Duit — Privacy Policy

Effective 29 October 2026 · Developer: Will.ii.am · Contact: work.dash10101@gmail.com · Bahasa Melayu

Duit is an expense tracker. This policy explains what it does with information on your phone. In short: your ledger never leaves your device. The only data that goes over the internet is what the advertising SDK collects, described in section 5.

1. What Duit keeps, and where

Everything you record in Duit — entries, accounts, categories, budgets, tags, templates, standing (recurring) entries, receipt photos and your settings — is stored only in the app's private storage on your device. Duit has no account, no login and no server, and it never uploads your ledger.

A backup file is created only when you choose Save a backup or Export as CSV, and it is written to the place you pick. What happens to it after that is up to you.

2. Notification capture (optional, off by default)

If you grant notification access, Duit reads notifications only from the apps on its list (banks and e-wallets, plus any you add yourself). It works out the amount and payee on your device and keeps the reading, with the notification's text, as a suggestion waiting for you to confirm or dismiss. Nothing is added to your ledger without your confirmation. Answered suggestions, and the notification text with them, are deleted after 14 days. Notification content is never sent off your device. Duit does not read SMS.

You can withdraw notification access at any time in Android's settings.

3. Camera and photos (optional)

If you photograph or pick a receipt, the image is stored in Duit's private storage. Its text is read on your device (Google ML Kit text recognition); the image and its text are not uploaded.

4. App lock (optional)

The app lock uses Android's own screen lock and biometric prompt. Duit never receives your PIN, fingerprint or face data; Android only tells it whether you were verified.

5. Advertising

Duit shows ads using the Google Mobile Ads SDK. To serve and measure ads and to prevent fraud, the SDK collects and shares with Google:

• your device's IP address, which may be used to estimate its general location;
• interactions with the app, such as launches and taps on ads;
• diagnostic information about app and SDK performance;
• device identifiers, including the Android advertising ID and app set ID.

This data is encrypted in transit. None of your ledger, receipts or notification content is ever given to the ads SDK. Where the law requires consent (for example in the EEA and UK), Duit asks for it through Google's consent form, and you can change your choice later from More → Ad privacy choices. You can reset or delete your advertising ID in Android's settings.

How Google uses this data: policies.google.com/technologies/partner-sites · Google's privacy policy: policies.google.com/privacy

6. Children

Duit is not directed at children under 13 and does not knowingly collect their information.

7. Deleting your data

Because your data is only on your device, you control it completely: uninstalling Duit, or clearing its storage in Android's settings, deletes all of it. Backup files you exported are not touched by this; delete them where you saved them.

8. Changes

If this policy changes, the new version will be published at this address with a new effective date.

9. Contact

Questions about this policy: work.dash10101@gmail.com

Duit — Dasar Privasi