Privacy Policy

Last updated: August 19, 2026

In short

Coffr stores your transactions, budgets, categories, and payment methods only on your own device. There is no account, no server, and no cloud sync. If you turn on SMS auto-tracking, message parsing happens entirely on your device — we never see or upload the text of your messages. The only thing that leaves your device is a small set of anonymous, aggregate usage signals (described below) that never include your amounts, merchants, notes, or categories.

1. Who this applies to

This Privacy Policy explains how Coffr ("the app", "we", "our") handles information when you use it on Android or iOS. Coffr is developed and maintained by an independent developer, not a company, bank, or financial institution.

2. There is no account and no server

Coffr is local-first. Every transaction, category, budget, payment method, and note you create is written to a SQLite database that lives only on your device. We do not operate a backend for your financial data, so we never receive, see, or store it ourselves. Nothing is backed up to a cloud service by the app. If you uninstall Coffr or erase its data, that information is gone — export a CSV first (Settings → Export as CSV) if you want a copy.

3. SMS auto-tracking (optional, Android only)

If you turn on "Auto-log from SMS" in Settings, Coffr reads incoming SMS messages on your device to detect bank and UPI transaction alerts, using the RECEIVE_SMS / READ_SMS Android permissions. This processing happens entirely on-device:

Message text is parsed locally to pull out a merchant name, an amount, and (for cards) the last four digits.
The raw message text is kept only long enough to show the parsed result to you for review in the app, then discarded — it is never uploaded, logged remotely, or shown to us.
We never ask for, read, or store a full card number, UPI PIN, password, or one-time passcode.
Messages unrelated to a transaction (OTPs, promotions, personal texts) are not stored or transmitted anywhere.

You can turn this off at any time in Settings, which stops any further reading of new messages. Turning it off does not delete transactions already logged from earlier messages — you can delete any of those individually from Activity.

4. Notifications

Coffr can remind you once a day to log a spend, if you turn it on in Settings. This reminder is scheduled entirely by the operating system on your device using its local notification scheduler. It does not use push notifications, does not register a remote device token, and does not involve any server of ours.

5. Anonymous product analytics

Coffr sends a small set of anonymous, structural usage signals to TelemetryDeck, a privacy-focused analytics provider, so we can tell which parts of the app are actually used. This is the one category of data that leaves your device, and it is deliberately narrow:

What is sent: event names only — for example, that an expense was added, a budget was set, or data was exported — along with a couple of non-identifying structural flags, like whether the expense had a category attached, or which type of payment method (card / UPI / cash) was created.
What is never sent: amounts, merchant names, transaction notes, category names, payment method labels or card digits, SMS content, or anything else that describes your actual spending.
How you're identified: by a random identifier generated on your device the first time the app runs. It is not your name, email address, phone number, or advertising ID, and it cannot be used on its own to identify you personally.
Who processes it: TelemetryDeck (telemetrydeck.com/privacy), acting as our analytics processor under their own privacy and data-protection terms.

We do not use this data to build an advertising profile, and we do not sell or share it with data brokers or advertisers.

6. Google Play update checks

On Android, Coffr asks Google Play whether a newer version of the app has been published, using Google's own in-app update API (Play Core). This check is handled by Google Play services on your device and is governed by Google's own Privacy Policy, not by us — we don't receive anything from this check ourselves beyond a yes/no on whether an update exists.

7. What we don't do

We don't show ads or use your data for ad targeting.
We don't sell or rent your data to anyone.
We don't require an account, email address, or phone number to use the app.
We don't have access to your bank, card, or UPI credentials — Coffr never connects to your bank directly.

8. Your controls

Turn off SMS auto-tracking any time from Settings.
Delete any single transaction from its detail view.
Export everything as a CSV file from Settings → Export as CSV.
Erase all data from Settings → Erase everything. This is permanent and cannot be undone from within the app.
Uninstall the app at any time — this removes its local database, including anything not already exported.

9. Children's privacy

Coffr is not directed at children and we do not knowingly collect personal information from children under the age required by applicable law in your country. If you believe a child has provided us information through the app, please contact us so we can address it.

10. Changes to this policy

If this policy changes, we'll update the "Last updated" date at the top of this page. Material changes will also be reflected in the app's release notes where practical.

11. Contact

Questions about this policy or your data can be sent from inside the app: Settings → From the developer → Write to the developer.