Privacy policy
Last updated [DATE]
Who we are
Diiwaan is a personal finance app for Android. The data controller is AdeegPoint ([LEGAL NAME]). Contact: [CONTACT EMAIL].
The short version
- In this version (Phase 1) everything stays on your phone. Diiwaan has no server yet, no account and no sync. Nothing is uploaded.
- Diiwaan reads only payment SMS from mobile-money providers, found by the sender's name on the phone. It saves the payment details, not the SMS text.
- No ads. We never sell or share your data.
What Diiwaan uses, where it lives, and whether it leaves the phone
| Data | Where it lives | Leaves the phone? |
|---|---|---|
| Raw SMS text | Only in the phone's memory while it is read. Provider SMS that can't be read are kept as a copy with names and numbers hidden ("Unread messages"). | Never |
| Personal (non-provider) SMS | Not read past the sender check. If the fake-SMS check is on, new SMS from ordinary numbers are checked in memory for payment wording and dropped at once, unless they look like a fake payment (then a copy with names and numbers hidden is kept as a warning). | Never |
| Parsed payments (amount, time, number, name, balance, reference), categories, flags | Encrypted database on the phone (SQLCipher; key in Android Keystore) | Never in Phase 1. Later, only with Premium sync, which you turn on yourself. |
| Receipt photos and screenshots | Not used in Phase 1. Later: app-private storage. | Later, only with Premium sync |
| Counterparty phone numbers | Encrypted database on the phone | Never in Phase 1. Later with sync only; never sent to AI. |
| Account: name, phone number, plan, payments | Not collected in Phase 1 (no account yet). Later: our server, to log in and manage plans. | Later, yes (needed for login and plans) |
| Statement files | Not used in Phase 1. Later: read on the phone; sent to our server only for a layout we can't read, and deleted after reading. | Later, only for unknown layouts |
| AI input | Not used in Phase 1. Later, with Premium AI turned on: only the name, amount and time of payments Diiwaan can't sort; never numbers or SMS text. | Later, only with Premium AI on |
Permissions
- SMS (READ_SMS, RECEIVE_SMS): to read provider payment SMS already on the phone and catch new ones as they arrive.
- Phone (READ_PHONE_STATE): to know which SIM a payment came to, so each account stays separate. Diiwaan does not make or see calls.
- Notifications (POST_NOTIFICATIONS): to warn you about a possible fake payment SMS or a balance that doesn't add up. Alerts never show amounts, numbers, names or SMS text.
- Biometric (USE_BIOMETRIC): for the optional app lock, using your phone's own fingerprint, PIN or pattern. Diiwaan never sees your fingerprint.
Diiwaan does not ask for the camera, storage, contacts, location, call or SMS-sending permissions.
Google Play Data safety
In Phase 1, Diiwaan collects no data in Google Play's sense: everything is processed and stored on the phone, and nothing is sent to us or to anyone else. SMS are processed on the phone only and are not collected.
Your choices
- Turn off SMS access, alerts or the fake-SMS check at any time in Settings or the phone's settings.
- Hide amounts (privacy mode) and lock the app.
- Delete: uninstalling Diiwaan deletes everything it stored on the phone. See the account deletion page (delete-account).
Security
The database is encrypted on the phone, and its key is kept in Android Keystore. Android cloud backup is turned off for Diiwaan, so your data is not copied to a backup.
Children
Diiwaan is not meant for children under 13.
Changes
We will update this page when Diiwaan changes (for example when accounts and sync arrive in a later version) and show the date at the top.
Contact
AdeegPoint ([LEGAL NAME]) · [CONTACT EMAIL]