Coinette

Privacy policy

Effective October 9, 2026

Coinette is a personal expense manager for Android. This policy explains what data the app handles and where it goes. In short: your data stays on your phone unless you choose to back it up or sync it, and we never sell it or use it for advertising.

Data stored on your phone

The transactions, accounts, budgets, scheduled payments, debts, categories, tags, lists, notes and settings you enter are stored in a database on your phone. Photos you attach as receipts are stored on your phone. The app lock PIN is kept only as a salted hash in your phone's secure storage. Fingerprint or face unlock is handled by Android; the app never receives your biometric data. Reminders are local notifications scheduled on your phone.

Backups

A backup is a file encrypted with AES-256-GCM using a key derived from a backup password you choose. The password is kept in your phone's secure storage and is never sent anywhere. Without the password, nobody (including us) can open a backup. You decide where a backup file goes: you can save it with your phone's share sheet, and you can turn on Google Drive backup.

Google Drive backup

If you connect Google Drive, Coinette asks for one permission: drive.appdata, which lets it see, create and delete only its own configuration data in your Google Drive. It uses this to save encrypted backup files to a hidden app folder in your own Drive and to list and download them when you restore. Coinette cannot see or change any other files in your Drive. The files are encrypted before they leave your phone. You can remove the app's access at any time in your Google Account settings under Security, Third-party apps with account access; and you can delete the app folder's data from Google Drive settings, Manage apps.

Google sign-in and cloud sync

If you sign in with Google, the app receives your name, email address and profile picture to show who is signed in. If you turn on cloud sync, your Coinette data is stored in a database hosted by Supabase so it can be synced between your devices. Access to it is limited to your own account. Signing out stops sync. You can delete your cloud account and all synced data at any time; see Delete your account.

Crash reports and anonymous usage

Settings, Privacy has two switches. Send crash reports is on when you install the app. Share anonymous usage is off until you turn it on. When a switch is on, the app sends that kind of report to PostHog, a product analytics service, in its EU region. A report holds the screen name, the error and its stack trace, the app version, the phone model and Android version, language and time zone, and a random ID made when the app is installed. It never holds amounts, notes, category, account or list names, your name or your email address. Your IP address is not stored and is not used to find your location. PostHog processes these reports for us and does not use them for its own purposes. Turn either switch off at any time; the app then sends nothing of that kind.

Use of Google user data

Coinette's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is used only to provide the backup, restore and sign-in features you choose. It is not used for advertising, not sold, not shared with anyone else, and not read by humans except with your explicit consent, for security reasons, or to comply with the law.

What we do not do

• No ads and no advertising IDs. No tracking across other apps or websites.
• No selling or renting of your data.
• No access to your contacts, location, messages or bank accounts.

Deleting your data

Settings, Erase all data deletes your data from the phone. Uninstalling the app also deletes it. Settings, Delete cloud account deletes your cloud account and every entry synced to it (see Delete your account). Backup files you saved elsewhere, and the Drive app folder, are under your control and can be deleted by you at any time.

Children

Coinette is not directed at children under 13.

Changes

If this policy changes, the new version is posted on this page with a new effective date.

Contact

Questions or requests: sagar1ahir@gmail.com