Privacy Policy & Permission Disclosures

1. Who We Are

This Privacy Policy applies to the mobile application DhaniX (Package Name: com.softosist.dhanix), developed and published by Softosist ("we", "us", "our").

If you have any questions, you can reach our engineering team directly at support@softosist.com.

2. Completely Offline Architecture & Optional Google Cloud Sync

DhaniX is engineered as an offline-first, standalone financial ledger:

• Normal Operation (Offline): All your transactions, categories, budgets, tags, recurring bills, and Khata lent/borrowed debts are stored exclusively inside your phone's sandboxed local SQLite/Preferences storage. You can use 100% of the app's features in Airplane Mode.
• No Background Cloud Uploads: DhaniX does not silently sync your financial records to the cloud.
• Optional Google Drive Backup (Only When User Wants): Cloud backup is strictly opt-in and user-triggered:
  • You must manually navigate to Settings > Google Drive Cloud Sync.
  • You explicitly select which Google/Gmail account you want to connect using the official Google Sign-In account picker. We do not guess or fabricate email addresses.
  • Only when you tap "Sync & Backup to Google Drive Now" does the app compile an encrypted JSON snapshot of your ledger and upload it directly into your own private Google Drive AppData folder.
  • Only you have access to your Google Drive. Softosist has zero access to your Google account or your uploaded backup file.
  • You can disconnect your Google account or delete your cloud backup at any time.

3. SMS Permissions (READ_SMS & RECEIVE_SMS) — Exact Purpose & Limits

A. Exact Purpose of SMS Access

When you grant SMS permissions, DhaniX uses this access solely for the following core features:

1. Automated Bank & UPI Expense Tracking: Automatically detects when money has been debited or credited from your bank account or UPI wallet (such as HDFC, SBI, ICICI, Axis, Kotak, PNB, BoB, Google Pay, PhonePe, Paytm, CRED).
2. Metadata Extraction: Extracts only essential financial fields: the amount spent/received, transaction timestamp, issuing bank name, last 4 digits of the bank account or card (e.g., XX4589), UPI reference / UTR ID, and the merchant name.
3. Duplicate Prevention: Uses transaction reference IDs and UTR numbers to prevent duplicate entries if your bank sends multiple notifications or if you rescan your inbox.
4. Historical SMS Ledger Import: Allows you to import past bank SMS from your inbox to bootstrap your financial ledger.

B. Strict Limitations & Privacy Safeguards for SMS

• 100% On-Device Processing: All SMS parsing is performed locally using on-device regular expressions (regex). Your SMS text is NEVER uploaded to any remote server or third party.
• Non-Financial Messages Are Ignored: Personal chats, promotional messages, and one-time passwords (OTPs) are filtered out immediately and discarded.
• OTPs Are Never Stored: Messages containing OTP, verification code, or secret PIN are instantly rejected and never saved to disk.
• Optional Feature: Granting SMS permission is completely optional. If you decline SMS permission, you can still use DhaniX seamlessly by entering your transactions manually.

4. Alarm Permissions (SCHEDULE_EXACT_ALARM) — Exact Purpose

A. Exact Purpose of Alarm Permissions

DhaniX uses Android's AlarmManager with exact timing strictly for two user-configured notification features:

1. Daily Transaction Review Reminders: Users can configure a specific time of day (for example, 10:00 PM every evening, or custom times for weekends) to be reminded to review their daily expenses. Missing this exact user-chosen hour reduces habit-building and financial discipline.
2. Upcoming Bill, EMI & Subscription Alerts: Informs the user in advance (e.g. 1, 2, 3, or 5 days before) of an upcoming utility bill, loan EMI, credit card payment, or subscription renewal due date to help avoid bank penalty fees.

B. Strict Limitations for Alarms

• Alarms trigger only local system notifications on your device.
• Alarms are never used for marketing, background data scraping, analytics, or device wakeups for ad delivery.
• You can customize, reschedule, or disable daily review alarms anytime in Settings > Daily Review Reminders.

5. Complete Summary of All Declared Permissions

6. Data Storage, Security & Ownership

• 100% User Ownership: You own your financial data. We believe your spending habits, bank balances, and Khata debt records are deeply personal.
• No External Database: Softosist does not maintain a central user database. If our company systems were ever compromised, your DhaniX data would not be affected because it resides solely on your personal phone.
• Export Anytime: You can export a comprehensive PDF financial statement or a raw CSV spreadsheet of your complete ledger at any time.
• Complete Data Deletion: You can delete any individual transaction, bill, or Khata record, or completely reset the app by tapping Clear All Data or by clearing storage in Android System Settings.

7. Third-Party Libraries & Services

• Google Sign-In & Google Drive API: Used solely to authenticate your chosen Google account and write backup files to your private Google Drive AppData space. Subject to the Google Privacy Policy.
• Open-Source MIT Libraries: All internal libraries (such as Flutter SDK, fl_chart, local_auth, flutter_local_notifications) are free and open-source under permissive licenses with zero tracking code.
• No Ad Networks: DhaniX contains zero advertising networks, zero tracking cookies, and zero behavioral profiling scripts.

8. Children's Privacy

DhaniX is not intended for use by children under the age of 13. We do not knowingly collect or solicit personal data from children.

9. Changes to This Privacy Policy

If we update this Privacy Policy, the revised version will be published on this page with an updated "Effective Date".

10. Contact Us

For any questions, concerns, or inquiries regarding your privacy or this policy, please reach out to our team: