Privacy Policy

1 Information We Collect

Information You Provide

• Account details: name, email address, and password when you register
• Financial data: income, expenses, transactions, budgets, goals, and debt records you enter
• Categories, tags, and payees you create to organise your transactions
• Recurring rules, reminders, and bill schedules you configure
• Profile preferences, home currency, timezone, and app settings
• Receipt photos you choose to attach to transactions (upload requires internet connectivity; the transaction itself saves offline)

Information Collected Automatically

• Device information: device type, operating system version, unique device identifiers
• App usage data: features used, screens visited, session duration
• Crash reports and error logs to help us improve the app
• Push notification tokens (only to deliver reminders you request)
• Exchange rate data fetched from public APIs for multi-currency conversion

Inka AI Conversation Data

• Questions you ask Inka AI and Inka's responses (session-only — deleted when you close the screen)
• Aggregated financial summaries sent to Google's Gemini API to generate responses (see Section 4A)
• A monthly count of Inka AI questions used (for usage limit enforcement only)

What We Do NOT Collect

• We do not connect to your bank accounts or financial institutions
• We do not collect payment card numbers or banking credentials
• We do not access your contacts, microphone, or GPS location
• For Inka AI: we send only aggregated, anonymised summaries — never raw transactions, account numbers, or personal identifiers (see Section 4A)
• For PDF Import: we send extracted merchant names and amounts to classify transactions — never the PDF file itself, banking credentials, or account numbers (see Section 4B)
• We do not collect camera data except receipt photos you explicitly choose to attach

2 How We Use Your Information

We use the information we collect only to:

• Provide, operate, and maintain the Inkapify app and all its features
• Sync your financial data securely across your devices
• Send push notifications for reminders and alerts you have configured
• Enforce Inka AI monthly usage limits per your subscription tier
• Process and verify your subscription status via RevenueCat
• Respond to your support requests and resolve technical issues
• Improve app performance, stability, and user experience
• Comply with legal obligations

• We do not sell your personal information to third parties
• We do not use your financial data for advertising purposes
• We do not share your data with any advertising networks

3 Data Storage & Security

Your data is stored in two places: locally on your device using an on-device database, and in the cloud on our secure servers. All cloud data is encrypted in transit using TLS/SSL and encrypted at rest using AES-256.

Offline-First Architecture

Inkapify is designed to work fully offline. Your financial data is saved to your device first and accessible at all times without an internet connection. When connectivity is available, changes are automatically synced to our cloud servers within seconds. This means your data is always available regardless of network status.

Security Measures

Our security measures include:

• Row-level security policies — you can only ever access your own data
• Encrypted database connections for all server communications
• Secure authentication with hashed passwords (never stored in plain text)
• Optional App Lock using device PIN, fingerprint, or Face ID
• JWT tokens stored in device secure storage (not accessible to other apps)
• Regular security monitoring, audits, and updates

While we implement strong security measures, no method of electronic storage or transmission is 100% secure. We are committed to protecting your data to the best of our ability. If device storage is wiped before a sync completes, locally unsaved changes may be lost — we recommend using the CSV export feature as a regular backup.

4 Data Sharing & Third Parties

We do not sell, trade, or rent your personal information. We share limited data only with the following trusted service providers necessary to run the app:

Cloud Infrastructure

Database hosting, authentication, and file storage. Your financial data is stored on secure servers with strict access controls and data isolation policies ensuring only you can access your data.

Google (Gemini AI)

AI processing for the Inka AI assistant and PDF bank statement import features. Only aggregated, anonymised financial summaries and extracted transaction text are shared — never raw data or personal identifiers. See Sections 4A and 4B for full details.

RevenueCat

Subscription management and in-app purchase processing for Inkapify Pro. Only your anonymous user ID and subscription status are shared. RevenueCat never receives your financial data.

App Delivery Infrastructure

App build infrastructure and over-the-air update delivery. No personal financial data is shared with our app delivery provider.

Google Play

App distribution and payment processing for subscriptions and donations. Google Play handles billing in accordance with their own privacy policy.

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities such as a court order.

Business Transfers

If Inkapify is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your data is transferred and subject to a different privacy policy.

4A Inka AI — How Your Data Is Used

Inkapify includes an AI-powered assistant called Inka, powered by Google's Gemini AI. This section explains exactly what data is shared with Google when you use Inka AI.

What We Send to Google's Gemini AI

When you ask Inka a question, we send only aggregated, anonymised financial summaries — never your raw data or personal identifiers. Specifically:

• Total income and expenses for the current month (single numbers only)
• Top spending category names and total amounts — any personal names, email addresses, phone numbers, or account numbers embedded in category labels are automatically masked before being sent (e.g. "Payment to John Smith" becomes "Payment to [name]")
• Budget utilization — percentage used and remaining amount (no budget names)
• Recurring bill names and upcoming schedule — due dates, amounts, and frequency (personal names, emails, phone numbers, and account numbers in bill names are automatically masked)
• Investment portfolio total value only (no institution names)
• Total loan and fixed deposit values (no account numbers)
• Goal and debt summary counts (no goal names or person names)
• Your question and the last 8 messages of the current conversation

What We Never Send to Google's Gemini AI

• Your name, email address, or any personal identifiers
• Raw transaction records, notes, or receipt images
• Account names, numbers, or financial institution names
• Loan lender names or account numbers
• Payee names, debt person names, or nominees
• Goal names, investment names, or payee merchant names
• Personal names or institution names embedded in category labels (these are automatically masked)
• Any internal IDs, device identifiers, or unique identifiers

Conversation Storage

Inka AI conversations are session-only. Your conversation is temporarily stored while the Inka screen is open. When you close the Inka screen, your conversation is permanently deleted from our servers. Conversations do not persist between sessions.

Usage Limits

Inka AI questions are subject to monthly usage limits based on your subscription tier: 15 questions/month on the free plan, 200 questions/month on Pro. Your usage count is tracked server-side and reset on the 1st of each month.

Google's Data Practices

Google processes the aggregated summaries we send via the Gemini API in accordance with their privacy policy. We use the Gemini API on a paid plan, under which Google does not use your data to train their AI models. See Google Gemini API Terms and Google's Privacy Policy for full details.

Opting Out

Inka AI is fully optional. If you prefer not to use it, simply do not open the Inka AI screen. Your financial data is never sent to Google's Gemini AI unless you actively ask Inka a question.

4B PDF Import — How Your Data Is Used

Inkapify includes a PDF bank statement import feature (Pro plan only) that uses AI to classify your transactions. This section explains exactly what happens to your data when you use this feature.

How It Works

When you import a bank statement PDF, the file is processed in three stages entirely on our secure servers:

1. Text extraction — The PDF is read by our server using a local PDF library (pdfjs). No AI is involved at this stage and the PDF never leaves our infrastructure.
2. Local matching — Extracted transactions are matched against your own past transaction history entirely on our servers. If all transactions match, no AI is used at all.
3. AI classification — Only unmatched transactions are sent to Google's Gemini AI as plain text rows (merchant name, date, amount) for category classification.

What Is Sent to Google's Gemini AI

• Extracted transaction descriptions (e.g. merchant names), dates, and amounts — for unmatched rows only
• Your category list (category names only — no amounts or personal data)
• Anonymised examples from your past transactions to improve matching accuracy

What Is Never Sent to Google's Gemini AI

• The PDF file itself — it never leaves our servers
• Your bank account numbers or account holder name
• Banking credentials, passwords, or login information
• Your name, email address, or any personal identifiers

Training Opt-Out

We use the Gemini API on a paid plan, under which Google does not use your data to train their AI models. See Google Gemini API Terms for Google's data practices.

Opting Out

PDF import is entirely optional and only activates when you explicitly select a PDF file and confirm the import. The PDF file is not stored by Inkapify after processing completes. If you prefer not to use it, use manual entry or CSV import instead.

4C Receipt Scan — How Your Data Is Used

When you use the Receipt Scan feature (Pro plan only), your receipt photo is sent to Google's Gemini AI API to extract transaction details — specifically: merchant name, total amount, date, and optionally the last 4 digits of a payment card if visible on the receipt.

What is Shared

• The compressed receipt image (JPEG) is transmitted over an encrypted connection (TLS) to Google's Gemini API
• Only structured data extracted from the receipt is returned to the app and stored as a normal transaction record
• Card last 4 digits (if extracted) are used only to pre-select your account in the app and are not stored separately

What Is NOT Shared or Stored

• The receipt image is never stored on our servers or in Google's systems — it is discarded immediately after extraction
• Full card or account numbers are never extracted or transmitted — only the last 4 digits if visible
• We operate on Google's paid API plan, under which Google does not use your data to train AI models

Opt-Out

Receipt scanning is entirely optional and only activates when you explicitly tap "Scan Receipt" and confirm the consent screen. Manual transaction entry is always available as an alternative. You can revoke consent at any time by going to Settings → Import → Reset Receipt Scan Consent.

4D Subscriptions & Donations

When you subscribe to Inkapify Pro or make a donation through the app, the following applies:

Payment Processing

All payments are processed by Google Play. Inkapify never receives or stores your payment card details. Google Play handles billing in accordance with their privacy policy.

RevenueCat

We use RevenueCat to manage subscription status. RevenueCat receives your anonymous user ID and subscription event data (purchase, renewal, cancellation). They do not receive your financial data.

Subscription Data We Store

• Your subscription tier (free, pro, beta)
• Subscription expiry date (for active Pro subscribers)
• RevenueCat customer ID (anonymous identifier for webhook matching)

Donations

Donations are one-time purchases processed entirely through Google Play. Inkapify does not store any additional data for donations beyond confirming the transaction was completed.

5 Data Retention

• Your financial records are retained while your account is active
• Deleted records are removed from your visible data immediately
• Inka AI conversations are deleted permanently when you close the Inka screen
• Inka AI usage counts are retained for up to 13 months for monthly limit calculations, then deleted
• When you delete your account, all personal data is permanently deleted from our servers within 30 days
• Receipt photos stored in our file storage are deleted when you remove them or delete your account
• Anonymised, aggregated usage statistics may be retained as they cannot be linked back to you

6 Your Rights & Choices

• Access — view all your financial data within the app at any time
• Correction — edit or update any information you have entered
• Deletion — delete individual records, reset all data, or delete your entire account
• Export — export your transaction data to CSV from within the app
• Notifications — enable or disable push notifications in device settings or within the app
• Inka AI opt-out — simply do not use the Inka AI screen

To exercise any of these rights or to request account deletion, contact us via our Contact page.

7 Push Notifications

Inkapify may send push notifications for:

• Bill payment reminders you have set up
• Budget threshold alerts you have configured
• Recurring transaction reminders
• Goal milestone updates

You can disable push notifications at any time through your device settings (Settings → Notifications → Inkapify) or within the app under Profile → Notifications.

8 Children's Privacy

Inkapify is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe your child has provided us with personal information, please contact us via our Contact page and we will delete it promptly.

9 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy at inkapify.com/privacy
• Updating the Effective Date at the top of this page
• Sending a push notification or in-app notice for material changes

Your continued use of Inkapify after the effective date of the revised policy constitutes your acceptance of the changes.