Privacy Policy

Last Updated: June 10, 2026

Cache ("we", "our", or "us") is dedicated to protecting your privacy. This Privacy Policy describes how Cache: Expense & Money Tracker collects, uses, stores, and handles your financial information when you install and use our mobile application.

1. Privacy Principles & Offline-First Design

Cache is designed from the ground up under a local-first model. We believe your financial data is highly personal. Therefore:

  • We do not operate central developer databases or user-tracking servers.
  • Your financial records, accounts, and budgets are kept exclusively on your physical mobile device.
  • We do not run ads or build commercial marketing profiles based on your records.

2. Collection and Processing of Sensitive Permissions

To automate expense logging, our Android app requires specific sensitive permissions. These are processed as follows:

A. Notification Reading & SMS Capture

If you choose to enable automated tracking, you must grant notification listener permissions. Cache reads incoming notification alerts generated by banking and payment apps (e.g., HDFC, ICICI, SBI, UPI apps) on your device.

  • Local Parsing: The background scanning service extracts text content to identify transaction numbers, debited/credited amounts, and merchants. This parser executes entirely on your device.
  • Privacy Isolation: The app actively filters and ignores all personal messages, verification codes (OTPs), and chats. We never store, read, or transmit non-financial messages.
  • No Server Uploads: The SMS text content is never sent to our servers.

B. Google Account Credentials & Drive Storage

If you enable Google Drive Cloud Sync, the app requests access to your Google account using secure OAuth protocols.

  • Backup Files: The app utilizes this access exclusively to write and pull database backup files to/from a private application-specific directory inside your own Google Drive account.
  • Access Bounds: We do not have access to your general Google Drive files, emails, or personal logs. Your credentials remain sandboxed on your device.

3. Data Storage and Retention

  • All transactions, budget limits, custom categories, and wallet balances are stored in a local SQLite database inside the application's secure container sandbox.
  • If you sign in and enable sync, a backup replica of your SQLite file is stored in your private Google Drive space.
  • We retain this data only as long as you keep the app installed or maintain your Google Drive backups.

4. Data Sharing and Transfer

We do not sell, rent, lease, or share your transaction details, balances, email address, or device information with third-party companies, credit bureaus, or advertising networks under any circumstances.

5. Your Rights & Data Deletion

You have absolute control over your financial data. You can erase all your records at any time:

  • Wiping Local Logs: Inside the app, go to Settings → Data & Backup → click "Delete local data" to wipe all SQLite records immediately.
  • Wiping Cloud Backups: Click "Delete my account & cloud data" to wipe all backed-up files from your Google Drive storage folder and sign out.
  • App Uninstall: Uninstalling the application will delete the local SQLite database container from your phone's sandbox.

6. Security

Your database is protected using your mobile OS sandbox security. Cache supports biometrics authentication (Face ID / Fingerprint / Iris scanners) and a local PIN code to lock screens on app resume or start, ensuring unauthorized physical users cannot view your numbers.

7. Compliance and Disclaimer

Cache does not provide professional financial advice or investment recommendations. All insights, category graphs, and trends are generated from your input data for tracking purposes only.

8. Contact Us

If you have any questions or security concerns regarding this Privacy Policy, please contact us via email at:

contacting us directly through the application settings menu.