» SpendWise — Privacy Policy

Effective: 8 August 2026 · Applies to the SpendWise Android app and the SpendWise Hub web dashboard (spendwise.abdulsfresh.in).

1. Who we are

SpendWise is a service of ABSU Mobilities (proprietor: Sumaiya Fatima), Hyderabad, Telangana, India. Contact: support@abdulsfresh.in.

2. What the app does with notifications

If you enable auto-capture, SpendWise uses Android's Notification Listener access to read the text of incoming notifications on your device only, in order to detect bank/UPI transaction alerts (debits, credits, balances) and record them in your local ledger. Specifically:

• Notification content is processed entirely on the phone. It is never uploaded, logged remotely, sold or shared.
• Non-transaction notifications are ignored and immediately discarded.
• You can revoke notification access at any time in Android Settings; the app keeps working with manual entry.

3. What the app stores

Your ledger (expenses, incomes, accounts, categories, subscriptions) lives in a local SQLite database in the app's private storage. It stays there unless you export it or enable a backup feature below.

4. Optional features that touch the network

• Cloud backup (off by default): if you enable it, your ledger JSON is sent over HTTPS to the server you configure — your own server, or a SpendWise Hub account you created. Backups contain your ledger; they never contain notification text beyond the transaction lines you captured.
• Bank-email sync (off by default): if you connect a mailbox, the app performs read-only IMAP over TLS directly from your phone to your email provider, fetching only mail from bank senders you whitelist. Credentials are stored in the Android Keystore on your device. We never see your mailbox or credentials.
• Parser assist (anonymised): when a message can't be parsed, the app may send a masked template to the Hub so parsing can improve for everyone. Before leaving the phone, all digit runs are reduced (amounts, references, phone numbers, account numbers are destroyed) and email addresses are anonymised. The template cannot be traced back to you or your transactions.

5. What the Hub stores (only if you create an account)

• Your email address and a salted password hash (PBKDF2) — for login.
• Your uploaded backups (your ledger), stored per-account, used solely to show you your dashboard.
• Payment activation records (plan and paid-until date). UPI payments are processed by your UPI app and your bank — we never see card or bank credentials.

6. What we never do

• No advertising, no third-party analytics SDKs, no cross-site trackers, no fingerprinting.
• No selling, renting or sharing of personal data with third parties.
• No reading of SMS by the Play Store app. No contact list, location, camera or microphone access.

6A. Public visitor counters

The website creates random browser and tab identifiers to estimate unique browsers and sessions active in the last two minutes. The counter service stores only SHA-256 hashes of those random IDs — no IP address, user agent, ledger data, page history or bank information. Visitor hashes are retained to keep the lifetime total stable; inactive session hashes are deleted after seven days. Clearing browser storage creates a new visitor identifier.

7. Data deletion

• On the phone: Settings → [ DATA ] lets you purge history; uninstalling the app deletes the local database.
• Hub account: email support@abdulsfresh.in from your registered address with the subject "delete my account" — the account, backups and archives are permanently deleted within 7 days, confirmed by reply.

8. Security

All network transfers use HTTPS/TLS. Backups are token-authenticated. Email credentials live in the Android Keystore. Hub passwords are stored as salted PBKDF2 hashes, never in plain text.

9. Children

SpendWise is a financial tool intended for adults and is not directed at children under 13.

10. Changes

If this policy changes, the effective date above is updated and material changes are announced on the dashboard. Questions any time: support@abdulsfresh.in.

— SpendWise · money stays on your phone