Introduction
GamifyFI ("we", "our", "us") is a personal finance tracking and education app built for Android and iOS. This Privacy Policy explains how we collect, use, and protect your information when you use the GamifyFI mobile application.
By using GamifyFI, you agree to the practices described in this policy. If you do not agree, please discontinue use of the app.
Information We Collect
Account Information
- If you sign in with Google, we receive your name and email address from Google Sign-In.
- This information is used solely to identify your account and sync your data across your devices.
Financial Data (User-Entered)
- Transactions, categories, amounts, and dates you manually enter.
- Budget targets and savings goals you configure.
- Monthly income and expense data.
Market Data Requests (Investment Simulator)
- The App makes network requests to Yahoo Finance to fetch current stock price data for the simulator.
- These requests include no personally identifiable information (PII) โ only the stock ticker symbols being viewed.
- Yahoo Finance's own privacy policy governs their collection of technical data (like IP addresses) during these requests.
Automatically Detected Transactions (Optional Features)
- Notification Listener (Android only): With your explicit permission, we read notifications from banking and payment apps (e.g. Google Pay, Paytm, HDFC, SBI) to extract transaction amounts. Only financial keywords are processed. Personal notifications are ignored entirely.
- Gmail Sync (Optional): With your consent via Google OAuth, we read your Gmail inbox to find bank alert emails. Transaction amounts and merchant names are extracted locally and never sent to our servers in raw form. Your Gmail refresh token is stored encrypted in the device Keychain/Keystore.
What We Do NOT Collect
- We do not read, store, or upload raw SMS messages.
- We do not collect One-Time Passwords (OTPs), security codes, or passwords.
- We do not collect device contacts, photos, microphone input, or location data.
- We do not sell, rent, or share your personal financial data with third parties.
- We do not use your data for advertising purposes.
How We Store Your Data
Local Storage (On-Device)
- All financial records (transactions, goals, settings) are stored in an AES-256 encrypted local database on your device.
- The encryption key is securely managed by your device's built-in Keychain (iOS) or Keystore (Android) โ it never leaves your device.
Cloud Storage (Optional โ Firebase Firestore)
- If you enable Cloud Sync, your financial summary data is synchronized to Firebase Firestore for multi-device access.
- All data in transit uses HTTPS (TLS 1.2+).
- Firebase data is stored in Google Cloud data centers and protected by Google's security infrastructure.
- You can disable Cloud Sync or permanently delete all cloud data at any time from the Settings screen.
AI Features (Gemini)
GamifyFI uses Google's Gemini AI for financial coaching, report generation, and educational content. When you use an AI feature:
- A summary of your financial aggregates (e.g. total monthly spend by category) may be sent to the Gemini API to generate insights.
- No personally identifiable information (PII) such as your name, email, or transaction IDs is included in AI requests.
- AI usage is governed by Google's Privacy Policy.
Permissions Requested
- Internet: Required to sync data, authenticate with Google, access AI features, and fetch market data from Yahoo Finance.
- Notification Listener (Android): Optional. Used to detect payment transactions from banking app notifications without accessing SMS.
- Biometric / Fingerprint: Optional. Used to lock the app for security.
- Push Notifications: Optional. Used to alert you about detected transactions and financial milestones.
- Boot Completed: Used to restore notification listeners after device restart, only if you have enabled auto-tracking.
Compliance & Governing Law
We operate in compliance with applicable Indian digital laws, including:
- The Information Technology Act, 2000: Protecting your electronic data and transactions.
- The Digital Personal Data Protection Act (DPDP), 2023: Ensuring your rights to access, correct, and erase your personal data are respected.
Your Rights & Data Control
- Access: All your data is visible inside the app at all times.
- Correction: You can edit or delete any transaction directly.
- Export: Export all your data as CSV via Settings โ Export Data.
- Deletion: Delete your account and all associated cloud data permanently via Settings โ Delete Account. Local data can be cleared by uninstalling the app.
- Opt-Out: Disable Cloud Sync, Gmail Sync, or Notification Tracking individually in Settings at any time.
Children's Privacy
GamifyFI is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or your data, please contact us: