PingBudget Privacy Policy
In short. Your transactions, accounts and categories are stored on your phone and are never uploaded. When you choose to use the AI, the words you type - or the text the app reads on your phone from a screenshot you import - are sent to our server and passed to an AI provider so they can be read - we do not keep them. Screenshots themselves are never uploaded. We do keep a device ID for a day, purely to count how many AI requests that device has made. The app also uses Google services for crash reports, basic usage statistics and ads.
This website counts visits and which buttons are clicked, on our own server. It sets no cookies and stores nothing at all on your device.
1. Who we are
PingBudget is published by Ali Bana ("we", "us"). You can reach us about anything in this policy at zaimeltech@gmail.com.
2. What stays on your device
The records that make up your budget never leave your phone:
- transactions - amounts, descriptions, dates, types
- accounts and their balances
- categories
- drafts, including the original text of any reply you sent or screenshot you imported
- screenshots you import - read on the phone, then discarded; the picture is never stored or sent
- your settings, such as currency symbol and language
All of this is held in a database on the device itself. There is no account to sign in to, no cloud sync and no server-side copy. Uninstalling the app deletes this data permanently and we cannot recover it for you.
3. What leaves your device
3.1 Text you send to the AI
When you reply to the PingBudget notification, or ask the app to retry a draft, the text you typed is sent over an encrypted connection to our server, together with the names of your existing categories and accounts so the AI can reuse them instead of inventing duplicates.
Our server does not store this text. It passes the text to a third-party AI provider, receives the interpretation, returns it to your phone and keeps no copy.
If you import a screenshot of a bank or wallet transaction history, the picture itself never leaves your phone. The app reads the text in it on the device, shows you that text, and sends only what you confirm - after any cropping or editing you do - in the same way as a reply, together with the name of the account you said the screenshot belongs to and today's date. That text can include merchant names, the names of people you paid or were paid by, amounts and reference numbers, so crop out anything you do not want read.
Because you can create, edit and delete every transaction, account and category by hand, this is optional: if you never use the notification reply or screenshot import, no text is ever sent.
3.2 Your device's ID, to count AI usage
The AI is free but not unlimited: each device gets a set number of requests per day. To count them, every AI request also sends your device's Android ID - an identifier that identifies the device, not you - and our server keeps a counter against it.
The counter is a number, not a history: it records how many requests are left today and nothing about what you asked for. It is deleted automatically at the end of each day (00:00 UTC), and it is used for no purpose other than applying the daily limit and preventing abuse of the free tier. We do not combine it with your advertising ID or with anything else.
The same identifier is sent when you watch a reward video, so the extra requests you earn are added to the right device's counter. Verifying a reward leaves one further short-lived record: your device ID together with Google's identifier for that single ad view, kept for up to 48 hours so that the same reward cannot be counted twice. Apart from these, nothing about you is stored on our own servers.
3.3 Crash reports and usage statistics
We use Google Firebase Crashlytics and Google Analytics for Firebase to find bugs and understand which features are used. These collect crash logs, diagnostic information about the device and app, and records of in-app events such as "a draft was accepted" or "a transaction was created".
These events never contain your financial data. They carry counts, outcomes and feature names - not amounts, merchant names, descriptions or category names.
3.4 Advertising
The app is free and shows ads through Google AdMob. AdMob receives your device's advertising identifier and technical information about the device in order to serve ads and measure them.
Where the law requires it, the app shows a consent form the first time it runs, letting you choose whether ads are personalised. You can reopen that choice at any time from Settings → Privacy options in the app, and you can reset or delete your advertising ID in your device's Android settings.
3.5 Visits to this website
This section is about the pingbudget.app website only - not the app. We count
visits to our two landing pages so we can tell whether the site explains the product. We do
this on our own server; there is no third-party analytics service on this site
and none of it is shared with anyone.
For each visit we record: a random identifier generated in your browser for that one page view and never reused; which of the two pages you opened; when the visit began; how long the page was open and how much of that it was actually in front of you; how long the page took to appear, and whether you left before it had; which of our named buttons you clicked; the domain of the site that linked you to us; your browser's language; a rough screen-size category (phone, tablet or desktop); the country your connection comes from; whether you interacted with the page at all (a tap, a scroll or a key press - never where, which key or how many); and whether your browser reports that it is being controlled automatically. The last two only help us tell visits by people from visits by automated programs.
The country is worked out by our hosting provider, Vercel, which passes us only a two-letter country code. We never receive a city or a location, and the address it was worked out from is not stored (see below).
The address pingbudget.app shows the page in Indonesian if your browser's
language is set to Indonesian, and in English otherwise. That uses only the language setting
your browser sends with every request, and nothing is stored to remember it: choosing a
language with the switch at the top of the page simply takes you to that language's address.
If you arrived through a link tagged with the name of a social network (for example from our TikTok or Instagram profile), our Google Play buttons pass that name on to Google Play, so we can see how many installs each channel brings. This is not recorded by us, and nothing about you is added to it.
We do not set any cookie, and we store nothing whatsoever on your device - no cookie, no local storage, nothing. We do not store your IP address. It is used only in a scrambled, unreadable form to count how often one connection may report, and that counter is deleted shortly afterwards. We do not store your browser's full identification string - only the rough category above. We never record the address of the page that linked you beyond its domain name, so a search you came from is not recorded.
Because nothing is kept on your device, two visits by the same person are two unrelated records and we cannot recognise you as a returning visitor. The site also honours your browser's “Do Not Track” setting: if it is switched on, nothing is recorded at all.
These records are deleted automatically after 30 days. Nothing here is connected to your app, your transactions or any purchase.
4. What we collect, in Google Play's terms
| Data | Why | Shared? |
|---|---|---|
| Purchase history and other financial information (the text you type) | To turn it into a draft transaction | No |
| App interactions | Analytics | No |
| Crash logs and diagnostics | Analytics, fixing bugs | No |
| Device or other identifiers | Advertising, analytics, and applying the daily AI limit (app functionality and fraud prevention) | Yes - with Google for advertising |
| Website usage (visits, button clicks, time on the page, page load time, country, whether the page was interacted with) | Understanding whether this website explains the product | No |
5. Who else processes your data
The text you send is interpreted by a third-party AI provider. Our server sends it to Google (Gemini) first, and only if that request fails does it send the same text to DeepSeek instead, so that the feature keeps working. No other AI provider receives your text.
They receive the text solely in order to interpret it, and handle it under their own terms for developer API traffic. We do not use your text to train any model of our own.
We also use Google for crash reporting and analytics (Firebase), for advertising (AdMob) and for hosting, and Upstash for the database that holds the daily request counter described in section 3.2. Upstash receives the device ID and the counter, and never the text you type.
The purchase records in section 8 and the website visit records in section 3.5 are held in a database hosted by Neon. Neon stores what is described in those sections and nothing else; it never receives the text you type.
6. Legal bases (for users in the EEA and UK)
- Performance of a contract - sending your text to be interpreted, because that is the feature you asked for
- Legitimate interests - crash reports and usage statistics, to keep the app working and improve it; the daily request counter, to keep a free feature affordable and to prevent abuse of it; and the website visit statistics in section 3.5, to understand whether this site explains the product
- Consent - personalised advertising, where you have given it through the consent form
7. International transfers
Our providers process data on servers outside your country, including in the United States. Where required, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard offered by the provider.
8. How long data is kept
- Your budget records - on your device, until you delete them or uninstall the app.
- Text sent to the AI - not retained by us. AI providers may hold it briefly for abuse monitoring under their own policies.
- The daily AI request counter - keyed to your device ID and deleted automatically at the end of each day (00:00 UTC).
- Reward verification records - when a reward video is verified (or support adjusts your allowance), your device ID and the identifier for that one event, kept for up to 48 hours so the same change cannot be applied twice, then deleted automatically.
- A purchase record - when you buy Pro or Premium, we keep the Play purchase token together with the device ID that claimed it, for as long as the subscription is active plus 30 days afterwards, so the entitlement can be restored and a refund or lapse can be honoured. We check every day whether a subscription is still active, and one that has ended stops counting as Pro or Premium from the next daily check. After those 30 days the record and the device link are deleted automatically. No account, name or email address is attached to it, because the app never asks for one.
- Crash reports and analytics - retained by Google under our Firebase settings, then deleted automatically.
- Website visit records - the visits described in section 3.5, kept for 30 days and then deleted automatically. They contain no address and nothing that identifies you.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent.
Most of it you can exercise yourself: the app has no account, and every record can be edited or deleted inside the app, or removed entirely by uninstalling. For anything held by our providers - crash reports and analytics - email zaimeltech@gmail.com and we will action the request. You also have the right to complain to your local data protection authority.
10. Children
PingBudget is not directed at children and we do not knowingly collect data from anyone under 13 (or the minimum age in your country). If you believe a child has used the app, contact us and we will help remove any data involved.
11. Security
All data sent by the app travels over encrypted HTTPS connections. Your budget records are stored in the app's private storage, which other apps on your device cannot read. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
If we change how the app handles data we will update this page and its "last updated" date. Significant changes will be announced in the app or in the release notes.
13. Contact
Ali Bana
zaimeltech@gmail.com