Privacy Policy
Vaultra is a personal budgeting app that records your income and expenses on your own device. This policy explains exactly what the app accesses, what it stores, and what it sends elsewhere.
The short version: everything you record stays on your phone. We operate no servers, we have no accounts, and we never receive your financial data.
1. Information the app accesses
Notification content (only if you turn it on)
The app can read notifications so it can turn bank and payment alerts into transactions automatically. This is optional and off by default.
The first 50 automatic imports are free. After that, automatic importing stops until a one-time unlock is purchased — and “stops” means the app stops reading and parsing notifications altogether, not that it keeps reading them and hides the result. Manual entry remains free and unlimited either way.
- Notification access is granted by you in Android’s system settings and can be revoked there at any time.
- Android grants the permission for all notifications, but the app enforces its own allowlist: it only reads notifications from apps you explicitly select on the Sources screen. Every other notification is discarded immediately and is never stored.
- From an allowed notification the app reads the title and body text, and stores the amount, currency, merchant, date, originating app, and the original notification text so you can review and correct what was detected.
- Notification content is never transmitted anywhere. It is written only to the app’s private database on your device.
Transactions you enter
Amounts, categories, notes, dates, budgets, recurring entries, and merchant rules that you create are stored on your device.
Information the app does not collect
The app has no user accounts, no analytics, no advertising, no tracking or advertising identifiers, and no crash-reporting service. We do not collect your name, email address, contacts, location, device identifiers, or usage statistics.
2. Where your data is stored
All data is stored in a private database inside the app’s own storage area, accessible only
to this app. Android system backup is disabled (allowBackup="false"), so your financial
data is not copied to Google Drive or any other cloud backup.
Data is retained until you delete it. Deleting individual entries removes them; uninstalling the app erases everything. If you use the manual backup feature, the backup file is written wherever you choose and can optionally be encrypted with a password you set — that file is yours to manage, and we never receive it.
3. Network connections
The app makes no network connections during normal use. There are exactly three cases where it connects to the internet, and none of them transmit your financial data:
- Exchange rates (optional). If you enable automatic rates, the app requests
published reference rates from
open.er-api.com. This is an anonymous request for a public rate table. No account, no API key, and none of your transactions or notification data are included. You can leave this off and type rates in manually. - Purchases (optional). The one-time unlock for unlimited automatic imports, and any voluntary support payment, are handled entirely by Google Play Billing. We never see or receive your payment details. The app asks Google Play what your account owns so the unlock follows you to a new phone; that check contains no transaction or notification data. Google’s handling of payments is covered by the Google Privacy Policy.
- Feedback (optional, you initiate it). The feedback menu item opens your own email app with a message pre-filled with the app version, device model, and Android version. Nothing is sent unless you press send yourself, and you can edit or delete any of it first.
4. Sharing
We do not sell, rent, trade, or share your data with anyone. There is no third party with access to your transactions or notification content, because that information never leaves your device.
5. Permissions and why they exist
| Permission | Why |
|---|---|
Notification access (BIND_NOTIFICATION_LISTENER_SERVICE) |
Read alerts from the payment apps you select, so transactions can be detected automatically. Optional. |
INTERNET |
Fetch optional exchange rates and process optional support payments. |
POST_NOTIFICATIONS |
Tell you when a transaction was added automatically in the background. |
6. Your choices
- Turn off notification reading at any time in Android Settings → Notification access, or from the app’s Settings screen. The app keeps working for manual entry.
- Choose which apps are read on the Sources screen.
- Delete any transaction individually, or uninstall the app to erase all data.
- Disable online rates to make the app fully offline.
7. Children
The app is not directed at children under 13, and we do not knowingly collect information from them. Since no information is collected at all, there is nothing to delete on request.
8. Security
Data is protected by Android’s per-app storage sandbox. You can additionally require a fingerprint or device PIN to open the app (Settings → App lock). Manual backup files can be encrypted with a password of your choosing. Please note that no method of electronic storage is completely secure, and a rooted or compromised device may expose app data.
9. Changes to this policy
If this policy changes, the updated version will be published at this address with a new “Last updated” date. Material changes affecting how data is handled will also be noted in the app’s release notes.
10. Contact
Questions about this policy or your data: vaultraetsupport@gmail.com