Privacy Policy

Last updated: June 2, 2026

This Privacy Policy applies to the mobile application Pito Expenses Manager ("the App"), published by AndromedaDevs ("we", "our", or "us") on Google Play and other mobile platforms.

Pito is a local-first expense tracking app. All your financial data is stored directly on your device in a local SQLite database. We do not operate any cloud servers that collect or store your personal information.

Information We Collect

The App processes the following information locally on your device:

• Receipt images — captured via camera or photo library for expense tracking
• Financial records — transactions, bills, incomes, budgets, and categories you create
• Device identifier — a stable device ID (iOS identifierForVendor or Android ID) used solely for OCR rate-limiting; not shared with third parties for advertising or tracking

We do NOT collect: email addresses, names, passwords, phone numbers, or any personally identifiable information. The App does not use user authentication or accounts.

Camera and Photo Library Access

The App requests access to your camera and photo library to capture receipt images for expense tracking. This access is optional — you can deny these permissions, but receipt scanning features will be unavailable. Images are stored only on your local device.

How We Use Information

We use collected information to:

• Store your financial records locally on your device
• Process receipt images through Google Cloud Functions (Gemini OCR) — images are sent securely, processed for text extraction, and are not retained by the cloud service after processing
• Rate-limit OCR requests using a device identifier to prevent abuse
• Enable data export so you can back up or transfer your information

Third-Party Services

The App uses one third-party service that may process information in accordance with its own privacy policy:

• Google Cloud Functions (Gemini AI) — used solely for receipt OCR processing. Receipt images are transmitted securely to the cloud function, processed for text extraction, and are not stored or retained by Google after processing. No personal identifiers are sent with the images (only a device ID for rate-limiting).

The App does NOT use Firebase Authentication, Firebase Storage, Cloud Firestore, Google Sign-In, Apple Sign-In, Firebase Analytics, or Crashlytics.

Data Storage and Security

All your personal data is stored locally on your device using SQLite. Your information never leaves your device except when:

• You use the receipt scanning feature (images sent to Google Cloud Functions for OCR processing only)
• You use the in-app export feature (you choose where to save the exported file via the system share sheet)

We take reasonable administrative, technical, and organizational measures to protect your information on your device.

However, no method of electronic storage or internet transmission is completely secure.

Data Retention

Your data is stored locally on your device until you choose to delete it or uninstall the App. Export files you create are stored where you choose (e.g., Files, iCloud, Google Drive) and are subject to those services' retention policies.

Your Rights and Data Control

Since all data is stored locally on your device, you have complete control:

• Export all data at any time using the in-app export feature
• Delete individual records within the App
• Delete all data by uninstalling the App or clearing its data in device Settings
• Control camera and photo library permissions in device Settings

Children's Privacy

The App is not intended for children under 13 years of age, and we do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

Contact Us

AndromedaDevs
Email: pito-support@protonmail.com