The short version
Debt Tracker keeps a ledger of the debts, payments, people and groups you enter yourself. All of it stays on your device. The application has no account, no sign-in, no analytics, no advertising, and no internet permission at all — it cannot send anything anywhere, because the operating system will not let it open a connection.
Nothing is collected. Nothing is shared. Because nothing leaves the app to a server we run, its Google Play Data safety section reports no data collected and no data shared — there is none to report.
What is stored, and where
Everything you enter — the people and groups you add, each debt and payment with its amount, category, note and date, your categories, and your settings — is written to a database inside the application's own private storage on your device. Other applications cannot read it. It is not copied anywhere else, and there is no server to copy it to. Removing the application removes that database with it.
A receipt photo, if you attach one, is chosen through Android's own photo picker and copied into that same private storage. The application is handed only the single image you pick; it never asks for access to the rest of your photo library.
What leaves the device, and only when you send it
Your data leaves the application in one of three ways, and each is something you set up:
- Export and share. You choose export or share, the application writes a backup file, and the system's own share sheet asks you where it should go. The application hands the file to whichever app or destination you pick and has no part in what happens after that.
- Automatic backup. If you choose a backup folder in settings, the application writes a backup file to that folder roughly once a day. The folder is the one you selected through the system's folder picker — a place on your device, or a synced folder such as Google Drive if that is what you chose. The application writes only to that folder and can reach nowhere else; it still holds no internet permission of its own. If you never choose a folder, nothing is written.
- Restore. When you restore, the application reads the one backup file you point it at. That is the only time it reads anything from outside its own storage.
None of these sends anything to us. Automatic backup is the one thing that happens on a schedule rather than on a tap, and it happens only to the folder you chose, and only ever there.
What the application asks the system for
The permissions on its list are there for reminders and for backups that keep working after a restart. There is no internet permission, so the application cannot open a network connection.
- Notifications, asked for the first time you turn on the monthly reminder, so the reminder can appear.
- Run after reboot, keep the device awake long enough to finish a job, and run a job in the foreground if the system asks it to. These come with the library that schedules the daily backup and the monthly reminder, so those jobs still run after you restart the phone.
- Read network state. The same scheduling library lists this so it could, in principle, wait for a connection before running a job. Debt Tracker has no internet permission, so it never uses a connection and this entry does nothing.
Children
Debt Tracker is for adults keeping track of money between themselves. It is not directed at children and collects nothing from anyone.
Changes
If this text ever changes, the version published on alangaudet.dev is the one that applies, and the date near the top of it says when it last moved.
Contact
Alan Gaudet — [email protected]