Privacy Policy

This policy explains exactly how Daily Kharcha handles information. It is written to describe what the app actually does — every claim below reflects the released app and can be checked against the permissions it declares on Google Play.

1. Who is responsible for your data

Daily Kharcha is developed and published by Kashif Ramzan, an independent developer. For the limited processing described in this policy, that individual is the data controller. You can make contact at any time at kashiframzan2002@gmail.com.

2. Information you enter, which stays on your device

The app stores the following in a local database on your phone. None of it is transmitted to us, and we have no ability to read it:

• Expenses and income — amount, category, date, optional note, and transaction type
• Monthly budget limits, per category
• Lending records (udhaar) — the person’s name, an optional phone number, amount, direction (lent or borrowed), dates, notes, and any part-payments recorded
• Installments (qist) — plan name, amounts, schedule, and payments recorded
• Committee (BC) records — committee name, contribution amount, frequency, start date, member names, optional member phone numbers, payout positions, and which rounds each member has paid
• Savings goals, recurring transactions, and any custom categories you create

The app also stores your preferences on the device: chosen language, theme, currency, daily reminder time, and App Lock settings.

Information about other people

Some features let you record the name and phone number of other people — for example someone who owes you money, or the members of your committee. Please note:

• The app never reads your phone’s contact list. It does not request contacts permission and cannot access it. Any name or number in the app is one you typed in yourself.
• That information is stored only on your device, exactly like the rest of your data.
• You are responsible for the information you record about other people, and for handling it appropriately — including if you choose to share a backup file that contains it (see section 5).

3. Information collected by Google AdMob

The app includes the Google AdMob advertising SDK, which keeps the app free. Google collects information automatically for that purpose, which may include:

• Your device’s advertising identifier (Advertising ID) — a resettable identifier
• Your IP address, and an approximate, non-precise location derived from it
• Device type, model, operating system version and language
• Your interactions with advertisements, such as impressions and clicks

Google uses this to serve and measure advertising, and may share it with its partners. What Google does with it is governed by Google’s Privacy Policy and How Google uses information from apps that use its services. We do not receive, see, or store any of this information ourselves, and we never send your financial records to Google or to any advertiser.

Your consent choices

If you are in the European Economic Area or the United Kingdom, the app asks for your consent before any personalised advertising takes place. This is handled by Google’s User Messaging Platform, which shows a consent form the first time you open the app and remembers your answer.

You can change or withdraw that consent at any time from Settings → Privacy → Ad privacy options inside the app. Withdrawing consent does not disable the app or remove any of your data — advertising simply becomes non-personalised.

Outside the EEA and the UK no consent form is required, so none is shown. You can still limit ad personalisation through your device settings, as described in section 10.

4. Permissions the app requests

This is the complete list of Android permissions in the released app, and why each one exists:

The app does not request access to your contacts, precise location, camera, microphone, SMS messages, or call logs. It does not request storage permission — saving a backup or a PDF uses the system file chooser, which grants access only to the single file you pick.

5. When data leaves your device — and only when you choose

Three features send data outward. Each one requires you to start it deliberately:

Backup files

When you create a backup, the app writes a JSON file to temporary storage on your device and then hands it to the Android share sheet, where you choose the destination — WhatsApp, email, Google Drive, or your own file storage. We never receive it. Restoring a backup is likewise a purely local operation between the app and the file you select.

PDF reports

PDF exports are generated on your device and shared the same way, through the system share sheet, to a destination you choose.

WhatsApp reminders

When you tap the reminder button for a lending record or a committee member, the app opens WhatsApp with a pre-written message and, if you saved one, that person’s phone number. The message is sent by you, from your own WhatsApp account. Once WhatsApp opens, that is handled entirely by WhatsApp under its own privacy policy. The app does not send anything by itself and does not send messages in the background.

6. App Lock and your PIN

If you enable App Lock, your PIN is never stored as plain text. It is combined with a random salt and stored only as a SHA-256 hash on your device, which is used to check the PIN you type. If you enable biometric unlock, verification is performed by Android — the app never sees or stores your fingerprint or face data. Neither the PIN nor any biometric data is included in backup files.

7. Home screen widget

If you add the optional home screen widget, the app writes your current balance and today’s total to the widget so Android can display them. This stays on your device and is not transmitted anywhere.

8. Data retention and deletion

Because we never receive your records, there is nothing for us to retain or delete on our side. Your data stays on your device for as long as you keep the app. You can remove it at any time:

• Clear all data in the app’s settings permanently deletes your records from the local database.
• Uninstalling the app causes Android to delete the app’s database along with it. This cannot be undone by us, and we cannot recover it for you — keep a backup first if you want to preserve your records.
• Backup or PDF files you previously shared are wherever you chose to put them, and must be deleted by you.

Information collected by Google for advertising is retained by Google under its own policy. You can reset your Advertising ID at any time in your device settings.

9. Children’s privacy

The app is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information through the app, please contact us and we will act on it.

10. Your rights in the EEA and the United Kingdom (GDPR)

If you are in the European Economic Area or the United Kingdom, data protection law gives you rights over personal data relating to you. Because your financial records never reach us, these rights are relevant mainly to the advertising information described in section 3.

Legal basis. Where advertising involves personal data such as your Advertising ID, the basis is your consent, which you may withdraw at any time. Where advertising is limited to what is strictly necessary to deliver a non-personalised advertisement, the basis is our legitimate interest in keeping the app free of charge.

You have the right to:

• Access the personal data held about you, and to receive a copy
• Have inaccurate data corrected
• Have data erased
• Restrict or object to processing, including objecting to profiling for advertising
• Data portability
• Withdraw consent at any time, without affecting processing already carried out
• Lodge a complaint with your national data protection authority

To withdraw consent, open Settings → Privacy → Ad privacy options in the app at any time; this reopens the same consent form you saw on first launch. You can also reset or delete your Advertising ID and opt out of ad personalisation in your device settings (Settings → Google → Ads), and you may contact Google directly using its privacy policy. You are welcome to write to us at the address in section 13 and we will help as far as we are able. For any data still on your device, you remain in direct control of it and can delete it as described in section 8.

International transfers. Google may process advertising data outside your country, including in the United States, using the safeguards described in Google’s privacy policy.

11. Your rights in California (CCPA / CPRA)

We do not sell your personal information for money. However, sharing an advertising identifier with an advertising network for cross-context behavioural advertising may be treated as “sharing” under California law. California residents have the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of such sharing, without being discriminated against for exercising those rights.

To opt out: disable ad personalisation in your device settings (Settings → Google → Ads → Opt out of Ads Personalisation), or reset your Advertising ID. You may also contact us at the address in section 13.

12. Changes to this policy

We may update this policy as the app changes. The “Last updated” date at the top will always reflect the current version, and significant changes will be mentioned in the release notes on Google Play.

13. Contact

Questions, requests or concerns about this policy are welcome: