Privacy Policy

Thrift ("the app", "we", "us") is an expense-tracking app that reads SMS transaction notifications — bank alerts, credit card confirmations, payment receipts — to help you track spending automatically. This policy explains what information the app collects, how it's used, and how it's stored.

1. Information we collect

1.1 Account information

Signing in and staying signed in runs through Firebase Authentication. Depending on how you sign in:

• Email and password — we collect the email address you provide. Your password is hashed before storage; neither we nor Google can retrieve it.
• Google Sign-In — we receive your name, email, and profile picture from your Google Account.
• Continue as guest — an anonymous, temporary session with no personal information attached.

In every case we also store a unique account ID (UID) generated by Firebase.

1.2 SMS messages

With your permission, the app reads SMS on your device to detect bank and payment notifications. This processing happens entirely on your device. SMS content is never uploaded, transmitted, or shared with us, Firebase, or any third party — the app's only network use is the account sign-in above.

1.3 Transaction data

Transactions detected from SMS, and anything you enter or edit manually — merchant, amount, category, notes, receipt images — are stored in a local database on your device only, never synced to any server by us. A manual backup is written to a file you choose the location for, encrypted with a passphrase only you know.

1.4 What we don't collect

No analytics, advertising SDKs, or tracking of any kind. No contacts, location, call logs, or SMS content beyond what's needed to parse a transaction locally.

2. How we use information

• Account information authenticates you and keeps you signed in.
• SMS and transaction data power the app's on-device features — parsing, categorization, budgets, analytics — for you, and only you.

We never use information to advertise to you, build behavioral profiles, or for anything beyond running the app's features.

3. Data sharing

We do not sell your data or share it for advertising or marketing. The only outside party involved is Google/Firebase, processing account sign-in under Google's Privacy Policy. Your SMS content and transaction data are never sent to Google, Firebase, or anyone else.

4. Permissions we request

• SMS (read/receive) — to detect and parse transaction notifications. Processed on-device only.
• Internet — required only for account sign-in via Firebase Authentication.
• Notifications — to alert you when a new transaction is detected.

5. Data retention and deletion

Transaction data, categories, budgets, and settings remain on your device until you delete them individually, clear the app's data, or uninstall it. Uninstalling permanently deletes this local data, since we don't back it up to any server.

You can delete your account and all locally-stored data yourself at any time: Settings → Account & Privacy → Delete My Account. This immediately and permanently deletes your Firebase account and every transaction, review item, category, budget, and rule stored on your device — it cannot be undone.

6. Children's privacy

Thrift is not directed at children; we do not knowingly collect information from anyone under 13 (or the relevant minimum age in your region).

7. Changes to this policy

We may update this policy as the app changes. Material changes will be reflected here with an updated "Last updated" date.

8. Contact us

Questions about this policy or your data, including account deletion requests: dev.thriftapp@gmail.com