1. Architectural Privacy Guarantees
AavakJavak: Expense Manager is engineered by Spedaris Technologies LLP under a privacy-first architectural framework. Unlike conventional banking and budgeting apps that harvest unencrypted transaction data for third-party loan underwriting or insurance telemarketing, AavakJavak is built to keep your personal ledgers strictly under your control.
2. Local-First SQLite Persistence
For users on the AavakJavak Core plan, all financial ledgers — including expenses, incomes, category allocations, savings jars, and recurring bill reminders — are stored primarily in a local SQLite database resident on your device hardware. These financial ledger records are not transmitted to or stored on our servers unless you explicitly sign in and activate cloud backup features.
3. Cloud Backup & Multi-Device Synchronization (Smart & Wealth Tiers)
When a user subscribes to AavakJavak Smart or AavakJavak Wealth and activates Cloud Synchronization:
- Client-Side Pre-Encryption: Data is encrypted using AES-256 GCM on your client device prior to transport over HTTPS/TLS 1.3.
- Row-Level Security (RLS): Server-side records are stored in PostgreSQL using strict tenant isolation policies so no account can query or mutate records belonging to another identifier.
- Vault Protection: Encrypted document files stored in the Financial Vault (PDFs, receipts, certificates) cannot be viewed by our engineers or infrastructure providers without your local device keys.
4. Third-Party Services & Processors
To provide app distribution, in-app billing, stability diagnostics, and conversational insights, AavakJavak integrates with trusted third-party providers:
A. Google AdMob (Advertising in Core Tier)
The free Core tier of AavakJavak is supported by advertisements served through Google AdMob. Google AdMob may collect and process device identifiers (such as Google Advertising ID/GAID), IP addresses, and app interaction telemetry to serve contextual and non-personalized or personalized advertisements according to your device privacy preferences. You can opt out of personalized ads at any time via Android Device Settings → Google → Ads.
B. AI Financial Assistant (Google Gemini AI)
When you interact with the conversational AI Copilot or run spending simulations, the text of your query and relevant anonymized contextual spending aggregates are securely relayed via encrypted server API to Google Gemini models for natural-language processing. Queries sent to the AI engine are processed ephemerally and are not used by Spedaris Technologies to train public AI models.
C. Google Play In-App Billing
All premium subscriptions (Smart and Wealth tiers) are processed through Google Play In-App Purchases. Spedaris Technologies LLP does not process, store, or have access to your credit card, debit card, or UPI banking credentials. Billing history, renewal dates, and cancellations are governed directly by Google Play Store terms.
D. Firebase Services (Analytics, Crashlytics & FCM)
We use Firebase Analytics and Firebase Crashlytics to monitor application crash reports and anonymous app performance metrics, helping us resolve crashes rapidly across diverse Android hardware. Firebase Cloud Messaging (FCM) is used to dispatch timely due date reminders for bills and EMIs.
5. Device Hardware Permissions
The mobile application may request the following Android device permissions:
- Camera / Storage: Strictly used for local Optical Character Recognition (OCR) smart receipt scanning and attaching invoice documents to transaction records. Photos are processed locally or stored encrypted.
- Microphone / Speech Recognition: Used strictly when you tap the voice logging microphone icon to transcribe spoken expense notes into text. Audio is not recorded or stored on our servers.
- Biometrics: Handled entirely by your device’s secure hardware enclave (Android BiometricPrompt) to unlock the app or decrypt document vaults. Biometric data never leaves your device.
- Notifications: Required to deliver multi-tier EMI, bill, and subscription due date alerts (10d, 5d, 3d, 1d before due date).
6. Website Inquiries & Customer Support
When you submit a message through our official website contact form or send an inquiry to support@spedaris.com, we collect your name, email address, inquiry category, and message text. This information is used strictly to respond to your technical questions, resolve bug reports, or deliver account assistance. We never use website inquiry emails for unsolicited marketing campaigns.
7. Data Retention & Your Right to Complete Deletion
You have absolute sovereignty over your records. You may trigger an immediate, irreversible wipe of your records at any time directly from the mobile app by navigating to Profile → Account & Security → Delete Account & Wipe Data.
If you have uninstalled the application or cannot access your phone, you can request an administrative account and data wipe via our web compliance portal:
8. Privacy Contact & Grievance Officer
For any inquiries, data privacy verification, or regulatory compliance under applicable Indian data protection laws, contact our Grievance & Compliance Team:
Spedaris Technologies LLP
Attn: Data Privacy & Compliance Officer
Email: support@spedaris.com or info@spedaris.com
Location: Ahmedabad, Gujarat, India