Privacy Policy

Purpose of processing

We process limited information to operate the app, keep it reliable, deliver optional reminders, respond to support requests, show advertising (when applicable), and improve stability through anonymous diagnostics.

Information we collect

• Financial records you enter, such as transactions, accounts, categories, and notes.
• App preferences you choose, such as theme, currency, and reminder settings.
• The time zone and region your device reports. These are read on this device to suggest a default currency and to format dates and amounts. They are not sent to our servers.
• Your passcode and biometric unlock settings are stored securely on this device. Whether a passcode or biometric unlock is enabled, and how many digits the passcode has, are included in usage data; the passcode itself never leaves this device.
• Receipt photos you attach to transactions, stored on your device.
• Information you choose to send when contacting support, such as your email address and message content.
• If you connect Google Drive backup, the email address, display name, and profile photo of the Google account you choose. These are stored on your device only, so the app can show which account is connected. They are never sent to our servers.
• Device model, operating system version, app version, language, anonymous usage events, crash logs, a push notification token once the app has asked about notification permission, and advertising identifiers used by Google AdMob when ads are shown.

On-device financial data

Money Manager does not require an account. The financial data you record is stored locally in an on-device database and is not uploaded to our servers for storage or synchronization.

Analytics and diagnostics

We use Google Firebase Analytics, Crashlytics, and Performance Monitoring to understand how the app is used and to fix crashes. These services receive technical and usage information only. They do not receive transaction amounts, account names, category names, notes, or receipt images.

Advertising

Money Manager uses Google AdMob to display interstitial ads at natural breaks and banner ads on some secondary browse screens. AdMob and its partners may collect and process device information, advertising IDs, IP address, and interaction data to serve and measure ads. In regions where required (such as the EEA/UK), we collect your consent through Google's User Messaging Platform before personalized ads. You can change or withdraw advertising consent via Your Privacy Choices in Settings when that option is available. Learn more in Google's advertising documentation.

To show ads and to keep them from repeating too often, Google's ad software and this app store small amounts of data on your device — advertising and session identifiers, how recently an ad was shown, and the consent choices you made. These are not browser cookies, but they do the same kind of job.

The ad-frequency data this app stores is removed when you use Delete all my data. Everything described here, including the consent choices held by Google's ad software, is removed when you uninstall the app; on Android you can also clear the app's storage from your device settings. Your advertising ID belongs to your device rather than to this app, and you can reset or delete it at any time in your device settings.

Google explains what it collects from apps that use its services, and how it uses it, at https://policies.google.com/technologies/partner-sites.

Notifications

If you enable reminders, the app schedules local notifications on your device. We may also use Firebase Cloud Messaging for app-related messages. You can turn notifications off at any time in system settings or in the app.

Backups and exports

When you create a local backup, the app writes it to a folder you choose. If you have set a passcode, the backup is encrypted with AES-256-GCM (.mmbak2) and cannot be read without that passcode. If you have not set a passcode, the backup is an unencrypted copy of the app database (.mmbak) — keep it somewhere safe.

Optionally, you can connect a Google account to upload a backup to your private Google Drive app data folder. Drive backups are always encrypted with AES-256-GCM on your device before upload, whether or not you use a passcode. That feature uses Google Sign-In and requests only the drive.appdata scope — it cannot list or read your other Drive files, and the backup is hidden from the normal Drive interface. Receipt photos are never included in a Drive backup.

We do not receive or host your backup files on our servers; Google processes the Drive storage under Google's terms. You can disconnect the account at any time from Settings → Backup → Google Drive backup. Disconnecting stops the app from reaching your Drive backups but does not delete them; to delete them, open Google Drive on a computer, go to Settings → Manage apps, find Money Manager, and choose Options → Delete hidden app data — see Delete Your Data.

Optional device permissions

• Photo library / gallery access via the system picker, only if you attach receipt images from your library.
• Camera access, only if you choose to take a new receipt photo instead of picking an existing one. Photos you capture are saved on this device and are never uploaded to our servers.
• Storage access on Android 9 and older, only when you choose a folder for backups or exports. Android 10 and newer use the system file picker and need no permission.
• Biometric authentication, only if you enable fingerprint or face unlock for the app passcode.
• Notification permission, only if you enable reminders or other alerts.
• App Tracking Transparency on iOS, only if you allow tracking so ads can be personalized.

Third-party services

We use Google Firebase for analytics, crash reporting, performance monitoring, remote configuration, and push messaging; Google AdMob for advertising; and, if you enable Google Drive backup, Google Sign-In and Google Drive (drive.appdata only) to store encrypted backups in your account. To tell you when a newer version is available, and to occasionally ask whether you would like to rate the app, we use the update and review features built into Google Play on Android and, on iOS, Apple's public App Store lookup and StoreKit. Those checks send the app's own identifier and your store region, and when we fetch update and review settings through Firebase Remote Config, an installation identifier and basic device information — never your records — and the app never downloads or installs anything itself; Google Play and the App Store remain the only source of updates. Data sent to these Google and Apple services may be processed in the United States and other countries where they operate. We do not sell your personal information for money. We do share some information for advertising — see “US state privacy rights” below for what that means and how to opt out.

Retention and deletion

Financial data remains on your device until you delete it, reset the app, or uninstall. If Google Drive backup is enabled, the encrypted backups stay in your own Google Drive until you delete them there, as described under Backups and exports; disconnecting the account does not delete them. Diagnostic data is retained according to Firebase policies, typically up to 14 months. Advertising data is handled according to Google AdMob policies. You can erase all local app data at any time from Settings → Privacy policy → Delete all my data in the app.

Step-by-step deletion instructions, including what is deleted and what is kept, are on our Delete Your Data page.

Children's and minors' privacy

Money Manager is intended for people aged 16 and over. The app is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has provided us with personal information, contact us at stepuptechnosys@gmail.com and we will delete it.

Your choices and rights

You can review and delete your on-device data in the app. Where required, use Your Privacy Choices in Settings to manage advertising consent. Step-by-step instructions are on our Delete Your Data page. For privacy questions or requests, contact us at stepuptechnosys@gmail.com.

US state privacy rights

If you live in California, Colorado, Connecticut, Virginia, Utah, or another US state with a comprehensive privacy law, this section applies to you.

We do not sell your personal information for money. We do share some information with Google and its advertising partners so that the ads you see can be selected based on your activity across different apps and sites. California law calls that “sharing for cross-context behavioural advertising”; other states call it “targeted advertising”. We treat what we do as falling under those definitions, so that you get the opt-out rights that come with them.

Shared for advertising: identifiers (your device's advertising ID, and on iOS the IDFA when you allow tracking), your interactions with the app and with ads, technical and diagnostic information about your device, and an approximate location derived from your IP address.

Not shared for advertising: the transactions, accounts, categories and notes you enter, your receipt photos, and the contents of your backups and exports. We never send your financial records to an advertising network, and we do not hold them ourselves. A copy of your records leaves this device only when you choose to move it — an encrypted backup into your own Google Drive app data folder, a backup file saved to a folder you pick, or a spreadsheet or receipt image you export and share. We do not receive or read any of those.

To opt out of targeted advertising:

• In the app, open Settings → Your Privacy Choices and choose to opt out. This entry appears when Google's consent tool determines that a choice is required for your region.
• On iOS, decline Allow Tracking when the app asks, or switch Money Manager off under Settings → Privacy & Security → Tracking.
• On Android, turn on Delete advertising ID in Settings → Google → Ads, or opt out of ads personalisation on older versions.

Opting out does not remove ads. It means the ads you see are not selected using the information above.

You can also ask us to confirm what personal information we hold about you, to provide a copy of it, to correct it, or to delete it. Almost everything this app records never leaves your device, so the fastest route is inside the app: Settings → Privacy policy → Delete all my data erases your local records immediately. For anything else, email stepuptechnosys@gmail.com. If we decline a request, you may appeal by replying to our response, and we will tell you the outcome and our reasons.

We will not discriminate against you for exercising any of these rights, and we do not knowingly sell or share the personal information of anyone under 16.

If you are in the UK, the EEA, or Switzerland

Money Manager is published by StepUp Technosys, which you can reach at stepuptechnosys@gmail.com. We are the controller for the limited information described in this policy. We are not a controller for the financial records you enter — those stay on your device and we never receive them.

Google processes some of this information in the United States and other countries. Google states that it relies on the European Commission's Standard Contractual Clauses, together with the UK addendum where that applies, and on its certification under the EU–US Data Privacy Framework. Ask us and we will point you to Google's current terms.

Diagnostic and analytics data is retained by Google according to Firebase's retention settings, currently up to 14 months. Advertising data is retained by Google under its own policies. Your financial records stay on your device until you delete them.

Why we use your information, and on what legal basis:

• Usage data (analytics, crash reports and performance timings, through Firebase): your consent, given in the consent form. You can withdraw it in Your Privacy Choices, or by turning off Share usage data in Settings.
• Advertising through Google AdMob: your consent, given in the same form and withdrawn in Your Privacy Choices.
• Push messaging registration: your consent, as for usage data.
• Update checks, rating prompts and app settings from Firebase Remote Config: our legitimate interest in keeping the app secure, current and working.
• Google Drive backup: to provide the backup you ask for, under our agreement with you. We never receive the backup or your account details.
• Emails you send us: our legitimate interest in answering you.

You can ask us for a copy of your personal information, to correct it, to delete it, to restrict how we use it, or to receive it in a portable form. Where we rely on your consent — as we do for advertising, usage data and push messaging — you can withdraw it at any time under Settings → Your Privacy Choices, without affecting what we did before you withdrew it. Email stepuptechnosys@gmail.com and we will respond within one month.

You have the right to object. Where we use your information on the basis of our legitimate interests, you can object at any time — tell us at stepuptechnosys@gmail.com and we will stop unless we have compelling grounds that override your objection. You can also object at any time to the use of your information for direct marketing, including personalised advertising; for advertising you can do this yourself under Settings → Your Privacy Choices.

If you think we have handled your information badly, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk). In the EEA it is the authority for the country where you live or work; you can find yours at edpb.europa.eu.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the app and on our website. Continued use of the app after an update means you accept the revised policy.