Privacy Policy
PiggyLedger ("the App") is developed by an independent developer ("we", "us"). This policy explains what data the App collects, why, and how you can control it.
In short: we ourselves do not read, store, or analyze your email address, your Google account details, or the contents of your receipts. Google sign-in exists only so your phone can talk directly to your Google Drive — that connection never passes through us. If you use the optional AI-enhance feature, the text extracted from a receipt (never the photo itself) is sent directly from your device to Google's Gemini API to auto-fill fields — this only happens when you choose to use it, and it's a direct device-to-Google exchange we don't see or store a copy of either. The only thing we see about your sync setup is a yes/no ("is sync turned on") and which option you picked ("Wi-Fi" vs "Manual") — never who you are or what's in your data.
1. Data we collect
Category A — needed to run a feature you turn on. This data is exchanged directly between your device and Google; we never store a copy or analyze it.
| Service | What it touches | Why |
|---|---|---|
| Google Sign-In | Google's own sign-in handshake identifies your account so the App can be authorized to access your Drive — we do not store your email or profile | Required only if you turn on Drive backup; skip sign-in and this never happens |
| Google Drive & Sheets | Your receipt photos and expense data, written directly from your device to a folder the App creates in your own Google Drive | Cloud backup and optional spreadsheet export — this data belongs to you, stays in your Drive account, and we never see or host a copy |
| Google Gemini API | The text extracted from a scanned receipt via on-device OCR (merchant name, date, amounts) — sent directly from your device to Google's Gemini API. The receipt photo itself is never sent, only this extracted text | Optional AI-assisted field detection, only when you choose to use it — this exchange is between your device and Google directly; we don't see or store a copy |
Category B — data we actually look at, to run and improve the App. Anonymous, aggregate only — never your email, name, or receipt content.
| Service | What it collects | Why |
|---|---|---|
| Google AdMob | Advertising ID and ad interaction data | To display in-app ads (some may be personalized, per your device's ad settings) |
| Firebase Crashlytics | Crash logs, device model, OS version, app version — not linked to your identity | To detect and fix bugs/crashes across different devices |
| Firebase Analytics | Anonymous product signals only — e.g. whether sync is turned on (yes/no), which sync mode you picked (Wi-Fi/Manual), which screens/settings get used. Never your email, account details, or receipt content | To see which features are actually used so we can improve or retire ones nobody touches |
2. Data storage & sharing
- Your receipt data lives on your device and, if you enable sync, in your own Google Drive — we do not host a copy on our own servers.
- Crash and usage data is processed by Google/Firebase as our service provider; we do not sell any data to third parties.
- Data in transit is encrypted (HTTPS/TLS).
3. Data retention
Crash and usage logs are retained per Firebase's default policy (currently around 90 days) and then deleted automatically. Your receipt/backup data in Google Drive is retained until you delete it yourself — we never delete your Drive files on your behalf.
4. Your choices
- Revoke the App's access to your Google account anytime at myaccount.google.com/permissions.
- Turn off Drive sync and Sheets export anytime in the App's Settings.
- Reset your advertising ID or opt out of ad personalization in your device's system settings.
- Uninstalling the App removes all locally stored data (your Drive backup, if enabled, is unaffected).
5. Children's privacy
PiggyLedger is not directed at children under 13, and we do not knowingly collect personal information from children.
6. Changes to this policy
If this policy changes, we'll update the "Last updated" date above. Continued use of the App after a change means you accept the updated policy.
7. Contact us
Questions about this policy or your data? Email piggyledger@gmail.com.