Fresh Budget — Privacy Policy

Effective date: 20 August 2026
App: Fresh Budget (com.freshbudget.app)
Developer: Mir Hamza Imtiaz, an individual developer
Contact: mirhamzaimtiaz@gmail.com


The short version

Fresh Budget does not collect anything about you. There is no account to create, no server to sign in to, and no analytics SDK. Every transaction, account balance, budget, savings goal and zakat record you enter, or that the app reads from your bank notifications, is written to a database inside the app's own private storage on your phone, and it stays there.

The app itself makes two kinds of outbound request, and neither one carries any information about you: it asks a public server for today's currency exchange rates, and (only if you use the Zakat tracker) it asks another public server for the current gold and silver price. Those requests contain no transaction data, no identifiers, and no account information. Google Play Billing, which handles the one-off Pro purchase, adds a third kind of request that carries no financial data — it is described in full below.

If you uninstall Fresh Budget, your data is gone. There is no copy anywhere else.

What Fresh Budget does not collect

To be specific, because "we value your privacy" is not specific. Fresh Budget does not collect, transmit, sell, rent, or share:

No third-party analytics SDK, no advertising SDK, and no crash-reporting SDK is compiled into the app.

One Google component does report to Google, and it is fair that you know about it. Google Play Billing — the library that handles the one-off Pro purchase — includes a data-transport library that sends Google anonymous device and app-version information: country, mobile network code, locale, device manufacturer, network type, Android version, and the app's build number. Google uses it to keep purchases reliable. It is part of Play Billing and cannot be removed without removing in-app purchases altogether. It never receives your transactions, your balances, your merchants, or any other financial data.

What is stored, and where

Everything you see in the app lives on your device, inside the app's private sandbox that other apps cannot read:

Nothing is written to shared storage unless you explicitly export it.

Permissions, and exactly why each one is needed

Android will ask you for these. You can decline any of them and the app still works — you just add transactions by hand instead.

Notification access

Lets Fresh Budget read the text of notifications posted by other apps. This is the automatic-capture feature: when your bank posts "SAR 82.50 spent at CARREFOUR on card ending 1234", the app reads that line, pulls out the amount, currency, merchant and card, and files a transaction. The text is matched against parsing rules in memory on your device. If it looks like a real payment, a transaction is written to your local database. If it does not (an OTP code, a promo, a delivery update) it is ignored and nothing is stored. Notification text is never sent anywhere. Turn it off any time in Android Settings, or in the app under Settings.

Pasting messages yourself (no permission needed)

Some banks only send a text, never a notification. For those, Fresh Budget has a paste-import tool: you copy the messages yourself and paste them in, and the app reads only what you paste. This needs no SMS permission at all. Fresh Budget does not request access to your text messages and cannot read your inbox. Nothing you paste is ever transmitted, uploaded, or shared.

Internet and network state

Lets the app make network requests and check whether you are online. Used only for the two rate lookups below.

Post notifications

Lets Fresh Budget show its own reminders, only for the optional alerts you switch on yourself. The check runs entirely on your device against your own data, and is off by default.

Biometric (app lock)

If you turn on the optional app lock, this lets you unlock with your fingerprint or face in addition to your PIN. The biometric check is performed by the Android system; the app never receives your fingerprint or face data.

The network connections the app makes itself

Both are plain, anonymous requests. Neither sends any part of your financial data, and neither requires an API key or an account.

1. Exchange rates — open.er-api.com. The app requests the current rate table for a base currency (for example https://open.er-api.com/v6/latest/USD). What is sent: the three-letter currency code, and nothing else. Before the first fetch the app uses built-in offline fallback rates, so it works with no network at all.

2. Gold and silver prices — api.gold-api.com. Used only by the Zakat tracker, and only when you tap to fetch live rates. What is sent: the metal symbol, nothing else. You can also type the prices in manually and the app never contacts the server.

Like any server you connect to, these services can see the IP address the request comes from, which is a property of how the internet works, not something the app sends on purpose. The request itself contains nothing that identifies you or your finances.

These two are the only requests Fresh Budget's own code makes. Google Play Billing makes its own, described under “What Fresh Budget does not collect” above; it carries no financial data.

Purchases

Fresh Budget is free to use, with an optional one-time "Pro" upgrade. If you buy Pro, the purchase is handled entirely by Google Play Billing. The app never sees, stores, or transmits your card number or any payment details; it only receives a yes/no signal from Google Play that the purchase was made. Payment information is handled by Google under Google's own privacy policy.

Backups and exports

Fresh Budget has no cloud sync and no server-side backup. Your finance database is excluded from Android's cloud backup, so it is not copied to Google Drive. Under Settings you can export your transactions as CSV, or export a full JSON backup and restore from it later. These files are written to the app's cache and handed to whatever app you choose in the Android share sheet. From that moment the file is an ordinary document under your control. Fresh Budget does not upload these files anywhere on its own.

Data retention and deletion

The app keeps your data until you delete it. There is no retention schedule because there is no server holding anything. Delete one item by opening it and deleting it. Delete everything from inside the app under Settings, Data, Erase all data — it shows you exactly what will go, offers you a backup first, and asks you to confirm three times, then clears every record, every setting and your app-lock PIN. You can also delete everything by uninstalling the app or clearing its storage. Because the developer never holds a copy of your data, there is nothing to submit a deletion request for, and no way for the developer to retrieve your data if you delete it.

Security

Your data sits in the app's private storage area, which Android isolates from other apps and encrypts at rest on modern devices. You can also turn on an in-app PIN and biometric lock so the app cannot be opened even by someone who can unlock your phone. Files you export yourself are ordinary unencrypted CSV and JSON, so treat them as sensitive documents. The strongest security property here is structural: there is no server to breach, no database of users, and no credentials to steal, because none of that exists.

Children's privacy

Fresh Budget is a personal-finance tool intended for adults and is not directed at children under 13 (or the equivalent minimum age in your country). The app does not collect any personal information from anyone, of any age.

Your rights

Privacy laws such as the GDPR and the CCPA give you rights to access, correct, export, and delete the personal data a company holds about you. Fresh Budget holds none. You already exercise every one of those rights directly inside the app: you can see all your data, edit or correct any record, export it in CSV or JSON, and delete any part or all of it. Nothing is sold or shared with anyone, so there is no opt-out to request.

Changes to this policy

If the app ever changes in a way that affects this policy (a new permission, a new network call, an optional sync feature) this document will be updated and the effective date at the top changed before that version ships. If a future version ever collects anything, it will ask you first and it will be optional.

Contact

Questions, corrections, or a privacy concern: mirhamzaimtiaz@gmail.com. Fresh Budget is built and maintained by one person. Mail gets read.