabilities, income and expenses recorded on the Networth tab. - NEPSE portfolio holdings, if you import them. - Photographs of bills that you attach to an entry. - Transactions read from your messages that are waiting for you to confirm or dismiss, together with the text of the message each one was read from. - Your settings: date and time format, calendar, currency symbol, theme, period starts, and similar preferences. - A one-way hash of your PIN, if you set one. See section 6. This information is not transmitted to the developer or to any third party. It is readable only by this app, and it is removed when you delete the app's data or uninstall the app. 4. PERMISSIONS, AND WHY EACH IS ASKED FOR READ_SMS and RECEIVE_SMS Purpose. To save you typing, the app can read messages already on your phone from banks and digital wallets, and turn them into suggested transactions. This is the "Import Transactions from SMS" feature. How it works. Reading and interpreting happens entirely on your phone. No message, and no part of a message, is ever uploaded, transmitted or shared with the developer or anyone else. Nothing is added to your book until you confirm it yourself. You can dismiss any suggestion, and you can leave the feature unused, in which case no message is read at all. What is kept. When you confirm a suggested transaction, the text of the message it came from is stored with that entry so you can check the figure against what the bank actually sent. It stays on your phone. CAMERA and PHOTOS or MEDIA Used only when you tap "Add Bills", to attach a photograph of a receipt to an entry. The photograph is copied into the app's private folder on your phone. It is not uploaded. RECORD_AUDIO (microphone) Used only when you tap the microphone in the notes field. The app opens your phone's own speech recognition dialog, which is provided by your device. The app itself does not record, store or transmit audio. It receives only the text that the dialog returns. POST_NOTIFICATIONS Used to show a notification when a new bank message arrives and the app has read a transaction from it, if you have turned on live capture. USE_BIOMETRIC Used only if you turn on fingerprint unlock. Your fingerprint never reaches the app. Your phone performs the check and tells the app only whether it succeeded. INTERNET Used for two purposes, both described in section 5. BLUETOOTH_CONNECT Requested by the speech recognition component so that a connected Bluetooth headset can be used for dictation. VIBRATE Requested by the notification component, so a notification can vibrate according to your phone's own notification settings. The app does not ask for location, contacts, calendar, call logs, or access to files outside its own folder and the bill photographs you choose to attach. 5. WHAT LEAVES YOUR DEVICE Google Drive backup (optional, off by default) If you turn on Drive backup, the app signs you in to your own Google account and saves a copy of your cash book into the application data folder of your Drive. That folder is private to this app. The app asks for access to that folder alone and can neither read nor modify anything else in your Drive. The backup is held in your Google account, not by the developer, who has no access to it at any time. Google's handling of it is governed by Google's own privacy policy. Turning the feature off stops further backups. A copy already saved remains in your Drive until you delete it there. Share prices (only if you use the NEPSE portfolio feature) The app requests publicly available price and dividend pages from Nepali market websites. These requests contain a share symbol. They contain no identifier, no account information and nothing about your holdings. Files you choose to share When you export a PDF or Excel report, or write a backup file, the app hands the file to your phone's share sheet. Where it goes from there is entirely your choice. Nothing is sent anywhere on its own. 6. YOUR PIN If you set a PIN, only a SHA-256 hash of it is written to your phone. The PIN itself is stored nowhere and cannot be recovered by the developer or by anyone else. If you forget it, the only way back into the app is to reinstall it, which erases the data held on the phone. 7. WHAT IS NEVER COLLECTED The app contains no analytics, no advertising, no advertising identifier, no crash reporting and no usage tracking. The developer does not receive your name, your contacts, your location, your device identifiers, your financial records or your messages. No data is sold or shared with any third party, because no data is collected in the first place. 8. KEEPING AND DELETING YOUR DATA Your records remain on your phone until you remove them. You can: - Delete a single entry from within the app. - Use Settings, Danger zone, "Delete Cash Book data" to erase every account and line in the cash book. - Use Settings, Danger zone, "Delete all data" to erase everything the app holds. - Uninstall the app, which removes all of its stored data from the phone. If you enabled Drive backup, deleting data on the phone does not delete the copy in your Drive. Remove that from your Google account, or use "Disconnect Google account" in the app first and then delete the file from your Drive. 9. CHILDREN The app is a general purpose financial ledger and is not directed at children. It collects no personal information from anyone, children included. 10. CHANGES TO THIS POLICY If this policy changes, the updated version will be published at the same address and the "Last updated" date above will change. Material changes will also be described in the app's release notes. 11. CONTACT Questions about this policy, or about your data: [YOUR CONTACT EMAIL]