1. Who we are
Keepbook is a personal spending book for Android, published on Google Play as dev.ledger. “We” means the developer of that listing.
Privacy questions: email support@unitlabs.in with the subject line Privacy.
2. What Keepbook keeps, and where
Everything below is stored only on your phone, in Keepbook’s private storage, encrypted with a key held in the Android Keystore. Nothing is added to your book until you tap Save.
| What | Examples |
|---|---|
| Your book | Entries (amounts, payees, categories, notes, dates, currencies and exchange rates), accounts and balances, bills and subscriptions, caps, goals, splits and what people owe, to-buy lists, rules, warranty items |
| Your name | If you type it at setup, to greet you; never sent anywhere |
| Receipts and warranty files | Images and files you scan, pick or share in. Receipt text is read on your phone by Google ML Kit’s bundled text recognition; nothing is uploaded |
| Payment alerts and statements | See section 3; statements (PDF or CSV) you open are read on your phone and the rows you pick become drafts |
| Settings | Country, currency, app lock, reminders, backup folder, Pro status |
3. Payment alerts (notification access)
If you turn on payment alerts, Android asks you to give Keepbook notification access. Keepbook then:
- looks only at notifications from the payment and banking apps you switch on in Capture sources (from Keepbook’s list, or an app you add yourself);
- drops every other app’s notifications without reading their text;
- from the apps you chose, keeps only messages that look like money moving, encrypted on your phone, as drafts in your Inbox;
- deletes unsaved alerts from an app when you switch that app off, and clears saved and dismissed alerts after 30 days.
Alert text is never sent anywhere and is not included in backups. You can revoke access at any time in Android’s Notification access settings.
To show which supported apps are installed, and to let you add another app, Keepbook lists the apps on your phone that have a launcher icon. That list stays on your phone.
4. Bank SMS (only in the separate SMS version)
The standard Google Play version of Keepbook cannot read SMS. A separate version of Keepbook may read bank SMS if you turn it on:
- it reads messages only from bank senders on Keepbook’s list or senders you pick yourself; “Add a sender” shows only sender names from the last 90 days (never message text, never personal phone numbers);
- matching messages become drafts, encrypted on your phone, never sent anywhere, not in backups;
- turning it off deletes waiting SMS drafts and clears SMS text from saved ones.
5. What leaves your phone
- Exchange rates — When you record a payment in another currency or change your book’s currency, Keepbook can ask Frankfurter (
api.frankfurter.dev, European Central Bank reference rates) for a rate. The request holds two currency codes and, for a past payment, its date. No amounts, names or anything else from your book. Like any website, Frankfurter sees your phone’s IP address. Turn this off in You → Country & currency and type rates yourself. - Google Play Billing — If you look at or buy Keepbook Pro, Google handles the purchase under Google’s terms. Keepbook asks Google Play whether you own Pro. Pro is tied to your Google Play account; Keepbook has no sign-in.
- Receipt scanning (Google ML Kit) — The text is read on your phone and the image is never sent. ML Kit’s library can report diagnostics to Google; Keepbook removes that reporting from the app, so nothing about your scans leaves the phone.
- Things you choose to send — Backups go to the folder you pick (which may be a cloud drive app); CSV, PDF and shared messages go wherever you send them. Keepbook doesn’t upload them for you.
7. Security
- The book’s database is encrypted (SQLite3MultipleCiphers) with a key protected by the Android Keystore; receipt and warranty files are encrypted too.
- Backups are encrypted with your passphrase (AES-256-GCM, PBKDF2 with 600,000 rounds). Without the passphrase, nobody, including us, can open them.
- Android’s own cloud backup of app data is off (
allowBackup=false). - Optional app lock (fingerprint, face or phone PIN); while it is on, the Recents screen shows no preview of your book. “Hide in Recents” also blocks screenshots.
- Pro unlocks only on copies installed from Google Play and signed by Google Play.
No security is perfect: keep your phone locked and your backup passphrase safe.
8. How long data is kept
- On your phone — Until you delete it, clear Keepbook’s storage, or uninstall. Payment alerts and SMS drafts that are saved or dismissed are cleared after 30 days.
- Backups and exports — Wherever you put them, until you delete them.
- Google Play purchases — Kept by Google under its own rules.
9. Your choices and rights
You can see, export (CSV, free), correct and delete everything in the app. Uninstalling or clearing storage removes it all from the phone; delete any backup files you made yourself. Deletion help: delete your data.
Wherever you live (for example under GDPR or CCPA), you can contact us with any request; since your data is on your phone, most requests are done fastest in the app.
10. Permissions
- Notifications — Reminders you turn on (a bill the day before, a warranty a week before it ends).
- Run at startup — Re-schedules those reminders after a restart.
- Biometrics — The optional app lock. Keepbook never sees your fingerprint or face.
- Notification access — Payment alerts (section 3), only if you grant it.
- Internet — Exchange rates (section 5).
- SMS (SMS version only) — Bank SMS (section 4).
11. Children
Keepbook is not meant for children under 13 (or the minimum age where you live) and does not knowingly collect their data.
12. Changes to this policy
If what Keepbook does with data changes, we update this page and its Effective date, and mention it in the release notes.
13. Contact
Developer / privacy / support contact for Keepbook:
support@unitlabs.in
Canonical policy URL:
https://anirban258.github.io/keepbook/
Data deletion:
https://anirban258.github.io/keepbook/delete.html