The financial information you enter or import (accounts, transactions, budgets, goals, categories, subscriptions, investments and similar) is stored on your device in an encrypted local database. By default it does not leave your device.
- SMS and notificationsTo detect bank or payment alerts and suggest transactions. Messages are read and parsed on your device and are not uploaded.
- Camera and photosTo scan receipts, statements or boarding passes.
- LocationTo tag transactions with a place and to suggest a local currency.
- ContactsTo add real people to shared groups.
- MicrophoneFor voice entry, only when you use it.
- Install packagesTo install app updates you choose to download.
Each permission is optional and you can revoke it in system settings; the related feature will then stop working.
- Account and cloud sync (Pro).If you sign in and enable sync, your data is stored in our backend (Supabase) so it can be shared across your devices. Access is restricted to your account.
- Google Drive backup.If you connect Google Drive, the app requests only the
drive.filepermission, which lets it see and manage only the files and folders it creates itself. Backups are encrypted on your phone with your backup password and written to a folder named "SovereignFi Backups" in your own My Drive; the app cannot see or change your other Drive files. Backups made by earlier versions of the app are kept in a private app-data area (drive.appdata), which the app reads only so you can still restore them. You can disconnect at any time (in the app, or in your Google Account under Third-party access) and delete the backups yourself from Drive. - Gmail statement and booking import.If you connect Gmail, the app requests read-only access (
gmail.readonly) to find bank statement emails for import and travel booking confirmations (flights, hotels, trains) to add to your trip itinerary. Statement attachments and booking emails fetched from Gmail are downloaded to your phone and read on your device only. They are not sent to our servers, to any AI service, or to any other third party, and they are not used for advertising, profiling or training of any AI model. Only the transactions you review and accept are saved in the app. You can disconnect Gmail at any time, and you can also revoke access at myaccount.google.com/permissions. - AI features.Some features can use an AI model, which may run on your device or on a server you configure. Content you choose to analyse (for example a statement PDF you pick yourself from your phone) is sent to that model only when you trigger the feature. This never applies to data received from Gmail, which is always processed on your device.
- Exchange rates, map tiles and update checks.The app requests public exchange rates (only currency codes are sent), map tiles, and the latest release information from GitHub. As with any internet request, these include your IP address.
- Local backups.If you choose a folder on your device for backups, backup files are written there, and you are responsible for that folder.
The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is used only to provide the user-facing features described above, is not sold, and is not used for advertising.
The local database is encrypted, sensitive fields can be encrypted before cloud sync, and the app supports screen-capture protection and an app lock (biometric or PIN). No system is perfectly secure, so keep your device updated and protected.
Local data stays until you delete it or uninstall the app. To delete data held in our backend, or to request deletion of your account, email sovereign.fintracker@gmail.com and we will act on the request. Backups you made to your own Google Drive or local folders are yours to delete.
The app is not directed to children under 13 and we do not knowingly collect their data.
We may update this policy; the date above will change when we do.