Android app com.autohisaab.app · Last updated 25 September 2026 · Effective 25 September 2026
Short version: AutoHisaab reads your transaction SMS on your phone, parses them on your phone, and stores the result on your phone. Your messages and your financial records are never uploaded to us or to anyone else. We run no analytics, no ads, and no tracking.
AutoHisaab ("the app") is an offline-first personal expense tracker for Android, published by the developer listed in the Contact section ("we", "us"). This policy explains what the app does with data on your device.
The following is read and stored only in the app's private storage on your phone. It is not transmitted to us, and we have no ability to read it.
| Data | Why |
|---|---|
| SMS messages from banks, wallets and payment services | To detect transactions automatically and save you manual entry. The app scans message text for amounts, merchants, dates and account hints. |
| Transactions, categories, budgets, notes and refunds you record | The core function of the app. |
| App settings and preferences | To remember your choices between launches. |
This data is held in a local SQLite database and in local preference storage. It is deleted when you uninstall the app or clear its data from Android settings.
Creating an account is optional. The app is fully usable in guest mode. If you do sign in or register, the app uses Firebase Authentication (a Google service) and sends your email address and password to Google for that purpose. Firebase Authentication stores your email address and an authentication identifier on Google's servers.
Signing in does not upload your transactions. Your financial records stay on the device whether you are signed in or not. See Google's Firebase privacy documentation and the Google Privacy Policy.
AD_ID permission pulled in by Google Play Services is explicitly removed at build time.| Permission | Purpose |
|---|---|
READ_SMS, RECEIVE_SMS | Read existing and incoming messages so transaction SMS can be parsed on-device into entries. Parsing happens locally; message text is not transmitted. |
USE_BIOMETRIC | Optional app lock using your device fingerprint or face unlock. Authentication is performed by Android; the app receives only a success or failure result and never sees biometric data. |
INTERNET, ACCESS_NETWORK_STATE | Used only for optional account sign-in (Firebase Authentication) and for checking whether a newer version of the app is available on Google Play. |
SMS permissions are requested during onboarding and can be declined or revoked at any time in Android Settings. If declined, automatic detection stops and you can continue adding transactions manually.
The app can export your data to a file and let you share or save it through Android's standard share sheet and file picker. This only happens when you explicitly trigger it. Once you hand a file to another app or service, that file is governed by the receiving app's privacy policy, not this one. Similarly, any file you import is read locally.
The app uses Google Play's in-app update mechanism to check whether a newer version is available. This check is performed by Google Play Services; see the Google Privacy Policy.
Your records are stored in the app's private storage, which Android isolates from other apps. You can additionally enable a biometric or device-credential lock in the app's settings. No system is perfectly secure; keeping your device locked, updated, and free of untrusted apps is an important part of protecting your data.
AutoHisaab is not directed at children under 13, and we do not knowingly collect personal information from them.
The only third-party services involved are Google's, and only in the limited ways described above: Firebase Authentication (optional sign-in) and Google Play Services (app updates and distribution). We do not sell, rent, or share personal data with anyone, because we do not hold it.
Depending on where you live, you may have rights to access, correct, export, or delete your personal data. For on-device data you can exercise all of these directly in the app. For account data, contact us using the address below and we will respond within 30 days.
If this policy changes, the updated version will be posted at this URL with a new "Last updated" date. Material changes will also be noted in the app's release notes.
Questions, data requests, or account deletion: mustafasidhpuri13@gmail.com