BudgetBhaiya by Vaju Makwana

Privacy Policy

We believe your financial data belongs to you — and only you. Here's exactly what we do and don't do with it.

Effective: January 1, 2025 Last updated: January 1, 2025 App version: 1.0.0+
🔒 The short version — our core promises
Your SMS data is read on-device only — never sent to our servers
We never sell your data to any third party, ever
Free users' data stays 100% on their device — no cloud
You can delete all your data at any time, instantly
SMS permission is optional — app works without it
No ads tracking, no behavioural profiling
Contents
§ 01

Information We Collect

BudgetBhaiya collects only what is necessary to provide you with expense tracking and budgeting features. We do not collect any data beyond what is listed below.

Data Type Collected Sent to Server Purpose
SMS messages (bank/UPI only) Yes* Never Auto-detect UPI transactions
Transaction data you enter Yes Pro only (backup) Core app functionality
Monthly income / budget limits Yes Pro only (backup) Budget calculations
Device ID Yes AdMob only Free-tier ads (opt-out available)
Crash logs / error reports Yes Firebase Crashlytics App stability improvements
App usage analytics Yes Firebase Analytics Understanding feature usage (anonymous)
Name / email / phone number No Never
Location No Never
Contacts No Never
Camera / microphone No Never

* SMS reading requires explicit permission grant. You can skip this permission and the app will work in manual entry mode.

§ 02

SMS & Bank Data — Detailed

This is the most sensitive aspect of our app, so we explain it in full detail.

Core principle: BudgetBhaiya reads your SMS messages to detect UPI and bank transaction notifications. All SMS processing happens entirely on your device using local code. No SMS content — not even a single character — is ever transmitted to BudgetBhaiya's servers, Vaju Makwana, or any third party.

When you grant the READ_SMS permission, BudgetBhaiya will:

OTP Safety: BudgetBhaiya explicitly filters out OTP SMS messages. We never read, store, display, or process any one-time passwords. Our sender ID allowlist ensures only bank transaction messages are ever processed.

You may revoke SMS permission at any time from Android Settings → Apps → BudgetBhaiya → Permissions. The app will continue to work in manual entry mode after permission is revoked.

§ 03

How We Use Your Data

We use your data only for the following purposes:

We do not use your data for: advertising targeting, selling to data brokers, training AI/ML models, behavioral profiling, or any purpose not listed above.
§ 04

Data Storage & Security

Free users: All data is stored exclusively on your device using Hive, an encrypted local database. Nothing is sent to any server. Uninstalling the app permanently deletes all data.

Pro users: With cloud backup enabled, your complete app data is exported as a structured JSON file and securely stored in Firebase Firestore (Google Cloud, Mumbai region — asia-south1). This backup can be restored to any device you sign in to. Data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.

Data TypeFreeProEncryption
Transaction dataDevice onlyDevice + Firebase JSONAES-256 (Hive) / TLS + AES (Firebase)
Budget & income settingsDevice onlyDevice + Firebase JSONAES-256 / TLS
Savings goalsDevice onlyDevice + Firebase JSONAES-256 / TLS
EMI & bill remindersDevice onlyDevice + Firebase JSONAES-256 / TLS
Family budget dataDevice onlyDevice + Firebase JSONAES-256 / TLS
SMS parsed dataDevice onlyDevice onlyAES-256 (Hive) — never backed up
Bank balance dataDevice onlyDevice onlyAES-256 (Hive) — never backed up
What the backup JSON contains: Your transactions, categories, budget limits, monthly income setting, savings goals, EMI schedules, and family budget slots. It does not contain any SMS content, raw bank messages, OTPs, or account numbers — only the transaction data you have confirmed inside the app.

How backup works: When you tap "Backup Now" or when auto-backup runs (daily for Pro users), the app packages your data into a single JSON file and uploads it to your private Firestore document at backups/{your_user_id}/data. Only you can access this document — it is protected by Firebase Security Rules tied to your authenticated user ID.

Backup history: We keep your last 3 backup snapshots in Firestore under backups/{your_user_id}/history/. This means if a backup is accidentally corrupted, you can restore from an earlier point. History snapshots older than the 3 most recent are automatically deleted.

How restore works: When you sign in on a new device and tap "Restore Backup," the app downloads your JSON file from Firestore, clears local storage, and rebuilds your complete transaction history, goals, EMIs, and settings on the new device. SMS data and bank balances are not restored — they will be re-populated from your new device's SMS messages.

Important: SMS messages, raw bank alert text, OTPs, and your actual bank account balance are never included in the cloud backup. These are read locally on your device only and are never uploaded to any server under any circumstances.

Data retention: We retain your cloud backup for as long as you have an active Pro subscription plus 90 days after cancellation. After that, your Firestore document and all history snapshots are permanently and irreversibly deleted. You can also request immediate deletion at any time (see Section 8).

§ 05

Third-Party Services

BudgetBhaiya uses the following third-party services. Each has their own privacy policy which we link below:

ServiceProviderData SharedPurpose
Firebase Crashlytics Google LLC Crash logs, device info, app version Crash reporting and bug fixing
Firebase Analytics Google LLC Anonymous usage events Understanding feature usage
Firebase Firestore Google LLC Encrypted transaction data (Pro only) Cloud backup
Firebase Auth Google LLC Anonymous user ID (Pro only) Identifying your cloud backup
Google AdMob Google LLC Device ID, ad interaction data Displaying ads (free tier only)
RevenueCat RevenueCat Inc. Purchase receipt, subscription status Managing Pro subscription
Google Play Billing Google LLC Payment processed by Google In-app subscription purchase

We do not integrate with any financial institutions, banks, or payment processors directly. We do not share your SMS data, transaction data, or balance data with any third-party service.

Affiliate links: BudgetBhaiya may show suggestions for third-party financial products (mutual funds, insurance, FDs). Tapping these links takes you to the third party's website or app. We receive a referral commission if you sign up. We never share your BudgetBhaiya data with these affiliates — they only know you clicked a link.
§ 06

Advertising (AdMob)

The free tier of BudgetBhaiya displays banner advertisements powered by Google AdMob. The following applies to ads:

For more information on how Google uses data in its advertising products, see google.com/policies/privacy/partners

§ 07

Subscriptions & Payments

BudgetBhaiya Pro subscriptions are processed entirely through Google Play Billing. Vaju Makwana never sees, stores, or processes your payment card information.

§ 08

Your Rights

You have full control over your data at all times:

To request deletion of any server-side data (crash logs, analytics, cloud backup), email us at the address in Section 11. We will respond within 7 business days and complete deletion within 30 days.

§ 09

Children's Privacy

BudgetBhaiya is intended for users who are 18 years of age or older. We do not knowingly collect any information from children under 18.

If you believe a child under 18 has provided us with personal data, please contact us at the email in Section 11 and we will delete it immediately.

§ 10

Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

Previous versions of this policy are available on request by emailing us.

§ 11

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please reach out:

Vaju Makwana

We're a small indie studio based in Jamnagar, Gujarat, India. We take privacy seriously and respond to every query personally — no bots, no templates.

Email privacy@vajumakwana.dev
Support support@vajumakwana.dev
Address Jamnagar, Gujarat, India — 361001
Response Within 7 business days

This Privacy Policy was written for BudgetBhaiya by Vaju Makwana.
Package: com.vajumakwana.budgetbhaiya · Governed by the laws of India · Jurisdiction: Gujarat, India