Budget Tracker — Privacy Policy
Last Updated: July 27, 2026
This policy applies specifically to the Budget TrackerAndroid application (“the App”) developed by HJIN Labs. It supplements our corporate Privacy Policy.
1. Information We Collect
Budget Tracker collects the following information when you use the application:
- Account Information: Email address and password (stored as a secure bcrypt hash) when you create an account.
- Transaction Data: Income and expense records you enter manually or capture automatically, including amounts, categories, dates, and merchant names.
- SMS Data (with permission): If you grant SMS permission, the app reads incoming bank SMS messages locally on your device to automatically extract transaction details (amount, merchant, date). This processing happens entirely on-device. Only the extracted numerical transaction data is stored; the full SMS content is never transmitted, stored, or shared.
- Device Information: Android OS version and device model for analytics and crash reporting.
2. Local Data Processing — SMS Parsing
Budget Tracker's SMS auto-capture feature is designed with privacy as a priority:
- 100% On-Device Processing: SMS messages are read and parsed entirely on your device. No SMS content — whether full messages or extracted data — is ever sent to our servers or any third party.
- Limited Scope: The app only reads messages that match known bank SMS patterns. It does not read personal conversations, OTP codes, or any non-financial messages.
- No Storage of Raw SMS: After parsing, only the extracted transaction details (amount, merchant, date, category) are saved locally. The original SMS text is discarded immediately.
- User Control: You can revoke SMS permission at any time through Android system settings. The app will continue to function with manual entry only.
3. How We Use Your Information
We use the collected information solely to provide and improve the application:
- To authenticate your account and secure your financial data.
- To display your financial records, charts, and analysis within the app.
- To sync data across devices when you are logged into your account.
- To improve app stability and fix bugs through anonymized crash reporting.
We do not sell, share, or transmit your financial data to any third party for marketing, advertising, or any other purpose. Your financial information belongs to you.
4. Data Storage and Security
Your data is stored in two locations with strong security measures:
- Locally on your device using Room database (encrypted at rest on supported devices). This is the primary storage for all your financial records.
- Remotely on Supabase cloud servers (us-west-1 region) for optional cross-device sync and backup. Data is transmitted over HTTPS.
Passwords are hashed using bcrypt before storage. We never store plain-text passwords. Financial transaction data is stored in an encrypted Room database on your device.
5. Third-Party Services
Budget Tracker uses the following third-party services:
- Supabase — Cloud database and authentication. Your synced data is stored on Supabase servers in the us-west-1 region.
Budget Tracker contains no advertising SDKs, no analytics SDKs (beyond crash reporting), and no third-party trackers.
6. Data Retention and Deletion
You have full control over your data:
- Local Data: Clear all local financial data by uninstalling the application or clearing app data through device settings.
- Cloud Data: Request deletion of your account and all cloud-synced data by emailing hjinlabs@gmail.com with the subject line “Budget Tracker Data Deletion Request.” We will process your request within 30 days.
7. Permissions
Budget Tracker requests the following permissions:
- SMS (Receive & Read): Used solely to detect and parse bank transaction messages. Processing is 100% on-device. No SMS data is stored or shared. You can revoke this permission at any time.
- Notifications: Used to listen for bank app notifications for automatic transaction capture. This is an alternative to SMS reading.
- Biometric (Fingerprint): Used for optional fingerprint authentication. No biometric data leaves your device; Android's Biometric API handles all authentication securely.
8. Children's Privacy
Budget Tracker is not intended for children under the age of 13. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.