Privacy Policy
Budget Tracker, by Orbitra
Last updated: Effective:
Short version
- Your accounts, transactions, budgets, goals and notes are stored only on your phone. We never receive them.
- There is no account, no bank login and no ads.
- To show exchange rates, the app downloads daily rates. That request contains only currency codes, not your data.
- If — and only if — you agree, the app sends anonymous usage statistics and crash reports. They never include amounts, payees, notes or account names.
- We never sell your data.
Who we are
Budget Tracker (com.orbitra.budgettracker) is published by Orbitra, the Google Play developer. In this policy, “we” and “us” mean Orbitra. Privacy contact: [email protected].
What data we collect
| Data type | Why | Stored where | Shared with |
|---|---|---|---|
| App interactions (e.g. “a budget was created”, “insights opened”) — never amounts, payees, notes or account names | See which features are useful | Google Analytics for Firebase | Google, as our service provider. Only with your consent. |
| Crash logs and diagnostics (device model, Android version, app version), with anything you typed removed | Find and fix bugs | Firebase Crashlytics | Google, as our service provider. Only with your consent. |
| App instance ID (a random ID Firebase creates for this install) | Count unique installs without knowing who you are | Google Analytics for Firebase | Google, as our service provider. Only with your consent. |
| Exchange-rate requests (currency codes and your IP address) | Download daily exchange rates | Frankfurter API (European Central Bank rates) | The rates provider, to answer the request. No identifiers are sent. |
What we don’t collect
- Your accounts, balances, transactions, payees, budgets, goals and notes — they stay on your device.
- Your name, email address or any account details — there is no account. An optional display name stays on your phone.
- Bank logins or card numbers — there is no bank sync.
- Your advertising ID, SMS, contacts, call log, location or files.
Device permissions the app uses and why
- Internet — For exchange rates, and anonymous stats if you agreed.
- Notifications — Asked only when you set a bill reminder or budget alert. Reminders are scheduled on your device.
- Fingerprint / face unlock — Only if you turn on app lock.
- Run at startup — To set your reminders again after the phone restarts.
The app never asks for SMS, contacts, location, camera or storage permissions. Receipts are added with Android’s photo picker or your camera app. TODO(owner): confirm against the final AndroidManifest.xml before launch
Third-party services
These services have their own privacy policies:
- Google Analytics for Firebase (opens in a new tab) — Anonymous usage statistics, with your consent.
- Firebase Crashlytics (opens in a new tab) — Crash reports, with your consent.
- Frankfurter (opens in a new tab) — Daily European Central Bank exchange rates. No key, no personal data. TODO(owner): confirm its terms before launch
- Google Play Services (opens in a new tab) — Installing and updating the app.
How we use data
- Your money data is used only on your phone, to run the app for you.
- To understand which features people use, so we know what to improve.
- To find and fix crashes.
- Legal basis in the EU/UK: providing the app you asked for (Art. 6(1)(b) GDPR) for data on your phone, and your consent (Art. 6(1)(a)) for analytics. You can withdraw consent at any time in Settings.
Sharing
We do not sell your personal data. Data is only passed to the service providers listed above, who process it for us, or when the law requires it.
Retention
- Data on your device stays until you use Delete all data, clear the app’s storage or uninstall the app.
- Your money data is not included in Android’s automatic Google backup. Backups are only the files you create yourself, encrypted with AES-256.
- Analytics data: TODO(owner): confirm the GA4 data-retention setting
- Crash reports are kept for up to 90 days.
Deleting your data
You can delete your data at any time. The steps are on the Budget Tracker data deletion page.
Security
Data sent over the internet is encrypted in transit (HTTPS). Data stored on your phone is kept in the app’s private storage, protected by the Android app sandbox. No method is perfectly secure, but we keep what we collect to a minimum.
Children
Budget Tracker is meant for adults (18+). It is not directed at children and we do not knowingly collect their data.
Your rights
Europe and the UK (GDPR / UK GDPR): you can ask to access, correct, delete or restrict your data, object to its use, and get a portable copy. Where we rely on your consent, you can withdraw it at any time. You can also complain to your local data protection authority.
California (CCPA / CPRA): you can ask what personal information we hold and ask us to delete it. We do not sell personal information.
To make a request, email [email protected] with the app name in the subject. We will reply within 30 days.
International transfers
Google services may process data outside your country, including in the United States. Google uses safeguards such as the EU Standard Contractual Clauses for these transfers.
Changes to this policy
If this policy changes, we will update this page and the “Last updated” date at the top. Important changes will also be shown in the app.
Contact
Orbitra — [email protected]. TODO(owner): business address / country if required