Privacy Policy

1. Summary

• No account: you never sign up, sign in, or give us an email address to use the App.
• No server: we operate no backend or database. Neraca makes no network requests of its own; the only network traffic is Apple’s App Store or Google Play handling an optional in-app purchase.
• No tracking or analytics: the App includes no third-party SDKs, telemetry, or crash reporters.
• No ads: there are no advertising frameworks or data-broker integrations.

Data leaves your device only when you choose to move it, for example by sharing a backup file or via your own personal device backups (such as iCloud Backup, Google One / Android Auto Backup, or a local computer backup).

2. Information Stored by the App

We do not collect any data. The App stores the following on your device so it can work:

2.1 Financial Records You Add

• Wallets (cash, bank, savings, credit card, e-wallet) and their balances
• Transactions, including amounts, dates, categories, tags, notes, and transfers
• Budgets, budget history, and budget proposals
• Assets and holdings (e.g. stocks, funds, deposits, gold, crypto, property), trades, and valuations
• Debts, including the name of the person or institution you entered, and their repayments
• Saving goals, contributions, and recurring transaction schedules
• Import rules the App learns from edits you make during an import

All of this is saved in the App’s private, sandboxed database using Apple’s SwiftData framework on iOS and Android’s Room persistence library (SQLite) on Android.

2.2 Statements and Screenshots You Import

When you import a bank or e-wallet statement (BNI, Jenius, GoPay, DANA, OVO) or a broker Matched Order screenshot, the App reads the file you pick entirely on your device:

• PDFs are read locally on-device using Apple’s PDFKit on iOS and PdfBox-Android on Android.
• Screenshots (on iOS) are read with Apple’s on-device Vision text recognition. No image or text is sent to any cloud OCR or AI service.
• Only the transactions or holdings you confirm in the preview are saved. Each imported transaction keeps the original statement line in its note so nothing is lost.
• The App does not keep a copy of the original PDF or image.

2.3 Photos, Files, and Other Permissions

Screenshots and files are chosen using the system photo picker or system document picker (Apple Document Picker on iOS, Android Storage Access Framework on Android). These system pickers give the App access only to the specific item you select. The App never requests or receives access to your broad photo library or general files. Neraca does not request permissions for contacts, camera, microphone, precise location, calendar, or device hardware identifiers.

2.4 Preferences Stored Locally

Small preferences are stored locally using Apple’s UserDefaults on iOS (declared in the App’s privacy manifest under NSPrivacyAccessedAPICategoryUserDefaults, reason CA92.1) and Jetpack DataStore on Android:

• Language choice (English or Bahasa Indonesia)
• Whether App Lock is turned on
• Today’s count of free adds, used for the daily limit
• The date of your last backup and other display preferences

On iOS, the App also reads file modification dates (NSPrivacyAccessedAPICategoryFileTimestamp, reason C617.1) only for files inside its own container, to decide when to take a safety snapshot of your database before an update.

3. App Lock (Biometrics & Passcode)

If you enable App Lock, Neraca uses the operating system’s secure biometric framework (Apple’s LocalAuthentication on iOS for Face ID / Touch ID / passcode, and Android’s BiometricPrompt for fingerprint, face unlock, or device PIN/pattern). Authentication is handled entirely by the operating system. The App receives only a boolean pass/fail result and never has access to your biometric samples, facial geometry, fingerprints, or passcode.

4. Neraca Pro Purchases (In-App Purchases)

• Neraca Pro is an optional one-time, non-consumable In-App Purchase processed entirely by Apple via StoreKit on iOS or by Google via Google Play In-App Billing on Android.
• We never receive or store your name, Apple ID, Google Account, payment card number, or billing address.
• The App validates purchases locally on your device by verifying cryptographic transaction receipts or signatures.
• Purchase handling is governed by Apple’s Privacy Policy on iOS devices and Google’s Privacy Policy on Android devices.

5. Backups

5.1 Backup Files You Create

Create Backup exports all your Neraca data to a single .neraca file. Where that file goes (Files, iCloud Drive, Google Drive, email, external storage, another app) is entirely your choice and is handled by the destination service you choose. The file is not password-protected, so treat it like a bank statement.

5.2 Safety Backups

Before a restore replaces your data, the App saves a copy of your current data to a dedicated local safety backups location (on iOS under Files › On My iPhone › Neraca › Safety Backups, and in the App’s private internal storage on Android). The three most recent snapshots are kept, and older ones are pruned automatically. Separately, before a new database migration runs during an update, a snapshot is kept inside the App’s private container to prevent data loss.

5.3 Device Backups

Like most apps, Neraca’s data is included in system backups (such as iCloud Backup or Finder/Apple Devices on iOS, and Android Auto Backup / Google One Backup on Android) if enabled by your device settings. We have no access to your cloud accounts or device backups.

6. Home Screen and Lock Screen Widget

On iOS, the New Transaction widget is a shortcut that opens the App’s add-transaction screen. It displays no balances or financial data and shares no data with the App.

7. Support Emails and App Reviews

Send Feedback opens your mail app with a message addressed to support.neraca.app@gmail.com. Nothing is sent unless you send it. If you email us, we use your email address and message contents only to reply and troubleshoot, and we do not add you to any marketing or mailing lists. Please avoid sending real statements, credit card numbers, or bank account numbers.

Rate Neraca opens the platform's native review prompt or store page (Apple App Store or Google Play Store). Ratings and reviews are processed and managed by Apple or Google.

8. Data Security

Your data resides entirely in the App’s sandboxed storage, which other apps cannot inspect. When your device is locked, hardware-backed file-based encryption (iOS Data Protection and Android File-Based Encryption) encrypts the underlying data. Because we operate no servers and maintain no remote database, there is no centralized database that can be breached or compromised. App Lock provides an additional layer of protection by requiring biometric authentication before showing your financial balances.

9. Children’s Privacy

Neraca is not directed at children under 13 and does not knowingly collect personal information from anyone, of any age.

10. Your Rights and Control

• Access & portability: everything is viewable in the App, and Create Backup exports all of it to a file you own.
• Correction: edit or delete any record directly in the App.
• Erasure: Settings › Reset › Erase All Data deletes all records. Safety backups you’ve made remain in your files until you delete them. Deleting the App removes everything stored inside it.

If you live in Indonesia (UU PDP, Law No. 27 of 2022), the European Economic Area, the United Kingdom, California, or another jurisdiction with data protection laws, your rights to access, correct, port, and erase your data are met directly by the App’s on-device design. Because we hold none of your data, there is nothing for us to retrieve or delete on our side.

11. Frameworks Used

Neraca uses only platform-native and vetted open-source libraries. No tracking SDKs, ad frameworks, or third-party analytics are bundled.

• iOS: SwiftData (database), PDFKit and Vision (local statement and screenshot reading), PhotosUI and Document Picker, LocalAuthentication (App Lock), StoreKit (Pro purchases), WidgetKit, and Charts.
• Android: Room & SQLite (database), PdfBox-Android (local PDF statement parsing), Storage Access Framework (system file pickers), BiometricPrompt (App Lock), Google Play Billing (Pro purchases), and Jetpack DataStore (local preferences).

12. Changes to This Policy

If a future version changes how data is handled (for example, an optional sync feature), this page will be updated before that version is released and the "Last updated" date will change.

13. Contact

Questions about this policy or Neraca’s privacy practices: