Privacy Policy for FiCraft

Last Updated: September 19, 2026
Effective Date: September 19, 2026
Contact Email: ficraft@omkard.dev

1. Introduction & Privacy-First Approach

Welcome to FiCraft (“we”, “our”, or “us”). FiCraft is a personal finance and expense tracking application designed with privacy at its core.

Our approach is straightforward: Your financial data belongs exclusively to you.

FiCraft is built as an on-device personal financial manager. Your financial transactions, bank accounts, balances, budgets, categories, and personal notes are stored directly and securely on your own phone. We do not store your financial records on remote servers, we do not sell or share your personal data with third-party advertisers, and we do not monitor your personal spending habits.

This Privacy Policy explains how FiCraft works, the permissions we request, our simple two-step SMS processing, how developer services (Google Firebase) are used for app health, and how your privacy is protected at every step.

2. Permissions We Request and Why

To help you track your finances effortlessly without manual data entry, FiCraft requests specific device permissions. These permissions are only used for the purposes described below and can be turned on or off in your phone’s settings at any time.

Optional Use & Offline Mode

SMS permission is completely optional. You can choose not to grant SMS access and use FiCraft entirely as a manual expense tracker. You can add accounts, record cash transactions, and track your monthly budget completely offline without any internet connection.

3. The 2-Step Transactional SMS Processing

FiCraft uses a clear, secure 2-step process to turn your bank alerts into organized expense records directly on your phone:

Step 1: Automatic On-Device Detection & Safety Filtering

• Local Scanning: When SMS permission is enabled, FiCraft scans your messages entirely on your device. Your messages never leave your phone.
• Immediate Rejection of Sensitive Codes & Spam: The app instantly filters out and discards all non-transactional messages. This includes One-Time Passwords (OTPs), two-factor authentication codes, login alerts, promotional text messages, carrier announcements, and service requests. Security codes and OTPs are never saved, recorded, or read.
• Key Information Extracted: For confirmed transaction alerts, the app identifies basic details: the transaction amount (including convenience fees or discounts), whether it is an expense or income, the payment method (such as UPI, card, or ATM withdrawal), the merchant or payee name, the registered banking sender header, and only the last 4 digits of your card or account number so you can identify which account was used.
• Pending Review Pool: Detected transactions are placed into a temporary pending inbox on your screen. They are not added to your permanent spending history yet.

Step 2: Review, Verification & User Approval

• You Stay in Control: Every detected transaction is presented to you in the app’s Inbox and Home screen. You have complete freedom to:
  • Approve with 1 Tap: Confirm the details and add the transaction to your spending records.
  • Smart Multi-SMS Correlation: When money is transferred between your own accounts or a transaction is immediately reversed by your bank, FiCraft automatically pairs these messages together into a single grouped card with net-zero spending impact, allowing you to approve or unlink them with 1 tap.
  • Quick Edit: Change the category, adjust the amount, assign a different account, update the payee, or add personal notes.
  • Dismiss / Reject: Remove the transaction if you do not want it tracked.
• Saved Only After Approval: A transaction is only saved to your permanent spending records and account balance calculations after it passes this review step.
• Smart Remembering: When you dismiss an alert, the app remembers your choice so you will not be asked about that specific message again.

4. Privacy for Personal Contacts & Transfers

FiCraft distinguishes between commercial store purchases and personal transfers to friends or family:

• Store & Merchant Purchases: Payments to supermarkets, restaurants, and online shops are automatically organized into categories like Groceries, Dining, or Shopping.
• Personal Transfers: When you send or receive money from individuals (friends, family, or contacts), their names and contact identifiers are kept strictly private on your phone. They are never shared or linked to public business directories.

5. Third-Party Developer Services: Google Firebase

To ensure the app runs smoothly and to quickly fix unexpected issues, FiCraft uses Google Firebase developer services provided by Google LLC.

Firebase Crashlytics (Crash Reporting)

• What it does: If the app crashes or encounters a critical error, Crashlytics sends an anonymous diagnostic report to help us understand what went wrong.
• What it collects: Technical information such as your phone model, operating system version, and the error code.
• What it never collects: Crash reports never contain your SMS text, account numbers, balances, or transaction details.

Firebase Analytics (App Performance)

• What it does: Helps us understand general app usage trends, such as which screens are most popular, so we can make the app easier to use.
• What it collects: Aggregated, anonymous metrics like app opens, button clicks, and language settings.
• What it never collects: We do not log financial data, transaction amounts, payees, or personal information.

Strict Privacy Guarantee: Your SMS messages, bank balances, transaction amounts, and personal contacts stay 100% on your phone. They are never sent to Firebase or any external server.

6. Data Storage, Security & Retention

• Stored Securely on Your Device: All your accounts, transactions, monthly budgets, counterparties, and categories are saved in the app’s private, protected local SQLite database on your phone.
• Realized Rewards & Offsets Only: FiCraft tracks financial rewards (cashbacks, vouchers, or points offsets) strictly when they are realized and applied directly in transactions recorded in the app. The app does not access, monitor, or track external loyalty accounts, third-party point balances, or unrealized investment gains/losses outside of your on-device records.
• No Remote User Profiles: We do not require an account, phone number, or login to use the app, and we do not maintain central servers with your financial records.
• You Are in Full Control:
  • You can edit or delete any transaction, account, category, or budget at any time inside the app.
  • You can completely erase all data by selecting Clear Data under your phone’s Android App Settings, or by simply uninstalling the app.

7. Absolute Disclaimer & Zero Liability (No Amount, Nothing)

To the maximum extent permitted by applicable law:

1. We Are Not Liable for Anything: FiCraft, its creators, developers, maintainers, contributors, and operators assume absolute zero liability. We are not liable for anything, under any legal theory, for any reason whatsoever. Our liability is strictly zero ($0.00 / ₹0.00) — no amount, nothing.
2. Device-Level & Hardware Risks: Because FiCraft is an entirely decentralized, offline-first application with 100% of data held solely on your personal hardware, we bear no liability for:
   • Any device compromise, physical theft, hardware damage, or device loss;
   • Malware, spyware, keyloggers, or unauthorized access to your phone or backups;
   • Data loss, corruption, unintended deletion, operating system updates, or cache wipes;
   • Any indirect, direct, incidental, special, or consequential damages resulting from privacy or security breaches on your device.
3. Use at Your Own Risk: You acknowledge and agree that your use of FiCraft, and your retention and management of financial information on your device, is entirely at your own risk.

8. Your Rights & Choices

You have complete authority over your personal information:

• Right to View & Correct: You can view and update all your financial records directly in the app.
• Right to Delete: You can delete individual items or wipe all app data at any moment.
• Right to Withdraw Permission: You can turn off SMS access at any time in your phone’s settings without losing access to manual expense tracking.

9. Children’s Privacy

FiCraft is intended for general audiences and is not directed to children under 13 years of age. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect new features or regulatory requirements. Any updates will be published with a revised “Last Updated” date at the top of this document.

11. Contact Us

If you have any questions, suggestions, or concerns regarding your privacy, please reach out to us:

FiCraft Team
Email: ficraft@omkard.dev