Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Pito Expenses Manager ("the App") handles your information. Pito is a local-first expense tracking app: all your data is stored directly on your device, and we do not operate any servers that collect or store your personal information.

Information We Collect

The App processes the following information locally on your device:

• Receipt images — captured via camera or photo library for expense tracking
• Financial records — transactions, bills, incomes, budgets, and categories you create
• Device identifier — a stable device ID (iOS identifierForVendor or Android ID) used solely for OCR rate-limiting; not shared with third parties for advertising or tracking

We do NOT collect: email addresses, names, passwords, phone numbers, or any personally identifiable information. The App does not use user authentication or accounts.

Camera and Photo Library Access

The App requests access to your camera and photo library to capture receipt images for expense tracking. This access is optional — you can deny these permissions, but receipt scanning features will be unavailable. Images are stored only on your local device.

How We Use Information

• Store your financial records locally on your device
• Process receipt images through Google Cloud Functions (Gemini OCR) — images are sent securely, processed for text extraction, and are not retained by the cloud service after processing
• Rate-limit OCR requests using a device identifier to prevent abuse
• Enable data export so you can back up or transfer your information

Third-Party Services

The App uses one third-party service that may process information in accordance with its own privacy policy:

• Google Cloud Functions (Gemini AI) — used solely for receipt OCR processing. Receipt images are transmitted securely to the cloud function, processed for text extraction, and are not stored or retained by Google after processing. No personal identifiers are sent with the images (only a device ID for rate-limiting).

The App does NOT use Firebase Authentication, Firebase Storage, Cloud Firestore, Google Sign-In, Apple Sign-In, Firebase Analytics, or Crashlytics.

Data Storage and Security

All your personal data is stored locally on your device using SQLite. Your information never leaves your device except when:

• You use the receipt scanning feature (images sent to Google Cloud Functions for OCR processing only)
• You use the in-app export feature (you choose where to save the exported file via the system share sheet)

We take reasonable measures to protect your information on your device.

Your Rights and Data Control

Since all data is stored locally on your device, you have complete control:

• Export all data at any time using the in-app export feature
• Delete individual records within the App
• Delete all data by uninstalling the App or clearing its data in device Settings
• Control camera and photo library permissions in device Settings

Children's Privacy

The App is not intended for children under 13 years of age, and we do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

Contact

Email: pito-support@protonmail.com