Privacy policy

Effective 7 October 2026

In short: your transactions, accounts and budgets are stored on your phone, not on our servers. Data leaves your phone only when you use a feature that needs it: AI categorisation, Google Drive backup, sign-in, support messages, purchases, and crash reports. We don't sell data and there are no ads.

This policy explains how Duit Tracker ("the app", "we") handles information. Duit Tracker is made by the Duit Tracker Dev Team. Contact: hello@duittracker.my.

1. Data stored only on your phone

Your ledger (transactions, accounts, categories, budgets, subscriptions, learned rules, attachments and settings) is kept in the app's private storage on your device. We cannot see it.

2. Auto Capture and notification access

If you turn on Auto Capture and grant Android's notification access, Duit Tracker reads notifications from the banking and e-wallet apps you link to an account, to detect payments. Notifications from other apps are ignored. Detection and learned rules run on your phone. Notification text is only sent anywhere if you also turn on AI categorisation (section 3).

3. AI categorisation (optional)

When AI categorisation is on and no learned rule matches a payment, Duit Tracker sends the notification's title and text, your category names, and the detected amount to our server, which asks Google's Gemini model (Google Cloud Vertex AI) to suggest a category and merchant name. When you share a receipt image into Duit Tracker, the image is sent the same way.

Before sending, the app removes account and card numbers, reference numbers, balances, email addresses, phone numbers and one-time codes. Our server removes them again.
We don't store the notification text or image. We keep a count of AI requests per account (used for the monthly allowance), the number of tokens used, and, for signed-in users, your email and name next to that count.
Google processes the request under the Google Cloud terms; see Google Cloud's data processing terms.

4. Your Duit Tracker account

On first launch the app creates an anonymous account (a random ID) so features like the AI allowance and purchases work without signing in. If you sign in with Google, we receive your name, email address and Google account ID from Google through Firebase Authentication.

5. Backups

Android backup: Android may back up the app's database to your Google account and restore it on a new phone. This is a Google service controlled by your phone's settings. Attachments and stored keys are excluded.
Google Drive backup (optional, signed-in users): encrypted backup files are saved to a hidden Duit Tracker folder in your own Google Drive. The encryption key is stored in your Duit Tracker account and is readable only by your account. We can't access your Drive.
Backup files: files you save yourself stay wherever you choose. Files with a password are encrypted; without one, anyone with the file can read it.

6. Support messages

If you send feedback or a support request, we store your messages, your email and name, the app version and Android version, so we can reply.

7. Purchases (Duit Pro)

Subscriptions are sold through Google Play. Google handles payment; we never see your card. We use RevenueCat to confirm your subscription status; it receives your Duit Tracker account ID and Google Play purchase records.

8. Crash reports

If "Send crash reports" is on (Profile → Data & storage), crashes and errors are sent to Firebase Crashlytics with device details (model, Android version, app version). Amounts, numbers, emails and notification text are removed first. You can turn this off.

9. Service providers

Provider	Used for
Google Firebase (Authentication, Firestore, Cloud Functions, Crashlytics)	Account, AI allowance, support messages, backup key, crash reports
Google Cloud Vertex AI (Gemini)	AI categorisation and receipt reading
Google Drive	Your optional encrypted backups
Google Play and RevenueCat	Subscriptions

Servers are in Singapore (asia-southeast1) and Google's global regions.

10. Your choices and deleting your data

Turn AI categorisation, Auto Capture, Drive backup and crash reports off at any time in the app.
Delete your account in the app (Profile → your account → Delete account) or as described on our account deletion page. This deletes your sign-in account, AI usage record, Drive backups and backup key, and your RevenueCat record. Support messages are kept with your name and email removed.
Data on your phone is removed when you uninstall the app or clear its storage.

11. Security

Data in transit is encrypted (HTTPS). Server data is protected by access rules so each account can only read its own records. Optional App lock protects the app with your phone's fingerprint, face or screen lock.

12. Children

Duit Tracker is not intended for anyone under 18, and we don't knowingly collect information from children.

13. Changes

We'll update this page when the app's handling of data changes, and change the date at the top. Significant changes will also be shown in the app.