Privacy Policy

Nafaqati ("we," "our," or "us") values your privacy. This Privacy Policy explains what information our mobile application collects, how it is used, and the choices you have. Our app is designed to work primarily offline with data processed locally on your device.

1. Information We Collect

We collect only what is necessary to provide core functionality and improve stability:

• Transaction data derived from SMS receipts. The app reads incoming SMS receipts to automatically categorize transactions. Only transaction fields (e.g., amount, date, merchant/description) are parsed. Full SMS content is not stored, and parsing occurs on-device. You may disable SMS parsing in system permissions at any time.
• Crash diagnostics (Firebase Crashlytics). Anonymous technical logs may include device model, OS version, and crash traces to help us fix issues. No information about the content of your transactions or personal messages is sent through Crashlytics.
• Local notifications. The app uses local notifications (not remote push) to deliver updates. Notification content is generated on your device and not transmitted to our servers.

2. How We Use Information

• To categorize and display your transactions and budgets.
• To maintain and improve app performance and reliability via crash analytics.
• To send you device-local updates.

We do not sell your data. We do not use your data for advertising or profiling.

3. Data Storage & Security

• Your financial data is stored only on your device in secure local storage. We do not maintain application servers that store your data.
• You can export or delete your data from within the app or by clearing the app’s storage on your device.
• You can create a local backup of your data and restore it later. The data in the backup file is always encrypted for your privacy.
• We implement industry-standard safeguards appropriate for local storage; however, no method of electronic storage is 100% secure. We recommend enabling protection provided by the app, or your device’s lock screen.

4. Third‑Party Services

Aside from Crashlytics, the app does not transmit your data to external services or our servers.

5. Your Choices & Controls

• Permissions: You can revoke SMS read permission at any time in your device settings. Core features may continue to function without automatic categorization.
• Notifications: Manage or disable local notifications in system settings.
• Data access & deletion: View, export, backup, restore or delete your locally stored data through in‑app settings or by clearing the app’s storage.

6. Children’s Privacy

Our app is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information, please contact us so we can take appropriate action.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective” date at the top and make the revised policy available in‑app. Your continued use of the app after changes means you accept the updated policy.

8. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at contact.spendex.team@gmail.com.