ZenBudget Logo ZenBudget
🗑️ Data Deletion ← Back to App
🔒 100% Zero Data Selling • Play Store Policy Compliant

Privacy Policy

Effective Date: November 2, 2026 • Version 2.7.3 • Application ID: app.zenbudget.app • Developer: Something Labs Tech

🛡️ 1. Executive Summary & Zero-Sale Pledge

At ZenBudget (a software product developed and maintained by Something Labs Tech, package name: app.zenbudget.app), we consider personal financial privacy to be an absolute fundamental human right.

Our Binding Pledge:

  • We NEVER sell, rent, monetize, or lease your personal financial records to third parties, advertising networks, credit bureaus, insurance firms, or data aggregators under any circumstances.
  • ZenBudget operates on a local-first, privacy-by-design architecture: your financial logs, budgets, and transactions are stored encrypted directly on your device, with optional end-to-end encrypted cloud backup via Supabase.
  • We do not read your SMS messages or contacts.
  • You retain 100% ownership of your data with the right to export to CSV/JSON or delete your account anytime.

📂 2. What Information We Collect & Why

We collect only the minimum information necessary to provide you with smart budgeting, expense logging, and receipt analysis:

A. Account & Profile Information

  • Email Address: Used solely for secure user authentication, passwordless magic links / OTPs, and multi-device cloud synchronization through Supabase Auth.
  • Display Name / Preferred Name: Used to personalize greeting screens and AI financial coach messages.
  • Account Creation Date & Last Sync Timestamp: To ensure proper multi-device conflict resolution.

B. Financial Records (User-Entered or Scanned)

  • Transactions & Budgets: Expense amounts, currency, category labels (e.g. Groceries, Rent, Coffee), dates, and optional notes entered by you.
  • Envelope Allocations: Safe daily spending limits and budget allocations calculated to help you prevent month-end debt.
  • Couple / Household Shared Sync: If you connect with a partner using a private sync code, only shared joint transactions and shared categories are mirrored between the two authorized accounts. Personal records remain strictly private.

C. Photos & Camera Access (Receipt & Passbook OCR)

  • Real-Time Camera Capture: Used strictly when you open the AI Scanner to photograph paper bills, retail receipts, or bank passbooks.
  • Ephemeral In-Memory Processing: Scanned receipt images are parsed transiently in volatile memory using Google Gemini AI / OCR to extract merchant names, dates, and totals. Images are NOT used for facial recognition, NOT retained on external public servers, and NOT used to train public AI foundation models.

D. Voice & Microphone Input (Optional)

  • Quick Voice Expense Logging: If you use voice-to-text logging (e.g. "Tea 20 rupees"), audio is processed in real-time via device speech recognition. Raw voice recordings are never stored on remote servers or used for biometric voiceprints.

E. Device & Technical Telemetry

  • Anonymized Diagnostics: Device model, OS version, screen resolution, and crash traces (via standard Android Vitals) to diagnose crashes and maintain app performance.

🚫 3. Information We NEVER Collect or Access

To avoid any ambiguity and protect user peace of mind, ZenBudget explicitly guarantees that we NEVER access, request, or store:

  • ❌ No UPI PINs, NetBanking Passwords, or Card CVVs: ZenBudget uses Android's native deep linking (`upi://pay`) for payments. All authentication happens strictly inside your certified banking or UPI apps (e.g., Google Pay, PhonePe, Paytm, BHIM). ZenBudget never sees or intercepts your banking PINs.
  • ❌ No SMS Inbox Access: We do not request or use the READ_SMS or RECEIVE_SMS permissions. We never scan your private text messages.
  • ❌ No Contact List / Address Book Access: We do not request the READ_CONTACTS permission.
  • ❌ No Precise Location or Background GPS: We do not track your geographic whereabouts.
  • ❌ No Biometric Print Data: Fingerprint and Face Unlock use Android's BiometricPrompt API. Authentication happens exclusively inside your device's hardware Secure Enclave. Biometric templates never leave your phone's processor.

📱 4. Android Device Permissions & Policy Justification

In full compliance with Google Play Developer Policies, here is the clear justification for every runtime permission used by ZenBudget:

Permission Exact Purpose Mandatory?
android.permission.CAMERA Used strictly when you launch the AI Receipt & Invoice Scanner to capture paper receipts. Optional (Only when scanning)
android.permission.READ_MEDIA_IMAGES
READ_EXTERNAL_STORAGE		 Allows you to select an existing photo of a receipt or bank passbook from your photo gallery. Optional (Only when picking photo)
android.permission.USE_BIOMETRIC
USE_FINGERPRINT		 Enables hardware-level App Lock to protect your financial sanctuary against unauthorized physical access. Optional (Can use 4-digit PIN instead)
android.permission.POST_NOTIFICATIONS Used to deliver optional daily expense reminders and monthly spending pace alerts. Optional
android.permission.INTERNET Required to securely communicate with Supabase cloud database (HTTPS/TLS) and AI coach queries. Required for Cloud Sync

🤝 5. Third-Party Service Providers & SDKs

We work with reputable, industry-standard technology providers who adhere to strict data security standards. Each provider processes data according to their respective privacy terms:

🔒 6. Data Storage & Security Safeguards

  • Transport Security: All network communication is strictly enforced over TLS 1.3 / HTTPS encryption. Plaintext HTTP traffic is rejected.
  • Database Row-Level Security (RLS): In our Supabase cloud architecture, database tables are isolated via PostgreSQL Row-Level Security rules. Users can only query and mutate their own authenticated records.
  • Biometric Protection: Biometric authentication is handled by Android's hardware security module (Keystore / TEE), keeping encryption keys inaccessible to third parties and malicious apps.

🗑️ 7. Account & Data Deletion Rights (Google Play Compliant)

You have full autonomy over your data under GDPR, CCPA, and Google Play Data Safety guidelines. You may request complete erasure of your account and records at any time:

Option A: Instant In-App Deletion (Self-Serve)

  1. Open the ZenBudget app.
  2. Navigate to More Tools (or Settings) > Account & Privacy.
  3. Tap "Delete Account" and confirm your choice.
  4. Result: All your local device records, transaction history, categories, and your Supabase cloud user account are instantly and permanently wiped with zero lingering backups.

Option B: Web-Based Deletion Request (Without App Installed)

If you uninstalled the app or lost your mobile device, you can request full erasure via our dedicated deletion portal or email:

👶 8. Children's Privacy (COPPA & GDPR-K Compliance)

ZenBudget is intended for adults and young professionals managing their personal finances. We do not knowingly market to or solicit personal information from children under the age of 13 (or under 16 in the European Union). If we become aware that personal information has been collected from a child without parental consent, we will take immediate steps to delete such data from our systems.

⚖️ 9. Financial Services & Regulatory Disclaimer

ZenBudget is a personal productivity, expense tracking, and envelope budgeting application. In accordance with Google Play's Financial Services Policy:

  • ZenBudget is NOT a licensed bank, non-banking financial company (NBFC), money transmitter, or broker.
  • ZenBudget does NOT provide loans, personal credit lines, peer-to-peer lending, or debt collection services.
  • ZenBudget does NOT offer statutory accounting, licensed investment advice, or tax filing services.
  • All financial projections and AI coach observations are for informational and self-budgeting guidance only.

📬 10. Grievance Redressal & Contact Information

If you have any questions, feedback, or grievance regarding this Privacy Policy or your data rights, please contact our Data Protection Officer:

Privacy Policy • Terms of Service • Account Deletion • Security Architecture • Contact Support