GhallaGhalla Privacy Policy
The short version
Ghalla keeps your money data on your phone. There is no Ghalla account, no advertising and no selling of data. The free app works without an internet connection.
What the app stores, and where
Your accounts, transactions, categories, budgets, goals, reminders, loans and recurring transactions are stored only on your device, in the app's private storage. We do not receive them and cannot see them.
You choose what leaves the device:
- Backups and exports (JSON or CSV) are files you create. Where you save or send them is up to you. A backup can be protected with a passphrase you set; if you forget it, the backup cannot be opened.
- Sharing a transaction sends the text you choose to the app you pick in Android's share sheet.
Deleting the app removes its data from your device. Inside the app, Settings → Backup & data → Delete all data erases it too.
Information the app uses on your device
- Receipts and text you share into Ghalla (for example a bank message, a receipt photo or a screenshot) are read on your device to suggest an amount, date and shop name. Text in images is recognised on the device with Google ML Kit. Taking a photo of a receipt uses Google's ML Kit Document Scanner, which crops and cleans the picture on the device. We do not upload the pictures or the text.
- Optional advanced detection (Ghalla Pro) uses an on-device Google ML Kit language model. The model is downloaded once from Google; your text is processed on the device.
- Notifications are created on your device for reminders and budget alerts. They are only shown if you allow them.
- Home-screen widgets show numbers from the app (such as what is left of a budget). The numbers are kept in the app's private storage and never leave the device.
- App lock uses Android's own fingerprint, face or screen-lock prompt. Ghalla never sees or stores your biometric data or PIN.
Purchases
Ghalla Pro (monthly, yearly or lifetime) is sold through Google Play. Google processes your payment and holds your payment details; we never see your card or account details. The app asks Google Play which Pro purchases you own so it can unlock the features.
To protect against fraud, the app sends your purchase token and a Firebase App Check (Google Play Integrity) token to a Ghalla verification service, which asks Google Play whether your purchase is valid. The token is used for that check only and is not stored or logged.
Analytics and crash reports
The app contains optional switches for anonymous usage statistics and crash reports. Both are off by default and send nothing unless you turn them on. They never include amounts, notes, names or other financial details.
Internet access
The app uses the internet only for Google Play purchases and restoring them, for purchase verification, and for downloading on-device ML Kit models. The free budgeting features do not need a connection.
Children
Ghalla is a general-audience personal finance tool and is not directed at children under 13. We do not knowingly collect personal information from children.
Your choices and rights
Because we do not collect your data, there is usually nothing for us to delete or export: you hold it all on your device. You can export it, back it up or erase it from the app at any time. If you contact us about data we do hold (for example support emails), we will respond within a reasonable time and, where the law gives you rights of access, correction or deletion, we will honour them.
Security
Data stays in the app's private storage. Backups can be encrypted with a key derived from your passphrase. No method of storage is perfectly secure; keep your device locked and your backups safe.
Changes to this policy
If this policy changes, the new version will be published at this address with a new effective date.
Contact
Questions about this policy or your data: admin@ashnex.com