Privacy Policy — My Instincts
Effective date: October 25, 2026 · Developer: CoreSpaces L.L.C-FZ
ON-DEVICE · NO ADS · NO DATA SALEMy Instincts: Expense Tracker is built on one rule: your spending data stays on your device unless you explicitly choose otherwise (for example, an encrypted backup to your own cloud storage). This policy explains what the app accesses, why, and what may leave your phone.
Summary
- No account, sign-up, or login.
- No analytics SDKs, no crash-reporting SDKs, and no advertising SDKs.
- We do not operate a server that receives your notifications or transaction history. Play Data safety reports no data collected or shared by us.
- Payment alerts are read via Android's notification listener, parsed on your phone, and stored in the app's private storage.
- Optional actions (backup, missed-alert report, CSV export) only happen when you initiate them. Pro purchases go through Google Play Billing; we do not receive your spending data from those flows.
What the app accesses, and why
| Permission / capability | Why it's used | Leaves the device? |
|---|---|---|
| Notification access | Reads payment-related notifications from your bank, UPI, and card apps so amounts can be added to your expense log on-device. | Never, unless you choose an export or report described below |
| Notifications (post) | Optional reminders or status alerts from the app itself, if you enable them. | Never |
| Internet | Google Play Billing for optional Pro purchases; Google Play In-App Review when the app requests a rating (handled by Play Store, not by us receiving your data). No cloud sync of your transactions. | Purchase and review flows only; no spending content sent to us |
| Storage / Files | Save encrypted backups you create, CSV exports (Pro), or statement imports you select — to storage you control. | Only files you explicitly save or share |
The app does not request SMS permission or bank-login credentials.
What we do not do
- We do not operate any server that receives your notifications, transaction history, or exports by default.
- We do not use Google Analytics, Firebase Analytics, Crashlytics, ad networks, or third-party tracking or attribution SDKs for your spending data.
- We do not sell or share personal data, because we do not receive it in the ordinary course of using the app.
- We do not require account creation, so we hold no user database.
On-device processing
Parsing and categorization of payment notifications happens on your phone. Questions you ask about your spending (where available) are answered on-device. Notification content is not transmitted to us for inference or storage.
Data storage
Transaction data the app captures is stored locally in the app's private storage on your device. You can delete all app data from Android Settings or by uninstalling. Optional app lock (PIN or biometrics) adds a layer of protection on top of your device lock screen.
What can leave your device (only if you choose)
- Encrypted backup: If you enable backup, you set a passphrase; the backup is encrypted before it is saved to Google Drive or Files you control.
- Missed-alert report: If you report a parsing issue, the app shows you exactly what would be sent before anything leaves your phone. You decide whether to send it.
- CSV export (Pro): A file you save or share yourself.
- Pro purchase: Processed by Google Play; Google sees billing information, not your transaction history.
Because backup and reporting are optional, we do not describe the app as "100% offline."
Children's privacy
My Instincts is not directed at children and is not intended for use by anyone under 13 (or the relevant minimum age in your jurisdiction).
Changes to this policy
If this policy changes, we will update the effective date above and, for material changes, note it in the app's release notes.
Contact
Questions about this policy or your data: support@corespaces.ae
CoreSpaces L.L.C-FZ