Privacy Policy

Last updated: 27 June 2026

Paisafy ("the app") is a privacy-first personal finance tracker, published by Doorway Labs ("we", "us", "our"), the data controller responsible for this policy. This policy explains what data the app handles, where it lives, when anything leaves your device, and the choices you have.

The short version: your financial data stays on your phone by default, and the only time information leaves the device is for features you explicitly use.

1. Our approach to privacy

Paisafy is offline-first and local-first. All of your accounts, transactions, transfers, budgets, bills, goals, categories, and settings are stored only on your device, in a local database (Room) and local preferences (DataStore).

Doorway Labs collects nothing. We do not operate a server that collects, stores, or syncs your financial records, there is no Paisafy account to create, and we have no access to your data. We do not sell or share your data, and we use none of it for advertising or analytics.

The only time information leaves your device is when you choose to use an optional feature that needs the network, for example asking the AI to parse a receipt, fetching exchange rates, or saving a backup to a folder you pick. In those cases the data goes directly to the relevant service to perform the task you asked for (a processor acting on your request, such as Google for AI parsing), never to us. These features and the data each one sends are described in Section 3. The app otherwise works fully offline.

2. Data the app stores on your device

All of the following is created and stored locally by you, and never transmitted to us:

Financial records: accounts (including type, currency, color, and balances), transactions, transfers, split payments, budgets, bills, goals, and categories.
App settings: default currency, theme, pinned form defaults, feature toggles, and similar preferences.
Ingestion audit trail: when you enable AI ingestion (Section 3), the app keeps a local log recording the outcome of each incoming SMS or notification, so you can see why it did or didn't create a transaction. Raw ingestion content is redacted in production builds.

You remain in control of this data and can delete it at any time from within the app, or by uninstalling the app.

3. Optional features that use the network

These features are off until you turn them on (or you only trigger them by an explicit action). Each one is the only reason data leaves your device.

3.1 AI parsing and insights (Google Gemini via Firebase AI Logic)

When you use the app's AI features, certain content is sent to Google's Gemini models through Firebase AI Logic (Vertex AI) for processing. Google acts here as our service provider (data processor): it processes this content solely to perform the task you requested and, per its Vertex AI terms, does not use it to train its models or for its own purposes. This applies to:

Smart entry: text you ask the app to parse into a transaction. (An on-device regex fallback is used when offline or when AI is unavailable, and never leaves the device.)
SMS / notification auto-add (Android only): when you link a bank app or SMS sender to an account, the relevant payment message content may be sent for parsing and transfer classification.
Receipt and statement import: receipt images, PDF/image/CSV bank statements, and the text they contain are uploaded for OCR and extraction. Encrypted PDFs are decrypted on-device first.
AI Overview and chat: these are built from an aggregate-only financial snapshot. No raw transactions, account names, SMS content, or location data are included in the snapshot sent for the overview and chat features.

What this means: the analysis/overview features are designed so that only aggregated figures leave the device. The ingestion features (smart entry, SMS/notification parsing, receipt/statement OCR) necessarily send the specific content you are asking the app to parse. Because Google processes this content on our behalf as a service provider (not as an independent recipient), it is not data we share with a third party for their own use. This processing is governed by Google's data-handling terms for Firebase / Vertex AI. We do not store this content on any server of our own.

3.2 Currency and economic data

Exchange rates: the app fetches public, keyless USD-based FX rates from open.er-api.com to convert multi-currency totals. No personal or financial data is sent; only rate data is requested.
Inflation / FX-erosion data: public economic data (e.g. World Bank) is fetched to power real-return insights. No personal data is sent.

3.3 Backup and restore

You can export and import a full JSON backup of your data.
Automatic daily backup (Pro) writes a dated snapshot to a folder you choose once via your operating system's file picker. This can be local storage or a Google Drive folder (both are accessed through the system Documents provider, so the app does not sign in to or directly access your Google account). Backup files contain your financial data and are stored wherever you direct them; their security is governed by that storage location and provider.

3.4 Purchases

Pro is a one-time in-app purchase processed by Google Play Billing. The transaction is handled by Google; we do not receive or store your payment details.

4. Device permissions

The app requests permissions only to support specific features, and only on the platform where they apply:

SMS / Notification access (Android only): to read incoming payment messages for AI auto-add. Used only for accounts you explicitly link.
Location (coarse, opt-in): optionally attaches a recent, cached approximate location to AI-parsed entries. This is off by default and only used if you enable it. Location is stored locally with the transaction and is not sent to us.
Storage / file access: to read statements/receipts you import and to write backups to the folder you select.
Camera / photos: only when you choose to import or share a receipt image.

You can revoke any permission at any time in your device settings; the related feature will simply stop working.

5. Service providers and third-party services

We do not share your data with anyone for their own purposes. The services below come into play only when you use the optional feature that requires them, and they receive only the data needed to perform that specific task, under their own terms.

Service providers (processors acting on our behalf). These process data solely to perform a task you requested, not for their own purposes:

Google (Firebase AI Logic / Vertex AI / Gemini): AI parsing, OCR, and aggregate-based insights/chat. Per Google's Vertex AI terms, your content is not used to train its models.

Independent providers (acting on their own account, under their own terms). These come into play only by your explicit action:

Google Play Billing: processes a Pro purchase if you make one; we do not receive your payment details.
Google Drive: stores your backup only if you choose a Drive folder as your backup destination.
open.er-api.com and public economic-data sources (e.g. World Bank) supply FX and inflation data; no personal or financial data is sent to them.

We do not sell your data, we do not share it with third parties for their own use, and we do not use it for advertising.

6. Data retention and deletion

Because Paisafy (by Doorway Labs) stores your data only on your device and we never receive it, you delete your data directly. There is no account to close and no request to send us.

How to delete your data in the app

Open Paisafy and go to Settings.
Scroll to the Privacy & data section.
Tap Delete all data.
Confirm in the dialog. This is immediate and cannot be undone.

You can also remove everything by uninstalling the app, which deletes its local database and settings from your device.

What is deleted

Delete all data permanently removes every record the app stores on your device, including:

All accounts, transactions, transfers, and split payments.
All budgets, bills, goals, and categories.
The local ingestion audit trail and your app settings / preferences (cleared on delete-all or on uninstall).

What is kept, and for how long

Backup files you exported are not removed by in-app deletion or by uninstalling. They remain wherever you saved them (local storage or the Google Drive folder you chose) until you delete them there.
Your Pro purchase is held by Google Play, not by us; it is tied to your Google account so the unlock can be restored, and is not deleted by clearing app data.
We retain nothing, because we never receive your data. Content you send to Google for optional AI processing is held only transiently to perform that task and is subject to Google's retention policies for Firebase / Vertex AI; it is not used to train Google's models.

7. Your rights under GDPR (EU / UK)

If you are in the European Economic Area or the United Kingdom, you have the rights of access, rectification, erasure, restriction, portability, and objection over your personal data, and the right to lodge a complaint with your local supervisory authority.

In practice, because your financial data is stored only on your device and we never receive it, you exercise most of these rights directly: you can view, edit, export (JSON backup), and delete your data at any time within the app, or erase it entirely by uninstalling. For the optional AI features, the legal basis for processing is your consent, given by choosing to enable and use them. You may withdraw that consent at any time by disabling the feature or revoking the related permission, with no effect on the rest of the app. For questions or any request we can assist with, contact us at the email in Section 12.

8. Your rights under the CCPA (California)

If you are a California resident, you have the right to know what personal information is collected and how it is used, to request deletion, and to not be discriminated against for exercising these rights.

We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising. We do not receive or store your financial data on our servers. It stays on your device under your control, where you can review and delete it directly. To make a request or ask a question, contact us at the email in Section 12.

9. Children's privacy

Paisafy is not directed at children under 13 (or the equivalent minimum age in your jurisdiction) and does not knowingly collect data from them.

10. Security

Your data is stored within your device's app-private storage, protected by your device's own security (lock screen, encryption). Because there is no central server, there is no central store of user data to breach. You are responsible for the security of any backups you export to external locations and of the device itself.

11. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, noted in the app.

12. Contact

For questions about this privacy policy or your data, contact:

Email: doorway.labs@gmail.com