1. Introduction
Welcome to DigiExpense. This Privacy Policy explains how NextGen Star Technologies ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our mobile application ("App").
By downloading, installing, or using DigiExpense, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and ensuring the security of your personal data in compliance with applicable Indian data protection laws and Google Play Developer Program Policies.
If you do not agree with this policy, please do not use the App.
2. Information We Collect — Account
- Mobile phone number (required for OTP-based authentication)
- Name (optional, for personalisation)
- Occupation/profession type (optional, for dashboard customisation)
- Profile preferences and settings
3. Information We Collect — Transactions
- Transaction amounts (income and expenses)
- Transaction dates and timestamps
- Merchant/payee names or descriptions
- Bank account identifiers (last 4 digits only — fully masked)
- Transaction categories and tags
- Budget limits and financial goals
4. Important: Notification Access Policy (Android Only)
- We use Android Notification Access (NOT READ_SMS permission) to detect bank transaction notifications
- We ONLY process notifications that match known bank/UPI transaction patterns
- We NEVER read OTP codes, verification messages, or personal messages
- We NEVER read messages from contacts, messaging apps, or unknown senders
- We NEVER access your SMS inbox — we only capture notification content
- Notification access is completely optional — the app works fully without it
- You can revoke notification access anytime from Android Settings
- All notification data is processed locally on your device before any server sync
5. Device Information
- Device type and model (for app compatibility)
- Operating system version (for crash reporting)
- App version (for update management)
- Anonymous usage analytics (no personally identifiable data)
6. How We Use Your Data
- Provide core expense tracking and budgeting features
- Auto-detect bank transactions from notifications (with explicit permission)
- Generate financial reports, insights, and analytics
- Sync your data securely across your devices
- Send optional bill payment and budget reminders
- Process in-app subscription payments via Google Play Billing
- Improve app functionality and fix bugs
- Provide customer support when requested
7. Data Security
- All data is transmitted over HTTPS/TLS encrypted connections
- Financial data is encrypted both in transit and at rest on our servers
- We use HMAC-SHA256 request signing on native builds to prevent tampering
- Biometric authentication (fingerprint/face) is available for app lock
- Document vault files are encrypted before upload
- We conduct regular security audits of our infrastructure
- Session tokens are stored in device secure storage (Keychain/Keystore)
8. Data Sharing
We DO NOT sell, rent, or trade your personal or financial data to any third party.
We share only:
- With your explicit prior consent
- To comply with applicable law, legal process, or government request
- To protect our rights, property, or safety and that of our users
- With Google Play for subscription management (purchase tokens only)
- With cloud service providers who host our infrastructure (under strict confidentiality agreements and data processing terms)
9. Third-Party Services
We use the following third-party services:
- Google Play Billing (subscription payments)
- Google Firebase (crash analytics and push notifications)
- Secure cloud hosting provider (data storage)
10. Why Notification Access?
DigiExpense uses Android Notification Access (not SMS read permission) SOLELY to automatically detect and log bank/UPI transaction notifications. This is the core value proposition of the app — saving users time by eliminating manual expense entry.
Benefits:
- Automatically log income & expenses without manual entry
- Never miss tracking a bank transaction
- Save 10+ minutes daily on financial record-keeping
- Accurate expense categorisation from transaction data
We NEVER:
- Read personal messages or chats
- Read OTP, PIN, or verification codes
- Access messages from contacts or messaging apps
- Share, sell, or monetise any notification content
- Use notification data for advertising or profiling
- Store raw notification text on our servers — only parsed financial data is synced
11. Your Rights
- Access and view all your stored personal data
- Correct or update inaccurate information
- Delete your account and all associated data permanently
- Export your financial data in standard formats
- Revoke notification access permission at any time
- Opt out of push notifications
- Cancel subscriptions via Google Play Store
- Lodge a data protection complaint with the relevant authority
12. Data Retention
- We retain your data only as long as your account is active
- Upon account deletion request, all personal data is permanently removed within 30 days
- Anonymized, aggregated analytics may be retained for service improvement
- Backup data is purged within 90 days of account deletion
- Payment transaction records are retained as required by law (typically 7 years for financial records in India)
13. International Transfers
Your data is primarily stored on servers located in India. If data is transferred to servers outside India for backup or processing, we ensure adequate data protection safeguards are in place in compliance with applicable Indian data protection laws.
14. Children's Privacy
DigiExpense is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected such data, we will delete it immediately. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at admin@digiexpense.in.
15. Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes via in-app notification or email at least 7 days before the changes take effect. The "Last Updated" date at the top indicates the most recent revision. Continued use of the App after the effective date of changes constitutes acceptance of the updated policy.
16. Contact Us
Questions about this Privacy Policy? Contact us: