Privacy Policy
The short version
Your financial data lives encrypted on your phone. We don't have a server, so we can't see it, can't recover it, and can't sell it.
- ✓ No account. No email signup. No password registration.
- ✓ No servers. Your transactions never leave your phone — unless you dictate one with voice entry, which uses your phone’s speech service.
- ✓ No SMS reading. No contacts. No location. No analytics on your money.
- ✓ Cloud backup is opt-in and the file is encrypted before upload.
- ✓ Uninstall the app and your data is gone from the phone. If you turned on cloud backup, delete those files from Drive too — see Delete Data.
1. What we don’t collect
Budget Lock never sees your financial data, name, address, phone number, government ID, bank credentials, SMS messages, contacts, photos, location, typing patterns, or in-app behaviour.
2. What we do collect
Free tier ads. Google AdMob serves the ads and sees your phone’s ad ID and basic device info. The "Remove Ads" purchase shuts AdMob off entirely.
Cloud Backup (if enabled). Google passes us your email address to show in the app. Your encrypted file uploads to a private folder on your own Drive.
Crash logs. Stored locally. Nothing is sent unless you tap "Send to support".
Play Store metadata. Google Play records your install and country. We see aggregate counts in Play Console.
Website analytics. There are none. Google Analytics and Google Ads conversion tracking were both removed from this website on 21 August 2026, and nothing replaced them. The site sets no cookies, runs no analytics, and makes no request to any other company when you load a page — you can confirm that in your browser’s Network tab. Our hosting provider keeps a standard web-server access log (IP address, page, time, user-agent) as every host does, which is used to serve the site and spot abuse, not to profile anyone. Nothing your browser stores is a cookie: the site keeps only your light/dark preference, in local storage, which never leaves your device. The app collects none of this either.
Voice entry (if you use it). Speaking a transaction hands the audio to your phone’s own speech recognizer. Android processes it on-device when you have the offline language pack for your language installed, and sends it to Google’s speech service when you don’t. We never receive it either way. Typing a transaction keeps it entirely on your phone.
Currency rates. If you record a transaction in a currency other than your base currency, the app fetches that day’s exchange rate from a public rates service. It sends the two currency codes and nothing else — no amount, no account, no identifier.
Fonts for PDF export. Exporting a PDF in Chinese, Japanese or Korean downloads the font for that script once, from a public font host. It is cached after the first export. Clear it from Settings → About & Support.
3. Cloud backup
Off by default. When enabled, the app uploads encrypted .b365vault files to a hidden folder on your own Google Drive. Google sees ciphertext only.
Without your master password, the backup is unreadable. No one can recover it — and note that your recovery key cannot open a backup on a different phone, because it lives in the original device’s keystore rather than in the file. Keep the password.
4. Ads
Free tier shows AdMob ads. Google’s privacy policy covers ad data. To remove ads entirely, buy the one-time "Remove Ads" purchase via Google Play.
5. Anti-tampering check
The app checks at runtime whether it’s been modified or is running on a compromised device. Anonymous device signals are sent to the security vendor; no money data is included.
6. Children
Not directed at children under 13. We don’t knowingly collect data from anyone under that age. To delete data from a child’s device, see the Delete Data page.
7. Your rights
Your data lives on your device. Access it by opening the app. Export it via Settings → Export Vault. Delete it via Settings → Destroy Vault. Disconnect cloud via Settings → Cloud Backup → Sign Out.
Email support@budgetlock.app for additional requests.
8. Where data lives
- Your phone (encrypted vault, app-private storage)
- Your Google Drive, if Cloud Backup is on (encrypted file, hidden app folder)
- Your clipboard, briefly, if you copy the recovery key (auto-cleared after 30s)
- Google Play (aggregate install and crash counts)
- AdMob (ad-targeting data tied to advertising ID, free tier only)
- Security vendor (anonymous device fingerprint)
- Rates service (currency codes only, when you use a second currency)
- Font host (script name only, on your first Chinese, Japanese or Korean PDF export)
- Your phone’s speech service, if you use voice entry and have no offline language pack installed
9. Changes to this policy
We change the date at the top when we update this page. Material changes get an in-app notice at next launch.
10. Contact
Email: support@budgetlock.app · AAS Codeworks (Riyazuddin Mohammad) · 30/354, Malakapatnam, Machilipatnam, Andhra Pradesh 521001, India · replies within 5 business days.