Privacy Policy — Finance Tracker

This Privacy Policy explains what information the Finance Tracker app ("the app", "we", "us") — built by Lyvorian Studio — collects, how it is used, and the choices you have. By creating an account and using the app, you agree to the practices described here.

1. Information you provide

Account details — a username and password (your password is stored only as a securely hashed value, never in plain text). An email address is required to create an account. It is used to confirm your account, to reset your password, and to deliver a data backup to you when you request one.
Financial data you enter — expenses, income, budgets, goals, bills, accounts, categories and notes that you choose to record. This is personal budgeting data; the app does not ask for or store bank account numbers, card numbers, or payment credentials.
Convenience sign-in — if you set them up, a numeric PIN and/or a device passkey/biometric credential to make signing in faster. Biometric data itself (fingerprint, face) never leaves your device — it is verified by Android and we only receive a yes/no result.
Pro subscription payments — if you upgrade to Finance Pro, payment is handled entirely by Razorpay; we do not receive or store your card, UPI, or bank details. We only receive a subscription ID and payment status from Razorpay to activate Pro features on your account.

2. Backups sent by email

If you ask the app to email you a backup, it sends your records — expenses, income, trades, budgets and settings — as a plain, unencrypted text attachment to the email address on your account. This is deliberate so that you can read and restore it yourself, but it has consequences you should know about:

The email provider that delivers the message can technically access the attachment.
Your mailbox will normally keep a copy of the message and attachment until you delete it.
Anyone with access to that mailbox can read the file.

If that is not acceptable for your data, use Settings → Data → Download backup to save the file directly instead of emailing it.

3. Information collected automatically

Session & security data — a login session cookie and basic technical data (such as your IP address) used to keep you signed in and to rate-limit sign-in attempts.
Advertising (Google AdMob) — the app displays banner ads through Google AdMob. AdMob may collect your device's advertising ID and related device information to serve and measure ads. See Google's policy: policies.google.com/technologies/ads.

4. Website analytics

The Lyvorian Studio website (lyvorianstudio.co.in) uses GoatCounter to count visits. It is cookieless, it does not track you across sites, and it does not build a profile of you. It records a page path, a referrer, a rough browser and country, and a daily-rotating one-way hash used only to tell repeat visits apart.

This runs on the marketing website only. The Finance Tracker app at app.lyvorianstudio.co.in does not load GoatCounter.

5. Camera and notification access (optional features)

Camera — bill/receipt scanning. If you use the "Scan Bill" feature, the app reads text from a photo you take or choose entirely on your device — no photo is uploaded to our servers. Only the amount, vendor, category, and date you review and confirm are saved to your account; the photo itself is discarded afterward.
Camera — QR/barcode scanning. Used only to read a QR or barcode code you point your camera at. The camera feed is not recorded or transmitted anywhere.
Notification access — UPI payment auto-detect (Android app, optional, off by default). If you turn this on in Settings, the app reads the text of bank/UPI payment notifications on your device to detect the amount and offer to log it as an expense. This uses Android's Notification Listener permission — the app never reads your SMS messages. All detection happens on your device; the raw notification text is never sent to our servers. Only the expense entry you explicitly confirm (amount, category, description) is saved to your account, the same as an expense you'd type in yourself. You can turn this off at any time in Settings, which also revokes the app's notification access.

6. How your information is used

To provide the core service — storing and showing the financial data you enter.
To authenticate you and keep your account secure.
To send a password-reset email if you request one.
To display advertising that helps keep the app free.

We do not sell your personal data, and we do not use your financial entries for advertising or share them with advertisers.

7. Data sharing

Your data is not shared with third parties except:

Google AdMob, for the advertising described above.
Razorpay, to process Finance Pro subscription payments. Razorpay receives your payment details directly and shares back only a subscription ID and payment status — see Razorpay's privacy policy.
Brevo, our transactional email provider, to send account-verification, password-reset, and (only if you use the "email me a backup" feature) backup-file emails. Brevo only sees the recipient address and content of that specific email.
Our hosting provider (Railway), which stores the app's database and runs its servers on our behalf.
FormSubmit, which relays this website’s “Share an idea” form to our inbox. It receives the message you write, and your name and email address if you choose to add them. Nothing is sent until you press Send.
Where required by law.

8. Data storage & security

Your data is stored in the app's database on our hosting provider's servers. All traffic between the app and the server is encrypted in transit using HTTPS, and passwords are stored as salted hashes. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

9. Data retention & deletion

We keep your data for as long as your account exists. You can delete your data at any time from within the app, or request full account and data deletion by contacting us at the address below. Once deleted, your data cannot be recovered.

10. Deleting your account

You can delete your account and its data from Settings → Account → Delete My Account inside the app. If you cannot sign in, the account deletion page explains how to request it by email, what is removed, and what is kept.

Looking for a different product? Habit Kramedha has its own privacy policy.

11. Children

The app is not directed to children under 13, and we do not knowingly collect personal information from them.

12. Your choices

You can reset your device's advertising ID or opt out of ad personalisation in your Android settings (Settings → Google → Ads).
You can edit or delete individual entries, or your whole account, at any time.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

14. Contact

Questions about this policy or your data? Contact us at: support@lyvorianstudio.co.in

15. Grievance Officer

Under India's Digital Personal Data Protection Act, 2023, you may raise a complaint about how your personal data is handled. Complaints go to the Grievance Officer for Lyvorian Studio:

Office: Grievance Officer, Lyvorian Studio
Email: support@lyvorianstudio.co.in — put Grievance in the subject line
Response: acknowledged within 7 days, answered within 30 days

If the answer does not resolve it, you may escalate to the Data Protection Board of India.