Paycalm Privacy Policy

Effective date: November 2, 2026

Paycalm ("the app") is a personal budget planner and expense tracker for Android, published by GetItDone ("we", "us"). This policy explains what information the app handles, where it is stored, and the choices you have. In short: your money data stays on your phone, unless you choose to back it up to your own Google Drive or turn on Sync. We do not connect to your bank, and we do not sell your data.

1. Information stored on your device

Everything you enter in Paycalm is stored locally on your phone, in the app's private storage. This includes your transactions, amounts, accounts, categories, bills, budgets, savings goals, jars, assets and debts, notes, pay schedule, merchants and settings, and your Ask AI chat history. Unless you turn on Google Drive backup or Sync (sections 3 and 4), we do not receive or store this information and we cannot see it.

2. Information that leaves your device

What	Why	Who receives it
Currency codes and crypto asset names you track (for example "USD", "EUR", "bitcoin")	To show up-to-date exchange rates and crypto prices	European Central Bank (exchange rates) and CoinGecko (crypto prices). No amounts, balances or personal details are sent.
Your voice, only while you hold the microphone button	To turn speech into text when you add a transaction by voice	Your phone's built-in speech recognition service (usually Google). Depending on your device, audio may be processed on the phone or sent to that service. Paycalm does not record or keep audio.
App usage events (for example "screen opened", "budget created"), device model, Android version, app version, approximate country, and an app-instance identifier	To understand which features are used and to fix problems	Google Firebase Analytics. We never send amounts, balances, account or category names you type, notes, or what you type or say to Ask AI.
Crash reports: the error, the app screen and code where it happened, device model, Android version, app version and an app-instance identifier	To find and fix crashes	Google Firebase Crashlytics. Crash reports do not include your transactions, amounts or what you type.
An app-instance identifier and app version, when the app downloads its settings	To turn features on or off and adjust limits without an app update	Google Firebase Remote Config.
Advertising identifier, device and app information, approximate location from IP address	To show ads in the free version and measure them, and to prevent ad fraud. Paycalm Premium has no ads.	Google AdMob. Where the law requires it (for example in the European Economic Area, the UK and some US states), the app shows Google's consent message after setup, and you can change your choice later in the app's Settings > About > Privacy choices. You can also reset or delete your advertising ID, or opt out of personalized ads, in your phone's Settings > Google > Ads (or Settings > Privacy > Ads).
Paycalm Premium purchase and subscription status	To unlock Premium features and restore your purchase on a new phone	Google Play. Payments are handled entirely by Google Play; we never see your card or payment details. Your phone gets your purchase from Google Play, and the app then checks it with our server (next row and section 5).
Only if you have a Paycalm Premium subscription (bought, restored or checked): the purchase token Google Play gave the app, the product name and the app's package name; a Firebase user ID (a random anonymous ID, or your Sync user ID if you are signed in to Sync); a Firebase App Check token and Firebase installation ID; and, as with any internet request, your IP address and basic device information	To confirm with Google Play that your Premium subscription is real and still active, keep Premium working after a reinstall or on a new phone, and prevent fraud	Our server on Google Firebase (Cloud Functions and Cloud Firestore, United States), which asks Google Play to confirm the subscription. Google Play also notifies our server when the subscription renews, is canceled, expires or is refunded. Details, including what we store and for how long, are in section 5.
A copy of your Paycalm data (the same content as a backup file), only if you turn on Back up to Google Drive	To back up your data about once a day and let you restore it on this or a new phone	Your own Google Drive, in a hidden app folder that only Paycalm can open (section 3). We cannot access your Drive.
Your Paycalm data (transactions, accounts, categories, bills, budgets, savings goals, jars, assets and debts, card statements, merchants, notes and plan settings), only if you turn on Sync (Paycalm Premium)	To keep your data the same on all phones where you sign in	Google Cloud Firestore (part of Google Firebase), stored in the United States (section 4).
Your Google account email, name and profile photo link as shared by Google, and a user ID, only when you sign in for Sync	To create your Paycalm sign-in and keep your synced data separate from everyone else's	Google Firebase Authentication.

Ask AI, the in-app assistant, runs on your phone. What you type to it is processed on the device and is not sent to us or to an AI provider. Your Ask AI chat history is not backed up or synced.

Receipt scanning reads the text of a receipt photo on your phone (Google ML Kit text recognition, on-device). The photo is not uploaded. A photo you take with the camera is saved to a temporary file and deleted after it is read; a photo you choose from your gallery is only read, not copied.

3. Backups and exports

Google Drive backup (optional, free): if you turn it on in Settings, Paycalm asks Google for permission to use only its own hidden app folder in your Drive (the drive.appdata permission). It cannot see any other file in your Drive. About once a day, when your data has changed, it uploads a backup and keeps the 5 most recent ones. You can restore from these backups, and when you turn the feature off you can choose to delete them. You can also remove Paycalm's access at any time in your Google Account (Security > Your connections to third-party apps & services). These files are stored by Google under Google's privacy policy.
Android backup: if Android backup is turned on for your Google account, Android may back up the app's data to your own Google account so it can be restored on a new phone. This is controlled by Android and Google, not by us, and we cannot access it.
Backup files and CSV export: when you create a backup file or export to CSV, the file is saved where you choose. Anyone with access to that file can read it, so keep it somewhere safe.

4. Sync (Paycalm Premium)

Sync is optional and off by default. When you turn it on and sign in with Google, the app copies the data listed in section 2 to Google Cloud Firestore and keeps it up to date across your phones. The data is protected by Google's encryption in transit and at rest, and by access rules that let only your signed-in account read or write it. It is not end-to-end encrypted. We do not look at your synced data, except to help you when you ask us to or when the law requires it, and we do not use it for ads or sell it. When you delete an item, a small deletion marker (the item's ID and the time, with no content) stays in the cloud so your other phones delete it too.

If your Premium subscription ends, Sync pauses: nothing more is uploaded, and the copy in the cloud is kept so Sync can continue if you subscribe again. You can sign out of Sync at any time. To delete your account and the cloud copy, use Settings > Sync > Delete account and cloud data; the data on your phone stays (section 8).

5. Premium purchase verification

When you buy Paycalm Premium, restore it, or open the app while you have a Premium subscription, Paycalm checks the subscription with our server so that Premium is unlocked only for real, active purchases. If you have never bought Premium, the app does not contact our server for this.

What is sent from your phone

The purchase token that Google Play gave the app for your subscription, the product name (plus) and the app's package name.
A Firebase user ID. If you are not signed in to Sync, the app creates an anonymous Firebase account in the background: a random ID with no name or email, and no screen to fill in. If you are signed in to Sync, your Sync user ID is used instead. The sign-in token that proves this ID is sent with the request; our server reads only the user ID from it, not your name or email.
A Firebase App Check token (Google's check, using Google Play Integrity, that the request comes from the real Paycalm app installed from Google Play) and the Firebase installation ID that Firebase services use.
As with any internet request, your IP address and basic device information reach Google's servers.

The check does not include your transactions, amounts, account or category names, notes, or any other budget data. While waiting for our server's answer, the app keeps the purchase token in its private storage on your phone (it is excluded from Android backup) and removes it once the server has given a final answer for that token.

What our server does and stores

Our server asks the Google Play Developer API whether the subscription is active, and Google Play also sends our server notifications (renewed, canceled, on hold, expired, refunded) that make it ask again. We store only this, in Google Cloud Firestore in the United States:

A subscription record linked to the user ID: the plan name, whether it is active, the expiry date, the status reported by Google Play (for example active, canceled or expired), the app's package name, the time of the last update, and, after a refund, the Google Play order number and the refund type.
A record named by a one-way hash (SHA-256) of the purchase token, holding the user ID, the plan name, and the latest status and time from Google Play notifications. We do not store the purchase token itself on our server, and we do not store your card or payment details, name or email from Google Play.

Our server's operating logs (made by Google Cloud) may contain the user ID, the first characters of that hash and the subscription status. Google Cloud keeps such logs for a limited period (30 days by default). These records are not readable from the app or by other users.

Why, and who receives it

To verify and maintain your subscription (including restoring Premium after a reinstall or on a new phone, and turning it off when the subscription ends or is refunded) and to prevent fraud, for example one subscription unlocking Premium on several accounts. The data is handled by Google (Firebase, Google Cloud and Google Play) on our behalf. We do not use it for ads and we do not sell it. Your purchase history itself stays with Google Play.

Is it linked to other data?

If you only use the anonymous ID, the record is tied to a random ID and does not contain your name, email or budget data. If you sign in to Sync, the app uses your Sync user ID for the check, so the subscription record is linked to your Sync account (the same user ID that your synced data and sign-in account use). Signing in to Sync replaces the anonymous ID on your phone; the earlier anonymous record stays and is marked inactive. After a reinstall or clearing the app's data, the anonymous ID changes and the subscription moves to the new ID the same way.

How long we keep it and how to delete it

We keep these records while you have a subscription, and afterwards for as long as we need them to handle refunds and disputes and to prevent fraud. They are not deleted automatically at the moment, and canceling the subscription or uninstalling the app does not delete them. Settings > Sync > Delete account and cloud data deletes your synced data and sign-in account but does not remove the subscription records. To have them deleted, email us (section 12) and we will complete deletion within 30 days. If you signed in to Sync we can find your record through that account. A record that only has an anonymous ID contains nothing that identifies you to us, so we may not be able to find it; we will tell you if that is the case. Deleting a record does not cancel your subscription (cancel it in Google Play), and if you still have Premium, the next check of your subscription creates a new record.

6. Permissions the app asks for

Permission	Used for
Internet	Exchange rates, crypto prices, analytics, crash reports, settings, ads, Google Drive backup, Sync, checking your Premium subscription (sections 2 and 5)
Advertising ID	Ads in the free version (section 2)
Microphone	Voice input, only when you tap the microphone. You can deny it and type instead.
Notifications	Bill and daily reminders you turn on
Run at startup	Re-scheduling your reminders after the phone restarts
Fingerprint / face unlock	App lock, if you turn it on. Biometric data stays in Android; the app only receives "unlocked" or "not unlocked".

Paycalm does not ask for the camera or photos permission: receipt photos are taken by your phone's camera app or picked with Android's photo picker, which share only the photo you choose.

7. What we do not do

We do not connect to your bank or ask for bank logins.
We do not move money or make payments.
We do not sell your personal information.
We do not require an account to use the app. Signing in with Google is needed only for Sync. If you buy Premium, the app also creates an anonymous ID in the background (no name or email) to check your subscription (section 5).

8. Keeping and deleting your data

On your phone: data stays until you delete it in the app, clear the app's storage, or uninstall the app.
Google Drive backups: stay in your Drive until you delete them in the app (when turning backup off) or remove Paycalm's access and its hidden data in your Google Drive settings (Manage apps).
Sync data and sign-in account: your synced data stays in the cloud while you use Sync, and after your subscription ends, until you delete it. Settings > Sync > Delete account and cloud data deletes your synced data and then your sign-in account right away (Google may ask you to sign in again first). If you no longer have the app or cannot use that button, email us as described at paycalm.web.app/delete-account and we will complete deletion within 30 days.
Premium subscription records: kept while you have a subscription and afterwards as long as needed for refunds, disputes and fraud prevention; deleted when you email us (section 5). Your purchase history itself stays with Google Play.
Analytics and crash reports: analytics data is kept by Google Firebase for up to 14 months and crash reports for up to 90 days, and neither is linked to your name. To ask us to delete analytics data linked to your app instance, email us (section 12).

9. Security

Your data is protected by Android's app sandbox and device encryption, and, if you use them, by Google's security for Drive and Firebase. You can add a PIN or fingerprint lock in the app's Settings. No method of storage is perfectly secure, so please also protect your phone and your Google account with a screen lock and a strong password.

10. Children

Paycalm is not directed to children under 13, and we do not knowingly collect information from them.

11. Changes to this policy

If we change how the app handles information (for example, adding an online AI option), we will update this page and the effective date above, and tell you in the app before any new kind of data leaves your device.

12. Contact

Questions or requests: getitdone.best@gmail.com