Privacy policy

3. Google Drive sync

When cloud sync is enabled, the database is saved to the hidden Google Drive appDataFolder, accessible only to the current app and the Google account owner.

• Sync is triggered only by user action.
• The app does not publish the database in shared Google Drive folders.
• The user can sign out of the Google account and stop synchronization at any time.

4. Smart Spend account and server storage

A Smart Spend account is optional. Without it, the app works fully locally, as before.

Registration is done with an email address and password; confirmation is via an email with a link. Confirmation and password recovery emails are sent from [email protected].

The following is stored on the server:

• email address;
• password hash (the password itself is not stored and cannot be read);
• the user's entire SQLite database file — only if the user tapped «Send to server» themselves;
• service data: time and version number of the last upload, and the identifier of the device from which the database was uploaded;
• login sessions (tokens are stored as hashes);
• temporary records for limiting login attempts (contain an IP address and are stored for no longer than an hour).

A session cookie (HttpOnly, SameSite=Lax, Secure) is created in the browser for 30 days; it is only needed to maintain the login. By default, synchronization is manual: only what the user sent with the corresponding button reaches the server. The user can turn on automatic upload of changes in the settings; while it is off, nothing is sent.

The server is leased from the provider Contabo; the data processor is Ecomdev. Data is not sold or transferred to third parties, except for the transmission to the Google assistant described in Section 1.

Account deletion: More → Settings → Smart Spend Account → "Delete Account" (on a computer, "Settings" is in the top menu; a password will be required). The account and the server-side copy of the database are deleted immediately; copies in the daily server backup archives are deleted automatically within 30 days; the local database on the device is preserved.

4.1. Smart Spend App for Android

Smart Spend for Android (identifier uz.ecomdev.smartspend, developer — Ecomdev) is an application that contains the exact same code as the website https://smart-spend.ecomdev.uz/app/. It works offline; network access is only required for the account, synchronization, AI assistant, and exchange rates — these requests are sent to our server as described in this policy.

• Android Permissions: internet access and microphone (only for voice input, upon button press; permission can be revoked in Android settings). Access to the phone's contacts (READ_CONTACTS) is requested only when you tap the "From phone" button on the Contacts page: the app reads names and phone numbers so that you can mark whom to add to the debt notebook. Only the contacts you mark enter the app; the rest are neither stored nor sent anywhere. Added contacts are stored on the device and, like the other debt notebook contacts, go to our server with your data if you have an account; the app does not write to the phone's contacts. The permission can be revoked in Android settings; without it, contacts are entered manually. Service permissions for Google sign-in (Credential Manager) are added by the Google library. The app does not request access to SMS, calls, geolocation, camera, photos, or phone files. You select the image for the assistant yourself: the app opens the system camera or file picker and receives only the image you selected.
• Financial data is stored in the app's internal storage on your device. Updating the app preserves it, while deleting the app erases it. Standard Android backup may save it in your Google account (see section 4.3); additionally, you can enable synchronization with a Smart Spend account or export the database.
• Google sign-in in the app occurs via the Android system account selection window (Credential Manager): we receive only the email address confirmation from Google, just as with the website login.
• Voice in the assistant within the app is recorded and transmitted through our server to Google Gemini for recognition, as described in section 1.
• There are no ads or third-party analytics tools in the app. Visit statistics are collected as described in section 1.

4.2. Account and Data Deletion

Address of this section: https://smart-spend.ecomdev.uz/privacy-policy.html#delete. The account can be deleted in two ways.

• In the app: More → Settings → Smart Spend Account → "Delete Account" (on a computer, "Settings" is in the top menu). For an account with a password, you will need to enter the password; for an account created via Google, you will need to confirm Google sign-in.
• If you do not have access to the app: write to the address in the "Contacts" section from the email associated with the account, with the subject "Delete Smart Spend account". We will delete the account within 30 days.

What happens upon deletion:

• email address, password hash, login sessions, tokens, and the server-side copy of the database are deleted immediately;
• copies in daily server backup archives (accounts and user databases) are deleted automatically within 30 days;
• reviews sent from the account remain disconnected from it; review text can be deleted upon request;
• AI assistant request counters (without texts) are stored for no longer than 60 days, and visit statistics records for no longer than 400 days; they contain neither email nor IP address and do not allow you to be identified;
• the local database on your device and the copy in your Google Drive are not affected: you delete them yourself (in the app or in the Google account).

4.3. Data Transfer to App and Android Backup

• Data transfer from a previous version (the "Transfer data to Android app" button on the website) works only by your action. The database is encrypted in your browser (AES-GCM) with a random key; only the encrypted file reaches the server for no longer than 1 hour.
• The encryption key is located only within the link itself after the "#" sign and is not transmitted to the server, therefore we cannot read this file. Immediately after being downloaded by the app, the file is deleted from the server; if the link is not opened, it is deleted after one hour. The link is one-time use: do not share it with others.
• Android Backup: the application participates in standard Google backup. Only the app storage data (database and login token) are included in the backup, excluding the cache. The backup is stored in your Google account and follows its settings; we do not have access to it. It can be disabled in the phone settings (Google → Backup) or by deleting the app.

7. Changes to the policy

We may update this document when functionality or legal requirements change. The new version takes effect from the date of publication on this page.