In short: everything you record — expenses, income, budgets, savings goals, bill reminders, your PIN hash — is stored only in this app's private storage on your phone. There is no account, no sign-in and no server of ours, so there is nowhere for your figures to go. The only thing in the app that uses the internet is the single banner ad served by Google AdMob (plus Google Play checking for an app update), and an ad request never carries an amount, a category, a note or a balance. Uninstalling the app deletes everything it stored.
1. Who we are
Personal Expense Manager is developed and published by Hemangbhai (Hemang Ratilal Raja), an independent developer in India.
Contact for any privacy question or request: hello@hemangbhai.in · hemangbhai.in
2. What the app stores, and where
All of the following is written to a local database (Room/SQLite) and a local preferences file inside the app's private storage on your device. None of it is sent anywhere by the app.
- Transactions — amount, type (income or expense), category, date, payment method and an optional note or receipt photo.
- Budgets — a monthly limit and optional per-category limits.
- Savings goals — name, target amount, target date and the amounts you add.
- Recurring bills — title, amount, frequency and next due date, used to schedule a reminder notification.
- Categories and payment methods — the defaults plus any you create.
- Settings — theme, currency, language, notification preference, and your profile name and email if you choose to enter them.
- App lock — if you turn it on, a PBKDF2-HMAC-SHA256 hash of your PIN and a random salt. The PIN itself is never stored, and fingerprints never leave the phone: the biometric check is performed by Android, and the app only learns "unlocked" or "not unlocked".
The receipt photos you attach are copied into the app's private folder, not into a shared gallery. Android removes all of it when you uninstall the app or clear its data.
3. What leaves your device
Only two things, and neither of them is your financial data:
| What | Who receives it | What it contains |
|---|---|---|
| The banner ad at the bottom of the main screens | Google AdMob (Google Ireland Ltd / Google LLC) | A standard ad request: the ad unit, coarse device and app information, and — depending on your Android ad settings — your device's advertising ID. It does not contain an amount, category, note, budget, goal, balance or profile detail, because the app sends none of those to the ad SDK. |
| App update check | Google Play | The installed version of the app, so Play can offer an in-app update. This is the Play in-app update library, not a service of ours. |
The ad library is the only reason the app asks for the internet permission. With mobile data and Wi-Fi off the banner simply does not load, and every other feature — including PDF and Excel exports — keeps working.
Your control over ads
You can reset or delete your advertising ID, and turn off ad personalisation, in Android Settings → Google → Ads. Google's handling of ad data is described in the Google privacy & terms page.
4. Permissions, and why each one exists
| Permission | Why |
|---|---|
INTERNET, ACCESS_NETWORK_STATE | Loading the AdMob banner, and Google Play's update check. Nothing else uses the network. |
POST_NOTIFICATIONS | Bill and recurring-payment reminders. Asked for at runtime on Android 13+, and the app works normally if you refuse. |
USE_BIOMETRIC | Unlocking the app with your fingerprint instead of the PIN. Handled entirely by Android. |
RECEIVE_BOOT_COMPLETED | Re-arms the daily reminder job after the phone restarts, so a bill reminder is not silently lost. |
The app does not request location, contacts, SMS, call logs, camera, microphone or broad storage access. Receipt photos are chosen through Android's own photo picker.
5. Backups and exports are files you make
The app can write two kinds of file, and both are created by you:
- Automatic local snapshot — a JSON copy kept inside the app's private storage, so a restore is possible without leaving the device.
- Manual export — a JSON backup, or a PDF/Excel report, saved through Android's system file picker to wherever you choose (Downloads, Drive, a pen drive).
Once you save a file outside the app, that copy is yours and is governed by wherever you put it. We never receive a copy. Uninstalling the app deletes its private storage, so export first if you want to keep the history.
6. What we do not do
- No account, no sign-in, no email collection for sign-up.
- No analytics, crash-reporting or telemetry SDK of any kind.
- No selling, renting or sharing of personal data — we hold none to sell.
- No cloud sync: your records exist on your phone and in files you exported.
- No access to your bank, SMS or UPI messages. Transactions are entered by you, not read from anywhere.
7. Children
The app is a personal budgeting tool intended for adults and is not directed at children under 13. Because no personal data is collected by us, there is nothing for a parent to request deletion of — but if a child has used the app, uninstalling it removes everything stored.
8. Deleting your data
There is no server-side copy, so deletion is entirely in your hands:
- Remove everything: uninstall the app, or use Android Settings → Apps → Personal Expense Manager → Storage → Clear data.
- Remove part of it: delete individual transactions, budgets or goals inside the app; each deletion is immediate and permanent.
- Remove an exported file: delete it from wherever you saved it.
- Advertising ID: reset it in Android Settings → Google → Ads.
If you believe some data of yours is held by us (it should not be), write to hello@hemangbhai.in and it will be dealt with within 30 days.
9. Security
Records are protected by Android's app sandbox: other apps cannot read this app's private storage unless the device is rooted. On top of that the app offers a PIN lock (stored only as a salted PBKDF2 hash) and optional fingerprint unlock. If you enable Android's own device backup, the app's data may be included in that backup — that transfer is performed by Android and your Google account, not by this app.
10. Changes to this policy
If a future version of the app starts doing something new — for example a cloud sync feature — this page will be updated first and the effective date above changed, and the change will be noted in the app's Play Store release notes. Continued use after an update means you accept the revised policy.
11. Contact
Questions, corrections or a data request: hello@hemangbhai.in. The app's own page is hemangbhai.in/personal-expense-manager.html.