Profit Pocket — Privacy Policy

Last updated: 17 October 2026

Publisher: Dilipkumar
Privacy and support contact: dhilipkumar3140@gmail.com

1. What this policy covers

This policy describes the Profit Pocket Android app: an offline sales and expense tracker with monthly reports, expense categories, optional GST calculations, optional app lock and manual backup/restore. The publisher is responsible for this policy and for responding to privacy requests.

2. Information used on your phone

When you record or restore entries, the app processes the descriptions, dates, amounts, sale/expense types, expense categories and optional GST rate/amount mode you provide. These records may contain personal or business financial information. The app assigns an internal entry ID to support editing and deletion. It also stores local settings, such as whether app lock is enabled, the quick-backup folder URI you authorise and the last verified quick-backup time.

Records are processed locally to display entries, calculate totals and create the reports or backups you request. The current app has no server connection, user accounts, advertising, analytics, tracking or third-party data-collection SDKs. It does not send your ledger to the publisher. It does not sell your personal or financial information.

3. App lock and biometrics

App lock is optional and is off by default. If enabled, Android's authentication system checks an enrolled biometric or your device screen-lock credential. Profit Pocket receives the authentication result; it does not receive, collect or store your fingerprint template, face template, phone PIN, pattern or phone password. Availability depends on your device and Android version. Anyone who can successfully authenticate using an allowed device method can unlock the app.

App lock restricts access to the app screen. It does not add application-level encryption to the private ledger file. Android's private app storage and your device security remain important. Screenshot and recent-app preview protection is requested while app lock is enabled, subject to platform/device behavior.

4. Backups and Excel exports

Quick backups (.ppquick) use authenticated AES-GCM encryption with an app-specific Android Keystore key. The key requires recent Android device authentication; the app asks for fingerprint or screen-lock confirmation for each quick backup or quick restore. The key is not exported into the backup or sent to the publisher. Quick backups depend on this installation and its key: do not rely on them after uninstalling, clearing app data, changing phones, or removing/resetting device security. Copying a quick file to another phone does not make it recoverable there. Use a password backup kept off the phone for those recovery needs.

For quick backups, you choose a folder once through Android's system picker and grant ongoing read/write access. The app remembers that grant while Android and the provider allow it. It creates a new dated file only when you tap Back up now and authenticate; it does not schedule automatic backups. Saved file bytes are read back for checking before success is shown. Earlier quick backups are retained; an incomplete newly created file may be removed on failure. Restore my entries lists dated quick files in the chosen folder and validates/decrypts a selected copy before asking to replace the ledger. Dates are file-name labels, not verified creation history. Folder access failures or unreadable files leave the ledger unchanged. Changing the selected folder does not move or delete earlier backups.

Backup for another phone creates .ppbackup files encrypted using the separate backup password you choose. That password is not saved by Profit Pocket or sent to the publisher. The publisher cannot reset it or recover a backup whose password is lost. Older unencrypted Profit Pocket JSON backups can still be restored after validation and confirmation.

Excel .xlsx reports are not password protected or encrypted. They contain the selected month's recorded financial information, including GST details you entered. The app shows an export notice so you can choose whether to continue.

You choose export files and destinations using Android's system file picker; quick backups reuse the folder you previously authorised. You may select local storage or a cloud/storage provider installed on your phone. When you choose another provider, that provider may receive, store or sync the file under its own terms and privacy policy. The app has no automatic cloud upload service and does not choose a destination for you. A provider you selected may upload/sync files when the app writes a requested backup to that provider. Keep exported files and backup passwords private. Restoring a backup replaces all current ledger entries only after you confirm; it does not change the app-lock setting.

5. Permissions and other applications

The app declares Android's biometric permission for optional app lock and quick-backup authentication. It does not request internet, contacts, location, camera, microphone, SMS or broad storage permissions. File access is limited to files/destinations you select through Android's system picker. Android, Google Play, your email app and your chosen storage provider operate separately under their own privacy terms.

6. Retention and deletion

Your ledger remains in the app's private storage until you delete entries, replace them with a confirmed backup restore, clear the app's data in Android settings or uninstall the app. You can delete individual entries by tapping an entry and choosing Delete entry. Help > Delete local entries removes all ledger entries after an explicit confirmation. It keeps the app-lock setting, quick-backup folder preference and Android Keystore key.

Deleting local entries, clearing app data or uninstalling does not delete Excel reports, backups, emails or copies stored/shared outside the app. Delete those separately from the selected storage provider and any recipients. Local deletion is not a guarantee of forensic erasure from a device or its storage. The app disables its use of Android's automatic backup feature; manual exports and device/transfer behavior outside the app remain under your control and the platform's control.

There is no Profit Pocket account or developer-held cloud ledger to delete. The publisher cannot remotely view, erase or recover a ledger that stays only on your phone.

7. Contacting support

If you choose Contact support, the app opens an external email application with the public support address. Nothing is sent automatically. If you send a message, the publisher receives the email address, message and any attachments you choose to include. Do not send phone credentials, backup passwords or unnecessary financial information. Support correspondence is used to answer your request and retained only as needed for that request and applicable obligations. You can ask about deletion of support correspondence using the same contact address. Your email provider may retain its own copies.

8. Security and your choices

The app uses private local storage, optional Android authentication, authenticated encryption for quick and password backups, and validation before a confirmed restore. These measures do not guarantee protection against every device compromise, storage failure or unauthorized use. Secure your phone, use a strong backup password and keep a recovery copy. All app and security features are free; there are no ads, subscriptions, paid unlocks or payment collection in this release.

9. Intended audience and updates

Profit Pocket is designed for adults managing their own business records and is not directed at children. If you enter information about another person, only include information you are entitled to use for your records. If future versions change data handling, this policy will be updated before those changes apply. The date above identifies this version.

10. Privacy questions

For questions about this app's privacy practices or support correspondence, contact Dilipkumar at dhilipkumar3140@gmail.com.