Privacy Policy

In short: Your financial records — wallets, transactions, budgets — stay 100% on your device; they are never sent to any server. Tanukonomy has an optional account (§6) and uses Firebase Analytics/Crashlytics (§7) to understand usage and catch errors. Syncing your data to an account and a premium plan are still planned, not available yet (§8).

This policy explains how the Tanukonomy app (“the app”) and the tanukonomy.app website (“the site”) handle information. “We” means the developer of Tanukonomy.

1. Data you record in the app

The app stores the data you enter yourself: wallets and balances, transactions (amount, date, category, note), budgets, freelance projects and hours, and app settings. This data:

• is stored only in your device’s local storage;
• is never sent to our servers or third parties, because the app has no server;
• cannot be viewed, restored, or deleted remotely by us.

2. What we don’t collect

• Creating an account is optional, and we never see or store your Google account password — see §6.
• There is no connection to banks, e-wallets, or payment services, and we never ask for their passwords.
• There are no ads or ad trackers in the app, and we don’t sell or share your data with advertisers. The usage analytics in §7 are for product improvement, not ads.
• There is no access to your location, contacts, camera, or microphone.

3. Deleting your data

Because your data lives only on your device, you are fully in control. Uninstalling the app, or clearing its data in Android settings, permanently deletes all records. We keep no copy, so deleted data cannot be recovered by us.

4. Device backups

If your operating system’s built-in backup (such as Google backup on Android) is turned on, the system may include app data in your backup. Those backups are managed by the operating system provider under their policies, not by us.

5. Closed beta

To join the closed beta, you join a Google Group and the Google Play testing program with your Google account. Both are run by Google. As the group manager, we can see members’ email addresses; we use them only to grant beta access and do not share them. Feedback you send by email or through Google Play is used only to improve the app.

6. Account (optional)

Tanukonomy has an optional account. Core recording (CATAT, Transactions, Wallets, Budgets, Freelance) keeps working fully without creating one.

• Sign in with Google: through Firebase Authentication (a Google service), we receive the name, email address, and profile photo from the Google account you choose. We never see or store your Google account password.
• A small number of internal test accounts can also sign in with an email and password that we manage ourselves — there is no public sign-up via email and password.
• An account is currently pure identity: your wallets, transactions, and budgets are not sent to or stored on any server just because you sign in — see §8 for the planned sync feature.
• You can delete your account any time, from inside the app (Account icon on Home → Delete Account) or via thedelete account page.

7. Usage analytics and error reporting

Tanukonomy uses Firebase Analytics and Firebase Crashlytics (both Google services) to understand general feature usage and capture technical errors so they can be fixed. Both run for every user, regardless of sign-in status — unlike the account data in §6, which only exists if you choose to sign in.

• What’s collected: screens opened, basic events like opening the app, and technical information when an error occurs (device type, OS version, error trace).
• Does not include the content of your financial records — amounts, wallet names, and transaction notes are never sent to Analytics or Crashlytics.
• This data is processed by Google as our service provider for that purpose only — not for sale or showing ads; Tanukonomy shows no ads.

8. Coming feature: data sync and a premium plan

We plan to add syncing your data to your account (used across more than one phone) and an optional premium plan (freemium). This feature is not available yet. A few things are already settled for when it ships:

• turning on sync will be optional and separate from simply having an account — core recording will keep working fully offline as it does today;
• turning it on will mean some data (wallets, transactions, budgets) is sent to a server to sync between your own devices, not shared with other users;
• a premium plan will need payment details; those are handled by a third-party payment provider (e.g. Google Play Billing), not stored by us directly;
• before sync is active for anyone, we’ll update this policy with the full details: which server is used and how the data is protected.

9. This site

This site uses no cookies, forms, or analytics. The hosting provider may log standard technical data such as IP address and browser type for security and operations, under their own policies.

10. Children

The app is not directed at children under 13 and does not knowingly collect data from children.

11. Changes to this policy

If the app later adds a feature that changes how data is handled (including data sync and the premium plan in §8), we will update this page and its effective date before that feature becomes available.

12. Contact

Privacy questions can be sent to halo@tanukonomy.app.