Privacy Policy for Maneki

What we collect

There is no account and no sign-up, and we run no server of our own. To learn how the app is used, so we can fix what gets in people's way, the app sends anonymous usage statistics through Google Analytics for Firebase, described below. Your money records are never sent to us or to anyone else.

Usage statistics

• What is sent: which screens you open and for how long, which features you use and whether they worked (for example "opened from another app", "cancelled", or an error code), the settings you choose, and general information about the device and the app (model, Android version, language, app version, and the country and region derived from the network address). It is tied to a random identifier that Firebase creates for this installation, not to your name, email or phone number. If the app shows ads, Firebase may also read the device's advertising ID, which you can reset or delete in Android Settings, under Privacy, Ads.
• What is never sent: amounts, notes, store names, wallet or book names, or anything read from a receipt. Where an amount or a size matters, only a range is sent (for example "10-50 pages"), never the exact content.
• Google processes this data for us, under the Firebase privacy and security terms and Google's privacy policy. We use it only to understand and improve Maneki; we do not sell it and do not share it with anyone else. It is sent over an encrypted connection and kept for at most 14 months.
• You can turn it off at any time in the app's Settings ("Share anonymous usage data"); from then on nothing more is sent.

Your records stay on your device

• Everything you enter (amounts, categories, wallets, budgets, notes, store names, recurring costs and settings) is stored in the app's private storage, which other apps cannot read.
• That data is excluded from Android backup and device-to-device transfer, so it does not leave the phone that way. It leaves your device only when you export it yourself (a JSON backup or a CSV file) to a place you choose with Android's file picker.
• If you turn on the app lock, your fingerprint or face is checked by Android; the app never sees it. A PIN you set is stored on the device only as a salted, one-way hash.

Receipts

• When you scan a receipt, the text is read on your device by Google's ML Kit text recognition, with models built into the app. The photo and the text read from it are not sent anywhere.
• By default the photo is discarded as soon as it has been read. If you turn on "Keep receipt photos" in Settings, a reduced copy is kept in the app's private storage with the entry, and it is deleted when you delete that entry.
• ML Kit may send Google technical information about its own use (device model and OS version, app package and version, speed, error codes) for diagnostics and usage analytics, over an encrypted connection. It never includes your photos or what was read from them, and Google does not pass it to third parties.

Permissions

• Camera, to photograph a receipt. Asked for the first time you tap the camera; you can always pick an existing picture instead, through the Android photo picker, which shows the app only the picture you pick.
• Notifications, for the optional evening reminder, sent only on days you logged nothing. Run at startup lets the reminder and recurring costs keep their schedule after the phone restarts.
• Internet access, advertising ID and related Android ad permissions are declared by the ads SDK, which needs them to request ads. The app itself does not use the network.

Advertising

The free version shows a banner on the Reports and Calendar screens, and a rewarded video only when you tap to watch one for extra receipt scans. There are never ads while you enter an amount, scan a receipt, open the app, in widgets or in notifications. Premium shows no ads.

Ads are served by Google's Mobile Ads SDK (AdMob). To show and measure ads it may collect your device's advertising ID, general information about the device and the app, an approximate location derived from your IP address, and whether an ad was shown or tapped. Google describes this in its privacy policy and in how Google uses information from apps that use its services. Nothing you record in Maneki is given to the ads SDK. You can reset or delete your advertising ID at any time in Android Settings, under Privacy, Ads.

Where the law requires it, for example in the European Economic Area, the United Kingdom and Switzerland, the app asks for your consent with Google's consent form before any ad is requested. You can change or withdraw your choice at any time from "Ad privacy choices" in Settings.

In US states with their own privacy laws (for example California, Colorado, Connecticut, Virginia and Utah), Google's consent form lets you opt out of the sale or sharing of your personal information for ads, and of targeted advertising. You can make or change that choice at any time from "Ad privacy choices". After you opt out, the app still shows ads, but Google shows them without using that information for personalization.

Purchases

Premium (monthly, yearly or one-time) is bought through Google Play. Google handles the payment; we never see your card or payment details. The app asks Google Play only whether you own Premium, and keeps that answer on the device so Premium works offline.

Retention and deletion

You can delete any entry, book or receipt photo in the app at any time, and uninstalling the app removes everything it stored. The usage statistics are not linked to your identity, so we cannot pick out yours; they are deleted automatically after at most 14 months, and you can stop them at any time from the app's Settings. For any question, write to the contact address above.

Children

Maneki is not directed at children under 13.

Changes

If a future version collects or shares anything more, this policy will be updated before that version is published, together with the app's Data safety section on Google Play.