Privacy Policy

Purpose of processing

We process limited information to operate the app, keep it reliable, deliver optional reminders, respond to support requests, show advertising (when applicable), and improve stability through anonymous diagnostics.

Information we collect

• Financial records you enter, such as transactions, accounts, categories, and notes.
• App preferences you choose, such as theme, currency, and reminder settings.
• The time zone and region your device reports. These are read on this device to suggest a default currency and to format dates and amounts. They are not sent to our servers.
• Passcode and biometric unlock settings, stored securely on your device only.
• Receipt photos you attach to transactions, stored on your device.
• Information you choose to send when contacting support, such as your email address and message content.
• If you connect Google Drive backup, the email address, display name, and profile photo of the Google account you choose. These are stored on your device only, so the app can show which account is connected. They are never sent to our servers.
• Device model, operating system version, app version, language, anonymous usage events, crash logs, a push notification token once the app has asked about notification permission, and advertising identifiers used by Google AdMob when ads are shown.

On-device financial data

Money Manager does not require an account. The financial data you record is stored locally in an on-device database and is not uploaded to our servers for storage or synchronization.

Analytics and diagnostics

We use Google Firebase Analytics, Crashlytics, and Performance Monitoring to understand how the app is used and to fix crashes. These services receive technical and usage information only. They do not receive transaction amounts, account names, category names, notes, or receipt images.

Advertising

Money Manager uses Google AdMob to display interstitial ads at natural breaks and banner ads on some secondary browse screens. AdMob and its partners may collect and process device information, advertising IDs, IP address, and interaction data to serve and measure ads. In regions where required (such as the EEA/UK), we collect your consent through Google's User Messaging Platform before personalized ads. You can change or withdraw advertising consent via Privacy options in Settings when that option is available. Learn more in Google's advertising documentation.

Notifications

If you enable reminders, the app schedules local notifications on your device. We may also use Firebase Cloud Messaging for app-related messages. You can turn notifications off at any time in system settings or in the app.

Backups and exports

When you create a local backup, the app writes it to a folder you choose. If you have set a passcode, the backup is encrypted with AES-256-GCM (.mmbak2) and cannot be read without that passcode. If you have not set a passcode, the backup is an unencrypted copy of the app database (.mmbak) — keep it somewhere safe.

Optionally, you can connect a Google account to upload a backup to your private Google Drive app data folder. Drive backups are always encrypted with AES-256-GCM on your device before upload, whether or not you use a passcode. That feature uses Google Sign-In and requests only the drive.appdata scope — it cannot list or read your other Drive files, and the backup is hidden from the normal Drive interface. Receipt photos are never included in a Drive backup.

We do not receive or host your backup files on our servers; Google processes the Drive storage under Google's terms. You can disconnect the account at any time from Settings → Backup, and you can delete the stored backup by removing this app from your Google Account permissions page — see Delete Your Data.

Optional device permissions

• Photo library / gallery access via the system picker, only if you attach receipt images from your library.
• Camera access, only if you choose to take a new receipt photo instead of picking an existing one. Photos you capture are saved on this device and are never uploaded to our servers.
• Storage access on Android 9 and older, only when you choose a folder for backups or exports. Android 10 and newer use the system file picker and need no permission.
• Biometric authentication, only if you enable fingerprint or face unlock for the app passcode.
• Notification permission, only if you enable reminders or other alerts.
• App Tracking Transparency on iOS, only if you allow tracking so ads can be personalized.

Third-party services

We use Google Firebase for analytics, crash reporting, performance monitoring, remote configuration, and push messaging; Google AdMob for advertising; and, if you enable Google Drive backup, Google Sign-In and Google Drive (drive.appdata only) to store encrypted backups in your account. To tell you when a newer version is available, and to occasionally ask whether you would like to rate the app, we use the update and review features built into Google Play on Android and, on iOS, Apple's public App Store lookup and StoreKit. Those checks send only the app's own identifier and your store region — nothing about you or your records — and the app never downloads or installs anything itself; Google Play and the App Store remain the only source of updates. Data sent to these Google and Apple services may be processed in the United States and other countries where they operate. We do not sell your personal information.

Retention and deletion

Financial data remains on your device until you delete it, reset the app, or uninstall. If Google Drive backup is enabled, the encrypted backup stays in your own Google Account until you remove the app's access or delete it yourself. Diagnostic data is retained according to Firebase policies, typically up to 14 months. Advertising data is handled according to Google AdMob policies. You can erase all local app data at any time from Settings → Privacy policy → Delete all my data in the app.

Step-by-step deletion instructions, including what is deleted and what is kept, are on our Delete Your Data page.

Children's and minors' privacy

Money Manager is intended for people aged 16 and over. The app is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has provided us with personal information, contact us at stepuptechnosys@gmail.com and we will delete it.

Your choices and rights

You can review and delete your on-device data in the app. Where required, use Privacy options in Settings to manage advertising consent. Step-by-step instructions are on our Delete Your Data page. For privacy questions or requests, contact us at stepuptechnosys@gmail.com.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the app and on our website. Continued use of the app after an update means you accept the revised policy.