Privacy Policy

1. Introduction

Welcome to Pikash. We are committed to protecting your privacy and ensuring you have a secure experience when using our local-first personal finance tracker. This Privacy Policy explains how we collect, use, and safeguard your information.

2. Data Collection and Storage

Pikash is designed with a "local-first" architecture. This means that your financial data (including wallets, transactions, goals, and debts) is primarily stored locally on your device. We synchronize this data with our secure cloud servers (Supabase) solely for the purpose of backup and multi-device access, and only if you choose to create an account.

3. How We Use Your Information

The information collected is used to:

• Provide, maintain, and improve our services.
• Enable seamless synchronization across your devices.
• Provide personalized AI-driven financial insights (only with your explicit consent).

4. Device Permissions & Sensitive Data

Pikash only requests the permissions it needs for features you choose to use. Every permission below is optional and can be disabled at any time from your device settings.

Microphone & Voice Entry

When you use voice entry to log a transaction, Pikash uses your device's built-in speech recognition to convert your speech to text on your device. The microphone is only active while you are actively recording. We never store or upload the raw audio. Only the resulting text transcript is sent to our AI service so it can be parsed into a transaction.

Notification Access

If you enable the transaction detector, Pikash uses Android's notification access to read incoming notifications only from the finance, bank, and e-wallet apps you explicitly add to your whitelist. This is used to automatically detect and suggest transactions. Notifications are matched against on-device rules; when you enable AI parsing, the relevant notification text may be sent to our AI service to extract the transaction details. Notifications from non-whitelisted apps are ignored, and this feature is entirely opt-in.

Receipt Images & Photos

Any receipt or transaction images you attach are stored locally on your device only. These images are never uploaded to our servers or included in cloud sync.

Cloud Synchronization

Cloud sync is optional and only runs when you are signed in. When enabled, your financial records (wallets, transactions, goals, debts, and related metadata) are backed up to our secure cloud (Supabase) so you can restore them and access them across devices. Sync is user-initiated through the app, and all synced data can be permanently removed via the Account Management page.

AI Processing

AI features run only when you explicitly trigger them (for example, voice entry, the chat assistant, or AI notification parsing). When triggered, we send the relevant text (such as your transcript or notification text) along with lightweight context about your wallets and categories so the assistant can respond accurately. We do not use your data to train third-party models.

Subscription Data

Pikash Pro is processed through RevenueCat and the Google Play Store or Apple App Store. Pikash receives only your subscription status and entitlements (whether you are on the free or Pro tier, and renewal or expiry dates). We never receive or store your full payment card details, which are handled entirely by the app store.

5. Data Deletion

You have full control over your data. You can request the complete deletion of your account and all associated data at any time via the Account Management page. Upon request, all synced data on our servers will be permanently removed.

6. Contact Us

If you have any questions about this Privacy Policy, please contact us through the support channels provided in the Pikash app.