Privacy Policy
SpendBook is a personal expense tracker for Android. Your records stay on your phone — we run no servers and collect no personal data.
The short version
- Everything you enter — expenses, income, budgets, categories — is stored only on your device.
- There is no account, no sign-in and no SpendBook cloud sync.
- We do not use advertising, analytics, crash-reporting or tracking SDKs.
- Receipt photos are read on your device and are never uploaded.
- Two Google services are involved: Play Billing for Pro purchases, and ML Kit for on-device receipt recognition.
1. Who this policy applies to
This policy covers the SpendBook Android application (“the app”, “we”, “us”). By installing or using the app you agree to the handling of information described here. If you do not agree, please uninstall the app.
2. Information you create in the app
When you record a transaction, set a budget, or adjust a setting, that information is written to the app’s private storage on your device (a local database and preferences file). This can include:
- Expense and income entries: amount, note/merchant, category, date and time, payment method.
- Budget limits, monthly and per-category.
- App preferences such as the selected month and the state of your Pro entitlement.
This data is not transmitted to us or to anyone else. It is readable only by the app, and on modern Android it is also covered by the operating system’s app-sandboxing and device encryption.
3. Camera and the receipt scanner
SpendBook asks for the camera permission only when you open the receipt scanner. With your permission the app can:
- show a live camera preview so you can frame a receipt;
- capture a photo of the receipt, or read one you choose from your gallery;
- run on-device text recognition (Google ML Kit’s bundled text-recognition model) to extract the merchant, total, date and line items.
The photo is written to the app’s temporary cache folder so it can be analysed, and the recognised text is used only to pre-fill the expense form. Receipt photos and recognised text are never uploaded, and no image is added to your gallery. The cache copy is deleted by the system, and you can remove it at any time by clearing the app’s cache in Android settings.
About Google ML Kit. Recognition is performed by Google’s ML Kit SDK. Per Google’s ML Kit terms, processing of the input data happens fully on-device and ML Kit does not send your image or the resulting text to Google servers. The SDK may contact Google to receive bug fixes, updated models and device-compatibility information, and it sends Google anonymous metrics about the performance and utilisation of the API in this app (for example, that recognition ran and how long it took). Google uses those metrics to maintain and improve ML Kit and to detect abuse. That metric data does not include your receipt contents. See Google’s ML Kit terms for details.
You can decline the camera permission and still pick an existing photo from your gallery. If you decline, the rest of the app keeps working normally.
4. Purchases and Google Play Billing
SpendBook Pro is sold as an in-app purchase through Google Play Billing. When you buy a plan:
- the payment is handled entirely by Google Play — we never see or store your card, bank or UPI details;
- Google Play tells the app which product was purchased and when it expires, and the app stores that entitlement locally so Pro features unlock;
- the app re-checks your purchases with Google Play each time it starts, which is how a purchase is restored after a reinstall.
Your use of Google Play is governed by Google’s own privacy policy at policies.google.com/privacy. Google Play may collect purchase and diagnostic information independently of SpendBook; that processing is outside our control.
5. Exporting and sharing
The app can export your transactions as a CSV file. The file is generated on your device and handed to Android’s share sheet, so it goes only where you choose to send it (for example, your email or drive app). We are not involved in, and receive no copy of, that transfer. The share sheet is provided by your device’s operating system and the app you pick is governed by its own privacy policy.
6. Permissions the app requests
| Permission | Why it is needed |
|---|---|
CAMERA |
To show the receipt viewfinder and capture a photo for on-device text recognition. Requested only when you open the scanner; optional. |
INTERNET |
Used by Google Play Billing (purchases and restore) and by the Google ML Kit SDK for its anonymous performance metrics and model updates. SpendBook itself makes no network requests and has no server. |
ACCESS_NETWORK_STATE |
Added by these Google libraries so they can tell whether a network is available. SpendBook does not use it. |
Photos you choose from your gallery are read through Android’s system photo picker, so the app receives access to that single image and does not need broad storage permission.
7. Third-party services in the app
| Service | Purpose | Data it receives |
|---|---|---|
| Google Play Billing | Processing and restoring Pro purchases | Handled entirely by Google Play. The app receives only the product purchased and its expiry. |
| Google ML Kit (bundled text recognition) | Reading receipt photos on-device | Anonymous performance and utilisation metrics. Never your images or the recognised text. |
SpendBook contains no advertising networks, no analytics SDKs, no crash-reporting SDKs and no social-media SDKs.
8. What we do not do
- We do not create user accounts or ask for your name, email or phone number.
- We do not collect analytics, crash logs, device identifiers or location data.
- We do not show ads or use advertising identifiers.
- We do not sell, rent or share your financial records — we never hold them.
9. Retention and deleting your data
Your records remain on your device until you delete them. You can:
- delete an individual transaction from the Activity list;
- clear the scanner’s cached photos from Android’s app-info screen;
- remove everything at once by clearing the app’s storage in Android settings, or by uninstalling the app.
Because we never receive your data, there is nothing for us to delete on our side and no deletion request to send us. Uninstalling the app removes the local database and preferences from your device.
10. Children
SpendBook is a general-purpose personal finance tool intended for adults managing their own money. It is not directed at children under 13, and we do not knowingly collect information from children — indeed we do not collect personal information from anyone.
11. Security
Your data is protected by Android’s application sandbox and, on devices with a lock screen, by device encryption. Because the data never leaves the device, the main risk to it is physical access to an unlocked phone. Keep your device locked and your backups protected.
12. Changes to this policy
If a future version of the app changes how data is handled — for example by adding cloud sync — this policy will be updated before that version ships, and the “Last updated” date above will change. Continued use of the app after an update means you accept the revised policy.
13. Contact
Questions about this policy or about how SpendBook handles data can be sent to shivamrawat829@gmail.com. We aim to reply within seven days.