Privacy Policy

1. Summary

SpendWise is designed to collect nothing. It has no account system, no analytics, no advertising SDK, and no server of any kind — the app cannot make a network request even if it wanted to, because the Android app manifest does not declare the INTERNET permission. This policy explains exactly what that means.

2. Data we collect

None. Specifically:

• • No account or sign-up, so no name, email, or identity is ever collected.
• • No analytics, crash reporting, or advertising SDKs are included in the app.
• • No usage data, device identifiers, or diagnostics are sent anywhere.
• • No cookies (the app is not a website).

3. What's stored, and where

Your transactions, goals, EMIs/subscriptions, tasks, and settings are stored only on your device, in a local database encrypted at rest with SQLCipher (AES-256). The database passphrase itself is generated on-device and kept in Android's EncryptedSharedPreferences (AES-256-GCM). We — HostSpica — never see this data. It never leaves your device unless you deliberately export a backup or CSV file yourself, to a location you choose.

4. Permissions the app requests, and why

• • Notification access (optional) — only to auto-capture spends from an allowlist of bank/UPI/wallet apps. SpendWise reads a notification's text only from those specific apps, only to parse an amount, merchant, and debit/credit direction out of it. Notifications from any other app — messages, OTPs, promos — are never read, stored, or logged.
• • Post notifications — to show local budget alerts (e.g. nearing your EMI reserve, a goal cap crossed). These are generated and shown entirely on-device.
• • Biometric / device credential (optional) — to lock the app if you enable App lock in Settings. Biometric data itself is handled entirely by the Android OS; the app never receives or stores it.
• • Storage (via the system file picker) — only when you choose to export or import a backup or CSV file. The app does not browse your files outside what you explicitly pick.

The app does not request and cannot be granted general network/internet access.

5. Backup and export files

A backup or CSV file you export is saved wherever you choose to put it (local storage, a cloud drive you control, etc). HostSpica has no access to it and no way to recover it if you lose it.

6. Home-screen widget

The optional widget reads the same local, encrypted data to show your safe-to-spend number — it does not make a network call either.

7. Google Play services used by the app

The app uses Google Play's in-app update and in-app review features. These communicate with the Google Play Store app already installed on your device (not with HostSpica), to check for app updates and to optionally show Google's native review prompt. This is governed by Google Play's own privacy policy, not ours — HostSpica does not receive any data through these features.

8. Third-party sharing

There is nothing to share, because nothing is collected. HostSpica does not sell, rent, or transmit any user data, because none passes through our hands.

9. Children's privacy

This app does not knowingly collect information from anyone, including children, because it does not collect information from anyone.

10. Changes to this policy

If this app's data practices ever change, this page will be updated before that change ships, and the app's in-app version number will reflect it.

11. Contact

Questions about this policy or the app: [email protected]