Security by Architecture.
Your Money, Your Device.
We believe personal financial data should never leave your phone. Here is how FlowRupee is engineered from the ground up to protect your privacy.
100% On-Device SQLite Database
Your expenses, income, account balances, and savings goals are stored locally in an application-sandboxed SQLite database on your Android hardware. No company servers, no remote tracking, and no cloud outages.
- ✓ Runs fully offline in airplane mode
- ✓ Zero latency database queries
Deterministic On-Device SMS Parser
SMS parsing happens directly on your smartphone CPU using regular expressions. The engine only filters messages from verified bank sender alphanumeric codes (e.g., SBINB, HDFCBK, ICICIB). Personal texts and OTPs are ignored.
- ✓ OTPs and passwords are strictly ignored
- ✓ Zero SMS text transmitted off your phone
Android Biometric App Lock
Secure FlowRupee with your device’s fingerprint scanner or Face Unlock. We use official Android BiometricPrompt APIs so authentication is performed inside your phone's hardware Trusted Execution Environment (TEE).
- ✓ Instant hardware biometric unlock
- ✓ Automatic screen lock upon switching apps
Zero Third-Party Ads or Telemarketing
Traditional finance apps monetize by selling your transaction data to personal loan brokers, resulting in endless spam calls. FlowRupee has zero banner ads, zero loan agents, and will never sell your contact info.
- ✓ No credit card telemarketing calls
- ✓ No third-party ad tracking SDKs
Android Permissions Transparency
Clear, honest disclosure of every system permission requested by FlowRupee on Google Play.
| Permission | Purpose in FlowRupee | Where Data is Processed |
|---|---|---|
| READ_SMS | Automatically extracts debit/credit amounts, merchants, and dates from official bank SMS alerts. Ignores OTPs and personal chats. | 100% Local on Device |
| READ_CONTACTS | Optional. Enables seamless selection of friends and roommates for the "Split Bills, Stay Friends" group sharing tool. | 100% Local on Device |
| USE_BIOMETRIC | Authenticates device owner via Android Fingerprint / Face Unlock before opening the application. | Hardware TEE Enclave |
| CAMERA | Allows attaching physical paper bills, food receipts, or invoices directly to an expense entry. | 100% Local on Device |
Security & Permissions FAQ
Direct, transparent answers optimized for quick understanding.
Does FlowRupee send my transaction data or bank balance to cloud servers?
Never. FlowRupee is engineered as an offline-first Android application. All your transactions, category tags, account balances, and split tabs are saved exclusively inside an encrypted SQLite database on your device sandbox. We do not operate cloud databases that store your financial history.
Why does FlowRupee request the READ_SMS permission?
FlowRupee requests READ_SMS solely to automate expense logging from official Indian banking debit/credit SMS alerts (e.g. from HDFCBK, SBINB, ICICIB, AXISBK, etc.). All parsing occurs locally on your phone using deterministic regex algorithms. Personal text messages, verification codes, and OTPs are completely ignored and never recorded.
Does FlowRupee ever read or store my bank OTPs or netbanking passwords?
No. FlowRupee strictly filters out messages containing OTP keywords (such as OTP, verification code, password, secret) and never prompts you for your netbanking credentials, UPI PIN, or debit card CVV.
Why does FlowRupee ask for Contacts permission?
The READ_CONTACTS permission is optional and utilized solely within the "Split Bills, Stay Friends" feature, allowing you to select friends or roommates directly from your address book. Your contacts remain on your device and are never exported, shared, or uploaded.
How is FlowRupee compliant with India’s Digital Personal Data Protection (DPDP) Act 2023?
Because FlowRupee does not harvest, store, or transmit your financial information to external cloud servers, your personal data remains under your absolute control on your hardware at all times.
Experience True Private Money Management
Join thousands of smart Indian users tracking daily expenses, automating bank SMS alerts, and splitting bills with zero privacy compromises.