🛡️ Privacy First Commitment: SmartGullak is designed with a strict on-device data processing model. We do not operate central database servers, collect raw bank credentials, or sell financial transaction data. Your financial logs are stored locally on your device and backed up securely to your private Google Drive Account space.
1. Google Play Data Safety Disclosures
In accordance with Google Play Store Developer Policies, here is how SmartGullak handles data collection, encryption, and storage:
Data Types Processed: Transaction amounts, merchant names, transaction categories, and date timestamps extracted from device payment notifications.
Encryption in Transit & Storage: HTTPS is strictly enforced for all network calls (`NetworkSecurityConfig`). On-device Room SQLite database records are isolated within private app storage.
Google Cloud Auto-Backup: If enabled on your device, Android OS encrypts and backs up your transaction ledger to your private Google Drive storage space (``), ensuring seamless data recovery upon app reinstallation.
Data Sharing: We do NOT sell, broker, or rent your personal or financial data to third-party advertisers, credit agencies, or data aggregators.
2. App Permissions & Their Justifications
SmartGullak requests specific Android permissions strictly to power its automated tracking and companion features:
Notification Access (`NotificationListenerService`): Required to automatically intercept incoming bank and UPI payment notifications (e.g. GPay, PhonePe, Paytm, HDFC, ICICI, SBI). Transaction details are parsed locally on your device to create expense entries.
Post Notifications (`POST_NOTIFICATIONS`): Used to deliver daily budget check-in reminders, Smart Journey milestone alerts, and budget limit breach warnings.
Internet Access (`INTERNET`): Used exclusively to query the Gemini AI API for generating localized spending advice and loading AdMob production ad units.
SMS Access (`RECEIVE_SMS`, `READ_SMS`): Optional fallback method to parse financial SMS notifications locally when notification access is ungranted. Users can decline SMS access and continue using notification listening or manual tracking seamlessly.
3. Smart Financial Companion Engine & AI Processing
SmartGullak features an on-device AI engine (`SmartCompanionEngine`) that recognizes recurring financial patterns (SIPs, Salary, Rent, Subscriptions) and generates interactive **Smart Journey** events:
All pattern recognition and habit scoring are performed locally on device.
When optional AI financial insights are requested, data sent to the Gemini API is anonymized (e.g., `"Category: Dining, Spend: 1200 INR"`) and excludes personal names or account numbers.
4. Third-Party Libraries & Services
SmartGullak integrates trusted third-party SDKs to support core features:
Google Mobile Ads (AdMob): Displays non-intrusive Native Advance and Rewarded video ads to support free application development. AdMob may collect device advertising IDs in accordance with Google's Privacy Policy.
Google Firebase / Gemini AI: Powers natural language assistant queries and budget roasts under Google API Terms of Service.
5. Data Deletion & User Control
You retain 100% control over your data stored in SmartGullak:
Clear All Local Data: Go to Android Settings ➔ Apps ➔ SmartGullak ➔ Storage ➔ Clear Data to permanently wipe all stored expenses, smart cards, and budgets.
Export CSV Ledger: You can export your full transaction ledger to a CSV file anytime via the Export button on the Transactions screen.
6. Terms of Service
By installing SmartGullak, you agree to the following terms:
Educational Purpose: Financial insights and companion suggestions are generated for informational purposes and do not constitute certified financial or investment advice.
Disclaimer: Automated notification parsing relies on standard notification text formatting from third-party banking apps. Users should periodically verify budget figures.
7. Contact Us
For any privacy inquiries, technical support, or policy questions, please contact: