1. Introduction
ZynPey ("ZynPey," "the app," "we," "us") is an offline-first personal net worth and daily transaction tracker for Android and iOS, published by [PUBLISHER NAME]. This Privacy Policy explains, in specific and verifiable terms, what data the app collects, how its optional features process data, what device permissions it requests and why, and what choices you have.
This policy was written directly from an inspection of the app's source code — its database schema, requested permissions, and third-party dependencies — rather than a generic template, so that every claim below reflects what the app actually does.
2. Scope of This Privacy Policy
This policy applies to:
- The ZynPey mobile application, on both Android and iOS.
- This companion website (the pages you're currently browsing).
This policy does not apply to:
- Third-party services you choose to use, such as the cloud storage, email, or messaging app you pick when sharing an exported file (see Section 10).
- The app stores that distribute ZynPey (Google Play, the Apple App Store), which have their own privacy practices for install, purchase, and platform-level diagnostic data collected outside the app's own code.
- Any third-party website linked from this site or from an app store listing (see Section 17).
3. Information We Collect
ZynPey has no user accounts and no backend server. Because of that, there are only two categories of information relevant to this policy: information you choose to enter or import into the app (Section 4), and information the app could, in principle, collect automatically (Section 5) — which, based on our review of the app's code, it does not.
At a glance, everything the app stores lives in a single local SQLite database inside the app's private storage on your device:
| Data type | Examples | Where it's stored |
|---|---|---|
| Financial records you create | Accounts, transactions, categories, budgets, goals, assets, liabilities | Local device database only |
| Local profile details | Display name, email address (self-entered, optional) | Local device database only |
| SMS-derived suggestions (optional feature) | Amount, date, direction, reference id, merchant name | Local device database only |
| Statement import data (optional feature) | Transactions parsed from a CSV/Excel/PDF file you choose | Local device database only |
4. Personal Information Provided by Users
The only personal information ZynPey ever holds is information you type in or choose to import yourself:
- Profile name and email — an optional display name and email address you can set in Profile, used only to personalize the app itself. It is not verified, not used to create an account, and not transmitted anywhere.
- Financial data you enter — accounts, transactions, categories, budgets, savings goals, assets, and liabilities you add manually or via Quick Add.
- Bank SMS-derived data — if you explicitly turn on Bank SMS Tracking, the app extracts an amount, date, direction, reference id, and merchant name from bank/UPI/card alert messages in your SMS inbox. It never stores the full message text, OTPs, or unrelated personal messages. See Section 6 for the permission this requires.
- Bank statement data — if you choose to import a CSV, Excel (.xlsx), or text-based PDF bank statement, the file is parsed in memory and the transactions you approve are saved; the original file itself is not retained by the app.
None of the above is ever required to use the app's core functionality, except the financial data you choose to track.
5. Automatically Collected Information
Based on our review of the app's dependencies, ZynPey contains no analytics SDK, no crash-reporting SDK, no advertising SDK, and no code that makes network requests. As a result, the app itself does not automatically collect:
- Usage analytics or in-app behavior events
- Device identifiers, advertising IDs, or IP addresses
- Location data
- Crash or diagnostic logs sent to us or any third party
One caveat we want to be upfront about: Google Play and the Apple App Store may independently collect limited platform-level data (such as install counts, app crashes visible to the store, or purchase/download metadata) as part of operating their stores. That collection happens outside ZynPey's own code, is governed by Google's and Apple's own privacy policies, and is outside our control or visibility.
6. Device Permissions
ZynPey requests the minimum permissions its optional features need, and nothing more:
| Permission | Used for | Default state |
|---|---|---|
| Biometric / device credential ( USE_BIOMETRIC on Android) |
The optional App Lock feature, to unlock the app itself using your fingerprint, face, or device PIN. | Off — you opt in from Profile |
| Read SMS ( READ_SMS on Android) |
The optional Bank SMS Tracking feature, to read bank/UPI/card transaction alerts and suggest transactions. Requested only after you explicitly enable the feature and confirm a separate in-app consent screen. | Off by default |
Statement import and CSV/backup export use the operating system's own file picker and share sheet, which do not require a broad storage permission on modern Android or iOS. ZynPey requests no location, contacts, camera, microphone, or internet/network permission.
You can review or revoke any permission at any time from your device's system Settings; the app continues to work normally with the related optional feature simply turned off.
7. How We Use Information
Everything the app stores is used for exactly one purpose: to power the on-device features you're actively using. Specifically, to:
- Calculate and display your net worth, account balances, and trends over time.
- Track budgets, savings goals, and category spending you've set up.
- Generate the reports and charts you view in the app.
- Suggest transactions from bank SMS alerts or an imported statement, when you've enabled those features.
- Produce a CSV export or backup file when you request one.
- Unlock the app when App Lock is enabled.
We do not use your data for advertising, behavioral profiling, or any purpose beyond providing the app's own functionality to you — we have no server-side systems that could do so in the first place.
8. Legal Basis for Processing (where applicable)
Frameworks like the EU/UK GDPR require a stated legal basis for "processing" personal data. Most of that analysis assumes a company holds and processes data on its own servers. ZynPey doesn't — all processing happens locally, on your device, entirely under your control. To the extent this section still applies to your jurisdiction:
- Consent — for optional, opt-in features: Bank SMS Tracking and biometric App Lock, each enabled only after an explicit action from you.
- Performance of your request — the app's core tracking functionality exists solely to do what you directly asked it to do (record a transaction, calculate a total, generate a report).
[Confirm with legal counsel whether a purely on-device app — where the "data controller" for locally stored data is arguably the user themselves — still requires a formal GDPR legal-basis statement for your target markets, and adjust this section accordingly.]
9. Data Storage and Security
All app data is stored in a local SQLite database inside ZynPey's private app storage on your device — never on a server we operate, because we don't operate one. Storage protection relies on:
- Your device's own operating-system-level storage encryption (standard on modern Android and iOS).
- The optional App Lock feature, which adds a biometric/PIN gate in front of the app itself.
The app's database is not separately encrypted by ZynPey beyond what the operating system already provides. A backup file you create is a full, unencrypted copy of your financial database — treat it with the same care you'd give a bank statement, and be mindful of where you store or share it.
No method of storage or security is completely risk-free, and we cannot guarantee absolute security. If your device itself is compromised or left unlocked, its own protections — not the app's — are what stand between someone and this data.
11. Data Retention
Because we do not store your data, we do not set a retention schedule for it. Data you enter remains on your device for as long as you keep it — until you delete a specific item, use "Clear All App Data," or uninstall the app. A CSV export or backup file persists wherever you saved it until you delete it yourself; we have no ability to do that for you.
12. User Rights and Privacy Choices
Privacy laws such as the GDPR and CCPA/CPRA describe rights like access, correction, deletion, and portability of your personal data. Because your data already lives only on your device under your direct control, you can exercise every one of these rights yourself, immediately, in the app — without needing to submit a request to us:
| Right | How to exercise it in ZynPey |
|---|---|
| Access your data | Open any screen in the app — everything is visible to you at all times. |
| Correct your data | Edit any transaction, account, asset, or liability directly. |
| Delete your data | Delete an individual item, an import batch, or use "Clear All App Data" (Section 13). |
| Export/port your data | Use Export Data (CSV) or create a backup file from Profile. |
| Withdraw consent | Turn off Bank SMS Tracking or App Lock at any time in Profile, or revoke the permission in system Settings. |
Because we hold no copy of your data on our end, a request sent to us to "access," "delete," or "port" your data has nothing for us to act on beyond directing you to the in-app controls above. If you have a question we haven't answered here, contact us using Section 19.
13. Account Deletion and Data Deletion
ZynPey has no account system, so there is no "delete my account" request to submit to us. Instead:
- Delete one item — remove a transaction, budget, goal, asset, or liability from where it appears.
- Delete a pending SMS suggestion — dismiss it from the SMS review screen.
- Delete an import batch — use Import History in Profile to delete or unlink an entire SMS or statement import at once.
- Delete everything — use "Clear All App Data" in Profile, which permanently erases all accounts, transactions, budgets, goals, assets, and liabilities on your device after you type a confirmation phrase. This cannot be undone unless you have a backup file.
- Uninstall the app — removes its local database entirely, following standard Android/iOS behavior. This does not delete any backup file or export you separately saved or shared elsewhere.
Full step-by-step detail is available on our dedicated Data Deletion Policy page.
14. Children's Privacy
ZynPey is not directed at, marketed to, or knowingly used to collect information from children under 13 (or the minimum age defined by applicable local law, if higher). The app does not include an age-verification step at this time.
Because ZynPey collects no data outside of the user's own device in the first place, we hold no data from any user, including children, on any server. If a parent or guardian believes a child has entered information into the app, it can be removed at any time using the in-app deletion tools in Section 13, directly on that device.
[Confirm whether your target markets require formal COPPA (or equivalent) compliance language beyond this statement, based on your actual audience and marketing.]
15. International Data Transfers (if applicable)
In the conventional sense, this section does not apply: we operate no servers, so there is no cross-border transfer of your data to us, ever. Your data stays on the device it was entered on unless you personally move it.
If you choose to export or back up your data and then upload it to a cloud storage service of your own choosing, that transfer — and any resulting international data storage — is governed entirely by that service's own privacy policy and infrastructure, not by ZynPey.
17. Third-Party Links
This website links to third-party destinations we don't operate — for example, our Google Play and Apple App Store listings. An app store listing, once you leave this site, is governed by that store's own privacy policy and terms, not this one. We are not responsible for the content, accuracy, or privacy practices of any third-party site linked from here.
18. Changes to This Privacy Policy
We may update this policy as the app changes — for example, if a new feature introduces a new permission or data flow. Any change will be reflected by updating the "Last Updated" date at the top of this page. For material changes, we'll try to provide additional notice where reasonably possible; because ZynPey has no push-notification capability, any in-app notice would appear the next time you open the app, not as a push alert.
Continuing to use ZynPey after a change to this policy takes effect means you accept the revised policy.
19. Contact Information
Questions about this policy, or about how ZynPey handles data, can be sent to:
Publisher: [PUBLISHER NAME]
Registered address: 13th Main, 3rd Cross, Mahalaxmi Layout, Rajajinagar, Bangalore - 560010