Privacy Policy
This Privacy Policy explains how CleverCash (Android Mobile Application) and CleverSplit (Web & Progressive Web Application) handle, protect, and respect your data.
1. Offline-First Personal Finance Architecture
CleverCash is designed from the ground up with a privacy-first, offline-first architecture. Your personal income, daily expenses, accounts, budget limits, transfers, and notes are stored strictly locally on your device in an SQLite database.
We do not host or operate a centralized server holding your personal financial ledgers. We cannot view, monetize, harvest, or sell your personal expenses, financial balances, or transaction descriptions.
2. Authentication & CleverSplit Cloud Sync
When you use CleverSplit (collaborative group bill splitting) or sign in with Google OAuth, the following data is processed via Google Firebase services:
- Google Account Information: Your Google User ID (UID), Email Address, Display Name, and Profile Picture URL. This is used solely to authenticate your identity, display your avatar to members in shared groups, and authorize your Firestore access.
- Group Ledgers: Group names, member lists, expense amounts, split shares, notes, and mutual settlement handshake statuses stored in Google Cloud Firestore.
- Receipt & Bill Images: Photos or attachments you voluntarily choose to link to group expenses. These are downscaled and compressed locally on your device prior to cloud storage and are accessible only to authorized members of that group.
- UPI Identifier (Optional): If you choose to configure a UPI ID in your profile, it is stored to facilitate 1-click peer-to-peer payment deep linking and clipboard copying for group settlements.
3. Google Drive API & Limited Use Disclosure
CleverCash allows users to create automated or manual encrypted backups of their local database to their personal Google Drive account.
Google API Services User Data Policy Compliance:
CleverCash's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Restricted Scope: CleverCash requests access strictly to its own dedicated application data folder (
drive.appdataor app-created files). It cannot read, view, or alter your personal documents, photos, or files outside the CleverCash backup file. - Client-Side Encryption: All database backup files uploaded to your Google Drive are encrypted using AES-256 with your personal backup passphrase. Neither CleverCash nor third parties have access to your decryption key.
- No AI Training or Transfer: Google Drive user data is never used to develop, train, or improve generalized artificial intelligence (AI) or machine learning (ML) models.
4. Device Permissions (Android Native App)
Used strictly for scheduling time-sensitive payment reminders, bill dues, and loan EMI notifications.
Required on Android 13+ to display scheduled payment alerts and peer settlement confirmation notices.
Invoked only when you attach a receipt image or bill proof to an expense or settlement claim.
Used locally to lock the app with your device's fingerprint or Face Unlock. Biometric data never leaves hardware keystore.
5. Anonymous Analytics & Diagnostics
We use PostHog solely to capture high-level, privacy-preserving aggregate metrics:
- Active installation count and application version
- Crash logs and unhandled runtime exceptions to resolve bugs
We strictly do not track financial values, expense amounts, personal notes, contact lists, or transaction categories in any analytics service.
6. Data Retention, Control & Deletion Rights
You have full authority over your data at all times:
- Local Data: You can completely clear your local records at any time by clearing application data in your Android settings or uninstalling the application.
- 15-Day Group Recycle Bin: Deleted groups in CleverSplit are soft-deleted and placed in a 15-day recovery bin, after which they are permanently purged.
- Account & Group Deletion: You can leave any group or request permanent deletion of your profile and associated group records by contacting the developer.
7. Security Measures
All network communications with Firebase and Google services occur exclusively over encrypted HTTPS and WSS protocols. Firestore databases are guarded by strict security rules verifying user authentication (`request.auth != null`) and ensuring users can only read or write to groups where their UID is an active member.
8. Contact Information & Data Controller
If you have questions, privacy concerns, or data deletion requests regarding CleverCash or CleverSplit, please contact: