Privacy Policy

Last updated: June 27, 2026

WalletTrack ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal finance tracking application, including our mobile applications for Android and other platforms, our website, and all related services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, and password when you register for an account.
• Financial Data: Expense entries, income records, budget configurations, investment details, bank account information, and credit card details that you manually enter into the Service.
• Profile Information: Profile preferences, display settings, and any additional details you choose to provide.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, session duration, and interaction patterns within the Service.
• Device Information: Browser type, operating system, device type, screen resolution, device model, and unique device identifiers.
• Mobile Device Data: When you use our mobile application, we may collect your mobile operating system version, app version, mobile network information, and time zone.
• Log Data: IP address, access timestamps, referring URLs, and crash or error reports.
• Performance Data: App launch time, crash logs, and diagnostic data to help us identify and fix issues.
• Cookies and Local Storage: We use cookies and browser local storage to maintain your session, remember your theme preference, and improve your experience.

1.3 Information from Third-Party Services

• Google OAuth: If you sign in using Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password.
• Gmail Integration: If you connect your Gmail account, we access specific email messages to automatically extract expense-related information (such as transaction notifications from banks and merchants). We only read emails that match specific financial notification patterns. We do not read, store, or access the full content of your emails beyond what is necessary for expense extraction.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process and display your financial data, including expenses, investments, budgets, and account balances.
• Automatically extract and categorize expenses from connected email accounts.
• Send you periodic summaries and notifications about your financial activity (such as weekly expense summaries).
• Authenticate your identity and secure your account.
• Respond to your requests, comments, or questions.
• Detect, prevent, and address technical issues and security threats.
• Generate aggregated, anonymized analytics to improve the Service.

3. Data Storage and Security

3.1 Where We Store Your Data

Your data is stored on secure cloud infrastructure. We use industry-standard database systems with encryption at rest and in transit. Our servers are hosted in data centers that maintain appropriate physical, technical, and administrative safeguards.

3.2 Security Measures

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL.
• Password Security: Passwords are hashed using industry-standard algorithms (bcrypt) and are never stored in plain text.
• Two-Factor Authentication (2FA): We offer optional two-factor authentication using time-based one-time passwords (TOTP) for additional account security.
• Access Controls: We implement strict access controls and follow the principle of least privilege for all system access.
• Security Headers: We implement Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and other security headers to protect against common web vulnerabilities.

3.3 Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it.

4. Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We use trusted third-party services to host our infrastructure, send emails, and process data. These providers are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
• Protection of Rights: We may disclose information where we believe it is necessary to protect our rights, your safety, or the safety of others, to investigate fraud, or to respond to a government request.
• With Your Consent: We may share information with your explicit consent.

5. Third-Party Services

Our Service integrates with the following third-party services:

• Google Services:For OAuth authentication and Gmail integration. Google's use of your information is governed by the Google Privacy Policy.
• Cloud Infrastructure Providers: For hosting and database services. These providers maintain their own privacy policies and security certifications.
• Email Services: For sending transactional and notification emails (such as weekly summaries and password reset emails).

6. Google API Services User Data Policy

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to the Gmail scopes necessary for extracting financial transaction data from your email notifications.
• We do not use data obtained from Gmail APIs for serving advertisements.
• We do not allow humans to read your email data unless: (a) we have your affirmative consent, (b) it is necessary for security purposes (such as investigating abuse), (c) it is necessary to comply with applicable law, or (d) our use is limited to internal operations and the data has been aggregated and anonymized.
• We do not transfer Gmail data to third parties except as necessary to provide and improve our Service, as required by law, or as part of a merger, acquisition, or sale of assets with prior notice to users.

7. App Permissions

Our mobile application may request the following permissions, each used solely for the purposes described:

• Internet Access: Required to sync your financial data, authenticate your account, and communicate with our servers.
• Network State: To detect connectivity status and provide offline functionality.
• Camera (optional): If offered, to scan receipts or documents for expense entry. Only accessed when you explicitly use this feature.
• Notifications: To send you financial summaries, budget alerts, and security notifications. You can disable notifications at any time through your device settings.

8. Google Play Data Safety

In accordance with Google Play's Data Safety requirements, below is a summary of the data we collect, whether it is shared, and its purpose:

• Personal Information (Name, Email): Collected for account creation and authentication. Not shared with third parties.
• Financial Information (Expenses, Investments, Bank & Card Details): Collected for core app functionality. Not shared with third parties. Encrypted in transit and at rest.
• Email Messages (Gmail): Accessed with your explicit consent for automatic expense extraction only. Not shared with third parties. Subject to Google API Limited Use requirements.
• App Activity (Usage Data, Feature Interactions): Collected for analytics and service improvement. Not shared with third parties.
• Device & App Info (Crash Logs, Diagnostics): Collected for performance monitoring and bug fixing. Not shared with third parties.

All collected data is encrypted during transmission using TLS. You may request deletion of all your data at any time (see Section 10.2).

9. Your Rights — General

9.1 Access and Correction

You can access, update, or correct your personal information at any time through your account settings.

9.2 Data Deletion

You may request deletion of your account and associated data by emailing us at navindarshan2@gmail.com. See our data deletion page for full instructions. Upon receiving a verified request, we will delete your data within 30 days.

9.3 Email Communications

You can opt out of non-essential email communications (such as weekly summaries) through your account settings. Transactional emails related to your account security (such as password reset emails) cannot be opted out of.

9.4 Google Account Disconnection

You may disconnect your Google account at any time through your account settings or through your Google Account permissions page. Disconnecting will stop email-based expense extraction but will not delete previously extracted data.

9.5 Cookie Management

You can manage cookies through your browser settings. Disabling cookies may limit your ability to use certain features of the Service.

10. Rights for Users in the European Economic Area (GDPR)

If you are located in the European Economic Area (EEA), you have the following additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to legal obligations.
• Right to Restrict Processing: You may request that we limit how we use your data.
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to our processing of your personal data for certain purposes.
• Right to Withdraw Consent: Where we rely on your consent for processing, you may withdraw it at any time.

Our legal bases for processing your data include: performance of a contract (providing the Service), your consent (Gmail integration, optional features), legitimate interests (security, analytics), and compliance with legal obligations. To exercise any of these rights, contact us at navindarshan2@gmail.com. We will respond within 30 days.

11. Rights for California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

We do not sell personal information. To exercise your rights, contact us at navindarshan2@gmail.com.

12. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using the Service, you consent to the transfer of your information to these countries.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: navindarshan2@gmail.com
• Data Deletion Requests: Data Deletion Page