FinSight — Privacy Policy
Effective date: 11 July 2026 ·
App: com.simplesolutions.finsight ·
Publisher: Simple Solutions
Contact: khetpal99@gmail.com
FinSight is a personal-finance app that helps you understand your money by reading bank transaction SMS on your device. This policy explains exactly what data the app touches, where it goes, and what never leaves your phone.
The short version
- Your SMS messages never leave your device. FinSight reads bank/transaction SMS locally to detect transactions. Raw SMS content is never uploaded, transmitted, or shared — not to us, not to anyone.
- Your financial data belongs to you. Transactions you confirm are stored on your device and, only if you sign in, synced to your private cloud space (Supabase) that only your account can read.
- We do not sell or share your data. No advertising, no data brokers, no third-party marketing.
What the app collects and why
| Data | Where it's processed | Purpose | Leaves the device? |
|---|
| Bank/transaction SMS | On-device only | Detect transactions automatically | Never |
| Confirmed transactions (amount, category, merchant, date) | Device + your private cloud space | The app's core ledger; backup & multi-device sync | Only if you sign in; readable only by your account (row-level security) |
| Account email (if you sign in) | Supabase Auth | Sign-in, account recovery | Yes — to the auth provider only |
| Money profile you enter (salary, cards, balances) | Device + your private cloud space | Balance & insight calculations | Only if you sign in |
| Crash reports (Sentry) | Sentry | Fix crashes | Yes — stack traces and device model only; no SMS or financial content, identified only by a random account id |
| Usage analytics (Firebase) | Google Firebase | Understand which features are used | Yes — feature-usage events only (e.g. "backup created"); never amounts, merchants, or SMS content |
What the app never collects
- Raw SMS bodies or senders (they stay in on-device storage only)
- Your contacts, location, microphone, camera, or files beyond backups you explicitly create
- Advertising identifiers
Permissions
- SMS (READ_SMS / RECEIVE_SMS): the core feature — reading bank transaction alerts to build your ledger, entirely on-device. FinSight never sends SMS, and never uploads SMS content.
- Notifications: transaction-detected and reminder notifications.
- Storage (Android 12 and below): exporting/importing your own backup files (CSV/JSON/PDF).
Storage, security, and retention
- Cloud data is stored in Supabase with row-level security: every row is bound to your account id; no other user (and no anonymous client) can read it. Transport is TLS.
- Local backups you create stay in folders you choose.
- Delete everything: Settings → Clear All Data removes local data; deleting your account removes your cloud rows. You can also email us for deletion.
Subscriptions
Payments are processed entirely by Google Play Billing. We never see your card details. The app stores only your subscription status (trial/active) against your account id.
Children
FinSight is not directed at children under 13 and does not knowingly collect data from them.
Changes
We'll update this page and the effective date when the policy changes. Material changes will be announced in the app.