Your money data stays yours.

What we collect

• Account details: your name and email address. If you sign in with Google or Apple, we receive your name, email and an account identifier from them. We never see your Google or Apple password.
• Your financial entries: amounts, categories, accounts, dates, notes, merchants and tags you add, budgets, and your settings (currency, reminders, theme).
• Voice notes: when you tap the microphone, the recording is sent to our server so it can be turned into entries. We keep the resulting text (the transcript) with the entry so you can see what you said. We do not store the audio recording after it has been processed.
• Receipt photos: if you scan a receipt, the image is stored with that entry so you can view it later. It is deleted with the entry or your account.
• Bank SMS (only if you turn on SMS auto-capture on Android): see Bank SMS auto-capture below.
• Device information: device type, app version, time zone and language. On the free plan, the advertising partner described under Ads also receives the device's advertising ID and IP address.

We do not read your contacts, your precise location or your bank accounts, and we never ask for bank passwords or card numbers.

Bank SMS auto-capture (Android, optional)

Dott Money can add your spending and income automatically from the debit and credit SMS your bank sends. It is off until you turn it on in Settings → SMS auto-capture, after we explain it and Android asks for your permission.

• What the app reads: with the SMS permission (Android "Receive SMS" and "Read SMS"), the app checks each incoming SMS on your phone to see whether it is a bank, card or UPI transaction message (for example "Rs.250 debited from A/c XX1234 to SWIGGY"). If you choose "Import bank SMS", it does the same for messages from the last 30 days.
• What leaves your phone: only messages that look like money moving in or out of your account. For each one we send the sender name (for example HDFCBK), the message text, the time it arrived and the note you type ("What was this for?"). One-time passwords (OTPs), promotions and personal messages are recognised on the phone and are never sent.
• What we keep: the entry it creates (amount, date, account, category, merchant, your note) and the message text with the balance part removed, so you can see where the entry came from. We also keep a fingerprint of each message so the same SMS is never added twice. You can edit or delete any entry.
• The pop-up: if you allow "Display over other apps", a small window asks what the payment was for right after the SMS arrives, over whatever app you are using. Without that permission we ask in a notification instead.
• What we never do: we do not use SMS data for advertising, credit scoring or lending decisions, and we never sell it or share it with anyone except the service providers listed below that run the app for us.
• Turning it off: switch it off in Settings → SMS auto-capture (this also removes the phone's access key), or remove the SMS permission in Android settings. Entries already created stay until you delete them or your account.

Ads

The free plan may show a few ads from Google AdMob (a banner on some screens, an optional video to earn an extra AI entry, and at most one full-screen ad a day). Pro has no ads. Ads never appear on the voice or confirmation screens.

• To show and measure ads, Google receives your device's advertising ID, IP address (from which an approximate location can be derived), device and app information, and how you interact with the ads. Google's use is described at policies.google.com/technologies/partner-sites.
• Your financial entries, notes, SMS and voice notes are never shared with advertisers.
• You can reset or delete your advertising ID in Android Settings → Privacy → Ads, which also turns off personalised ads.

Phone permissions

• Microphone: only while you hold or tap the mic to record a voice note.
• Camera and photos: only when you scan or attach a receipt.
• Notifications: reminders, budget alerts and the bank SMS question.
• SMS (Receive and Read): only with SMS auto-capture turned on, as described above.
• Display over other apps: optional, only for the SMS pop-up.
• Fingerprint / face: only if you turn on app lock; checked by Android, never sent to us.

How we use it

• To run the app: save your entries, show reports and budgets, and sync between your devices.
• To understand voice notes, typed sentences and receipts, and to suggest categories.
• To spot unusual spending and send the reminders and alerts you turned on.
• To keep the service secure and fix problems.

We do not sell your data. The free plan shows ads as described above; Pro has none.

Services that process your data

• Google Cloud (Vertex AI, Gemini models): voice notes, typed sentences and receipt photos are sent to Google to be converted into entries. Google processes this data on our behalf and does not use it to train its models.
• Sarvam AI (India): voice notes may also be sent to Sarvam's speech recognition service to improve accuracy for Indian languages. Sarvam processes the audio on our behalf.
• Hostinger: our servers and database are hosted by Hostinger.
• Google Sign-In and Sign in with Apple: only if you choose them to sign in.
• Google (Gmail): sends the sign-up, password-reset and account-deletion codes to your email.
• Google AdMob: shows ads on the free plan, as described under Ads.
• Google Play: distributes the Android app and its updates.

How long we keep it

We keep your data for as long as you have an account. When you delete your account, your profile, entries (including those added from SMS and their notes), categories, budgets, receipts, SMS fingerprints, device keys and settings are permanently deleted from our live systems straight away. Anonymous usage counts (for example, how many AI requests were made in a day) may be kept without any link to you.

Your choices and rights

• Export: download all your entries as a CSV file from Settings → Data.
• Correct: edit any entry or your profile at any time.
• Delete: delete your account in the app (Settings → Delete account) or follow the steps at exp.opendott.in/delete-account.
• Notifications, AI and SMS auto-capture: turn them off in Settings at any time.

Depending on where you live (for example under India's Digital Personal Data Protection Act or the EU/UK GDPR), you may have further rights to access, correct, delete or port your data, and to complain to a regulator. Contact us to use them.

Security

Data is encrypted in transit (HTTPS). Passwords are stored only as secure hashes. Access to the servers is restricted. You can also lock the app with your fingerprint, face or a PIN.

Children

Dott Money is not intended for children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes

If we make important changes, we will tell you in the app before they take effect.