Privacy Policy

Last updated: June 21, 2026

Sanchyt ("the App") is a family expense management app built by Prasoon Awasthi. This privacy policy explains what data we collect, how we use it, and your rights.

        Key principle: Receipt images never leave your device. All OCR processing happens on-device. We only store the extracted text data (amounts, merchants, dates) — never the original images.
    

1. Information We Collect

Account Information:

Email address (for authentication)
Display name (optional, for family member identification)

Expense Data:

Amount, category, description, merchant name
Payment method, date, recurring status
These are entered manually or extracted from receipts via on-device OCR

Family Data:

Family name, member list, invite codes
Category budgets and monthly budget goals
Custom categories created by the family

2. Information We Do NOT Collect

Receipt images or photos (processed on-device only, never uploaded)
Location data
Contacts or phone number
Browsing history
Advertising identifiers
Any personally identifiable information beyond email and display name

3. How We Use Your Data

Authentication: To sign you in and manage your account
Expense tracking: To store and display your family's expenses
Reports & insights: To generate spending reports and budget alerts (computed locally on your device)
Family sharing: To share expense data among family members

4. Data Storage & Security

Cloud storage: Expense data is stored in Google Firebase Firestore with TLS 1.3 encryption in transit and AES-256 encryption at rest
Local storage: Sensitive data (API keys, authentication tokens) is stored in Flutter Secure Storage (Android Keystore / iOS Keychain)
Expense encryption: Sensitive expense fields are encrypted with a per-family AES key before storage
Access control: Firebase Security Rules ensure users can only access their own family's data

5. Third-Party Services

The App uses the following third-party services:

Firebase Authentication: For user sign-in (email/password and Google OAuth)
Firebase Cloud Firestore: For cloud data storage and real-time sync
Google ML Kit: For on-device text recognition (OCR) — no data sent to Google servers
Google Gemini AI (optional): For enhanced expense categorization — only extracted text (not images) is sent when the user explicitly enables this feature

Each service is governed by Google's Privacy Policy.

6. Your Rights

You have the right to:

Export your data: Download all your expenses as PDF, CSV, or JSON from Settings > Export Data
Delete your data: Permanently delete all your data from Settings > Delete My Data
Leave a family: Remove yourself from a family group at any time
Disable optional features: AI categorization can be turned off in Settings

        The App complies with India's Digital Personal Data Protection Act (DPDP) 2023 and the EU General Data Protection Regulation (GDPR). You can delete all your data at any time with a single action.
    

7. Data Retention

Your data is retained as long as your account exists. When you delete your data:

All your expenses are permanently removed from the database
Your user profile is deleted
If you are the sole admin, the entire family group is deleted
This action is irreversible

8. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us to have it removed.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy or your data, contact:

Prasoon Awasthi
Email: prasoon.awasthi@gmail.com