Privacy

Privacy Policy

Last updated: 29 June 2026

Draft for review. This policy describes how Spash works today and is written to be accurate, but it has not yet been reviewed by a lawyer. Have it checked against India's DPDP Act and Google Play requirements before relying on it as your final published policy.

The short version

Spash is a local-first app. Your financial data is stored on your device and is not sent to any Spash server — because Spash does not run one. We cannot see your accounts, balances, or transactions. The only time your data leaves your phone is if you choose to back it up to your own Google Drive.

Who we are

Spash ("we", "us") is a personal finance app for Android. You can reach us at hello@spash.in for any privacy question or request.

What data Spash stores, and where

Spash stores the information you enter yourself — such as account names, balances, transactions, categories, and your display name — in a database on your device. This data stays local. It is not transmitted to us and we have no access to it.

Google account and Drive backup

Backup is optional and off until you turn it on. If you connect a Google account, Spash:

  • uses Google Sign-In to authenticate you, and stores only your account email on your device to show which account is connected;
  • requests a single, narrow permission — access to its own private app-data folder in your Google Drive (the drive.appdata scope). This is a hidden folder only Spash can read; it cannot see, browse, or touch any of your other Drive files;
  • uploads a copy of your Spash database to that folder when you tap "Back up", so you can restore it on a new device.

That backup lives in your own Google Drive, under your own Google account, governed by Google's Privacy Policy. We never receive a copy. Disconnecting your account stops backups; you can delete the backup at any time from your Google account's app-data settings.

What we do not do

  • We do not sell, rent, or share your data with anyone.
  • We do not show ads or use advertising trackers.
  • We do not read your SMS, contacts, call logs, or location.
  • We do not require you to create an account to use the app.

Data you can export and delete

You're in control of your data at all times. Within Spash you can export your transactions as a CSV file, and you can delete your data — clearing everything from your device. Deleting the app removes the on-device database; deleting your cloud backup is done from your Google account.

Children

Spash is not directed at children under 13 (or the minimum age in your region) and we do not knowingly collect their data.

Changes to this policy

If we change how Spash handles data, we'll update this page and the "last updated" date above.

Contact

Questions or requests about your data? Email hello@spash.in.