Privacy Policy

Last updated: October 29, 2026

This Privacy Policy explains what information the Accountant app collects, why it collects it, and who receives it. The app has the package name com.tribalfs.acct and is published on Google Play by Tribalfs ("we", "us"). This policy covers the app and this website.

1. Data that stays on your device

These are stored only on your phone, in the app's private storage:

• Your ledger: accounts, transactions, categories, labels, budgets, cards, loans, goals, subscriptions, bank details (including account numbers you enter), exchange rates and reports.
• Attachments, such as receipt photos and documents you add to transactions.
• Your settings, including the app-lock PIN. Android handles fingerprint and face unlock, and the app never sees your biometric data.
• API keys you enter for cloud AI (see section 6), encrypted with the Android Keystore.

Receipt scanning, text recognition (OCR), QR code scanning and reading dates and amounts from receipts run on your device, using Google ML Kit. The models for these features may be downloaded from Google the first time you use them. Receipt images leave your device only if you choose a cloud AI provider (see section 6).

Android's automatic cloud backup is turned off for this app. To back up your data, use Create backup or Sync across devices in Settings. A backup can be protected with a password; it is encrypted on your device, and we can't recover a forgotten password.

Drafts from bank alerts (optional)

If you turn on Settings › Bank alerts and give the app notification access, the app reads notifications from your text messaging app, your email apps and the apps of your banks and e-wallets. It reads only alerts from the banks of accounts you switched on, and turns money alerts into draft transactions. Other notifications are ignored and not stored. Alerts are processed on your device. An alert the app can't read is sent to your AI provider only if you set up a cloud provider (see section 6), with account numbers masked. You can turn this off at any time, and withdraw notification access in Android settings.

2. Data collected automatically by Google services

The app uses Google Firebase and Google Play services. They collect the following automatically:

Google processes this data under the Google Privacy Policy and the Firebase privacy terms. None of it contains your ledger.

3. Advertising

The free version of the app shows ads from Google AdMob (Google Mobile Ads SDK). AdMob may also show ads from these mediation partners:

• Unity Ads
• Liftoff (Vungle)
• Mintegral

These partners' SDKs are built into the app and may start when the app starts. For advertising, analytics and fraud prevention, Google and these partners may collect and share:

• your IP address, which may be used to estimate your general location
• your advertising ID, app set ID and other device identifiers
• ad interactions, such as views and taps
• diagnostics such as crash logs and performance data, and device information

Data is encrypted in transit. To learn more, see how Google uses information from apps that use its services.

Your choices:

• You can reset or delete your advertising ID in your device's Android settings, under Privacy › Ads or Google › Ads. Once you delete it, apps can no longer use it.
• On Android versions that support it, you can manage ad topics and other ad privacy settings under Privacy › Ads › Ad privacy.
• Where the law requires it (for example in the EEA, the UK and Switzerland), we ask for your consent before showing personalised ads.
• Some features let you watch a rewarded ad for extra uses. This is always your choice.
• Premium removes ads.

4. Purchases

Google Play processes Premium purchases (monthly and yearly subscriptions, and a one-time Lifetime purchase). We receive only the purchase status and a purchase token, which unlock premium features. We never see your card or payment details. See the Google Play Terms of Service.

5. Sync across devices and shared ledgers (optional)

Sync is off until you turn it on in Settings › Sync across devices and sign in with a Google account.

• The app asks only for Google Drive's drive.file permission. This lets it see only the files it creates or that you open with it, not the rest of your Drive.
• Your ledger is stored in your own Google Drive, in a folder named Accountant sync with one file per device. Attachments are stored in the .accountant_dont_delete folder.
• Each sync file includes three things that let the app tell your devices apart and recognise a reinstall:
  • the Device ID name you choose
  • the device model
  • a one-way hashed device identifier
• Your Google account email is stored on your device so the app can reconnect.
• We don't run a server for sync. Your data goes directly between your device and Google Drive, under Google's privacy policy.

Shared ledger: when you share a ledger, the people you add get read access, through their Google accounts, to your sync file in Drive. The QR codes you scan during setup contain each person's email address, device name and ledger ID.

People you share with can see every ledger record, plus the members' emails and Device IDs. Attachments, settings and API keys are not shared. You can stop sharing with a person at any time (Remove from ledger). They keep what had already reached their device but stop receiving changes.

6. AI Accountant (optional)

AI features are off until you choose an engine in Settings.

• On-device engine (a downloadable model): your data, including receipt pictures, stays on your device. Downloadable models come from Hugging Face, which receives only the download request.
• Cloud engines (Google Gemini, OpenAI, Anthropic Claude): you supply your own API key. When you use an AI feature, the app sends the content the feature needs only to the provider you selected. This can include:
  • your chat messages
  • figures the AI looks up in your ledger, such as balances, transactions and budgets
  • dashboard summaries used for insights
  • a scanned receipt: the picture and the text read from it, if the model can read pictures; otherwise only the text
  • bank alerts the app couldn't read itself, if you use Drafts from bank alerts
  • for accounts with bank details, the bank name, interest terms and the last 4 digits of the account number (never the full number)

The provider handles this content under its own terms and your account with it. Those terms may let it keep or use the content; some free API tiers do. Your API keys are stored only on your device and are sent only to the matching provider. We never receive your prompts, the AI's replies or your keys.

AI output may be inaccurate and is not professional accounting, tax or legal advice.

7. Exchange rates

To convert currencies, the app downloads exchange rates from two sources:

• currency-api, served through jsDelivr, with a backup at currency-api.pages.dev
• Polygon.io

The list of cryptocurrencies comes from CoinGecko. These requests contain only currency codes and dates. Like any web server, these services see your IP address.

8. Information you send us

We receive information only when you choose to send it:

• Contact us opens your email app. We receive your email address and whatever you write.
• Request import support opens your email app with a sample file you choose, plus your device model, Android version and app language. Before sending, the app asks you to use dummy data.
• Send feedback, where shown, opens your email app with what you wrote in the form, plus the app version, Android version, device make and model, and app language.

We use this information only to reply to you and to improve the app, and we delete it when we no longer need it.

9. Permissions

10. Security

Data sent over the internet uses encrypted connections (HTTPS/TLS). You can lock the app with a PIN or biometrics. We don't keep a copy of your ledger, so a breach of our systems could not expose it.

11. Keeping and deleting your data

• On your device: uninstalling the app or clearing its storage deletes your ledger, attachments, settings and API keys.
• In Google Drive: delete the Accountant sync and .accountant_dont_delete folders. To remove the app's access, go to Google Account › Security › Third-party connections.
• Advertising ID: reset or delete it in Android settings (see section 3).
• Firebase data: this is linked to random IDs, not to your name, and Google keeps it only for a limited time. To ask us to delete the data linked to your app installation, email us (see section 14).

12. Children

The app is meant for adults managing their own finances and is not directed to children under 13. We do not knowingly collect personal information from children. If you think a child has given us information, contact us and we will delete it.

13. Your rights and international transfers

Depending on where you live (for example under the GDPR or California law), you may have the right to:

• access, correct or delete your personal information
• object to how it is processed
• withdraw your consent

Most of your data is under your direct control, on your device and in your Google Drive. For anything else, contact us.

Google and the partners listed above may process data in other countries, including the United States, under their own safeguards.

We do not sell your personal information. Advertising partners may use identifiers as described in section 3.

14. Changes and contact

We may update this policy. When we do, we will post the new version on this page and change the "Last updated" date at the top.

If you have questions or requests, email tribalfs@gmail.com.