1. Data We Collect

• SMS messages (read-only) to detect bank transactions on your device.
• Transaction details: amount, merchant, category, date.
• Profile information you provide: name, income band, city, life stage.
• App usage data: goals, budgets, behavior score.

1B. Notification Access (Optional)

We request notification listener access to capture real-time payment confirmations from UPI wallet apps (Paytm, MobiKwik, Amazon Pay, etc.).

• This captures only payment notifications, not personal messages.
• Used solely to identify merchant name where SMS does not include it.
• This permission is optional — app works without it but merchant detection may be limited for wallet transactions.
• You can revoke this at any time from Android Settings → Special App Access → Notification Access.

1C. Email Access (Future)

A future version may optionally connect to your email to parse monthly bank statements.

• This will require explicit consent and can be disconnected at any time.
• We will never read emails outside of financial statement detection.

2. How We Use Your Data

• To parse and categorize your financial transactions.
• To generate personalized spending insights and nudges.
• To calculate your behavior score and peer benchmarks.
• To power the coin and reward system.

3. Data Storage

• All transaction data is stored locally on your device.
• If you choose to sync, data is encrypted and stored on secure servers.
• We do not sell your data to any third party. Ever.

4. SMS Permission

• We request read-only SMS access solely to detect bank transaction alerts.
• We do not read personal conversations.
• We do not transmit your SMS content to any server.
• You can revoke this permission at any time from Android settings.

5. Peer Benchmarking

• Spending comparisons use fully anonymized, aggregated cohort averages.
• No individual user's data is ever exposed to another user.

6. Third-Party Services

• We may use affiliate partners (insurance, mutual funds) to surface relevant financial recommendations. These partners have their own privacy policies.
• Google AdSense may show contextual ads on reward screens.

7. Data Deletion

• You can delete your account and all associated data at any time from Settings → Delete Account.
• Deletion is permanent and irreversible.

8. Children

Spenlytics is not intended for users under 18 years of age.

9. Changes

We will notify you of material changes via in-app notification.