Privacy policy

Your ledger never leaves your phone.

myXpns is a personal money ledger for Android. This page explains, in plain terms, what the app does with your information — which, for the most part, is keep it on your device and nowhere else.

  • Effective
  • Applies tomyXpns for Android
  • Published byPingala Solutions (“we”, “us”)

In short

We don't have a copy of your data.

  • Kept on your device

    Every transaction, account, budget and setting lives in the app's private storage. Ledger details are never sent off your phone.

  • SMS parsed on the phone

    Bank alerts are read and interpreted on your device, from senders you list. Messages from people are discarded unread.

  • Backups locked with your passphrase

    AES-256 encrypted, and only leave the app if you save the file somewhere yourself.

  • No server, no accounts

    Nothing receives your data. No sign-up, no advertising, no analytics, no third-party SDKs collecting anything.

01

What the app stores, and where.

Everything below is stored only on your phone, inside the app's private storage — which Android does not let other apps read.

  • Transactions

    Amount, date, money in or out, merchant or counterparty, category, the account it belongs to, and any note you add.

  • Accounts

    The names you give them and — where a bank message includes them — the last few digits of an account or card number, used to match messages to the right account.

  • Categories, budgets & merchant rules

    Including the category myXpns has learned to suggest for a merchant.

  • Captured bank messages

    For a transaction that came from an SMS, that message's text and the bank's sender ID are kept alongside it, so you can check what was read. Transactions awaiting review are stored the same way.

  • Settings

    Your preferences — which senders to read, the day your month starts, your currency, and whether balances are hidden.

None of this is transmitted to us or to anyone else. We cannot see it, and we do not hold a copy of it.

Never collected

  • Your name, email address or phone number
  • Contacts, location or photos
  • Device identifiers
02

SMS messages.

myXpns can fill in your ledger from the transaction alerts your bank sends by SMS. Two permissions are involved, each for one job.

When capture is on Reading new messages

RECEIVE_SMS — lets the app look at an incoming message as it arrives, subject to the rules below.

Only if you ask Importing past messages

READ_SMS — requested only when you open Import past messages in Settings. Used for that import alone; revoke it afterwards if you like.

A message is looked at only if both are true
  • It comes from a sender you have listed in Settings — for example, a sender ID containing hdfc
  • It does not come from a personal phone number
A transaction from a listed sender Read and parsed on your phone. It is never sent anywhere to be interpreted.
Everything else Messages from people are discarded unread. One-time passwords, offers and balance reminders are not saved.

You can turn SMS capture off, change the senders it reads, or revoke either permission at any time — from the app's Settings or from Android's.

SMS data is processed securely, only on your device. It is never uploaded, sold, or shared with us or anyone else, and is used only to create transactions in your ledger.

03

Notification access.

Currently switched off

The app's manifest declares a notification listener, which Android lists as a capability. The app does not ask for notification access and does not read your notifications. If a future version uses it, it will follow the same rules as SMS capture, on the device only — and this policy will be updated first.

04

Internet access and app updates.

myXpns declares Android's INTERNET permission for one reason: to tell you when a newer version is available. It does this by asking the Google Play Store app on your phone, which checks with Google Play. The part of the app that performs the check has no access to your ledger.

What the update check involves The app's package name and installed version — which Google Play already knows for any app it installed.
What is never included Transactions, balances, accounts, categories, merchants or messages.

Google Play's handling of that request is governed by Google's Privacy Policy.

If you have chosen to share usage and diagnostics data with app developers in your Android or Google Play settings, Google may give us aggregated crash and performance statistics through the Play Console. These contain no ledger data, and myXpns itself includes no crash-reporting or analytics software.

05

Backups.

You create Encrypted backups

Exported from Settings and encrypted on your phone with AES-256, using a passphrase you choose. You pick where the file goes with Android's file picker. If that's a cloud storage service, its terms apply to the file — but without your passphrase, neither they nor we can read it.

Android Automatic backup

myXpns excludes all of its data from Android's automatic backup to your Google account, so your ledger is not copied to Google Drive. On Android 12 and later, if you copy your old phone to a new one during setup, Android may carry the ledger across directly.

We never receive your passphrase, so we cannot recover a backup if you forget it.

06

Other on-device features.

  • Notifications

    Budget, recurring-bill and capture alerts are created on your phone. They are not push messages from a server.

  • App lock

    Your fingerprint or face is checked by Android. myXpns learns only whether the check succeeded — never any biometric data.

  • Home-screen widget

    Shows your balance where anyone holding your phone can see it. Turn on Hide balances to mask amounts in the app and the widget.

07

Sharing and selling.

We do not sell, rent, or share your information — including SMS messages or any data derived from them — with anyone, because we never receive it.

There are no advertising partners, data brokers, or third-party SDKs that collect data in the app.

08

Keeping and deleting your data.

Your data stays on your phone until you delete it. There are three ways to do that:

  1. One item at a time

    Delete individual transactions, accounts or categories in the app.

  2. Settings → Reset data

    Clear your accounts, your ledger, or the review queue.

  3. Uninstall

    Removing myXpns removes all of its data from your phone.

Encrypted backup files you have saved elsewhere are not affected — delete them where you stored them. Because we hold no copy of your data, there is nothing for us to delete on our side, and no account to close.

09

Security.

Your ledger is protected by Android's app sandbox. You can add a biometric app lock and hide balances on screen. Backups are encrypted with AES-256-GCM using a key derived from your passphrase. No method of storage is perfectly secure, so keep your phone protected with a screen lock.

10

Children.

myXpns is intended for adults and is not directed at children. We do not knowingly collect information from anyone, including children.

11

Changes to this policy.

If this policy changes, we will update it here and change the effective date at the top. If a change affects what leaves your phone, the app will tell you when the change takes effect.