This policy explains what information TrakFi ("the app", "we") collects when you use trakfi.in and the TrakFi app, how it's used, and who it's shared with. TrakFi is a personal finance tracker; we've written this to reflect exactly how the app is built, not generic boilerplate.
Account information. TrakFi offers two sign-in methods, both via Firebase Authentication: Google Sign-In, where we receive your name, email address, and profile picture from your Google account; or email/password, where we receive only the email address and password you choose (password is stored by Firebase in hashed form — we never see it in plain text, and no name or photo is collected this way). Either method identifies your account and, for paid tiers, links your data across devices.
Financial data you enter. Income, bills, expenses, savings, investments, budgets, and related figures you enter into TrakFi. By default this is stored only in your browser's local storage on your own device.
SMS transaction data (Android app, opt-in).New If you turn on SMS Auto-Import, transaction details TrakFi parses from your bank/service SMS become financial data in your ledger once you approve them. See section 5 for exactly how this works and what leaves your device (nothing).
Bank statement uploads (Gold tier). An Excel, CSV, or PDF statement you upload is parsed entirely in your browser to pre-fill transactions for your review — the file itself is never uploaded to our servers.
Household sharing (Elite tier). If you create or join a household, the specific categories you choose to share — and the entries logged to them — are stored in our Firestore database so every invited member can see the same shared total. Every other category on your ledger stays private to you by default.
Cloud-backed-up/synced data (Gold, Elite, and Lifetime tiers). If you're signed in on a paid plan, your financial data is additionally stored in our Firestore database (Google Firebase) so it's not lost if your device is lost, reset, or reinstalled. On Gold this is backed up at three fixed times a day — 12:00 AM, 9:00 AM, and 5:00 PM IST; on Elite and Lifetime it's kept in real time so it's also available, up to date, across multiple devices. This is off entirely on the Free tier and if you're not signed in.
Payment and plan information. When you upgrade to Gold, Elite, or Lifetime, payment is processed by Razorpay. We store the outcome — your plan, billing cycle, and subscription status — tied to your account, plus a payment/subscription record (order or subscription ID, plan, amount, and status) in our own database for accounting purposes. We never receive or store your card number, UPI ID, or bank account details; that data goes directly to Razorpay. The TrakFi Android app does not process payments directly — upgrades are completed on trakfi.in.
Basic technical data. Our hosting (Netlify) and backend functions may log standard technical information like IP address and request timestamps, used only for abuse prevention (e.g. rate-limiting) and debugging, not for tracking or profiling.
TrakFi's AI-assisted features work by sending data to Google's Gemini API through our own server-side function — your data does not go directly from your device to Google, but does leave TrakFi's systems to be processed by Google's model.
This data is sent to generate your result and is not stored by TrakFi beyond what's needed to serve the request. It is subject to Google's own API data-handling terms as the processor of that request.
On the Android app only, you can turn on SMS Auto-Import to have TrakFi watch for transaction alerts from your bank and card issuers and turn them into ledger entries for your review. This feature is off until you turn it on, is free on every plan, and can be turned off at any time from within the app.
Each of these providers processes data under their own privacy terms in addition to this policy. SMS Auto-Import and bank statement uploads do not involve any third party — both are processed entirely on your own device.
Locally stored data stays on your device until you clear it (via your browser/app storage settings, or any in-app reset option) or uninstall the app. Raw SMS text is discarded as soon as you act on a pending item (Add or Ignore) — see section 5. You can permanently delete your account and all associated cloud data at any time, either self-serve from the ☰ menu in the app (Settings, right after Customization → Delete Account) or by emailing trakfi.app@gmail.com — full steps and exactly what's deleted vs. retained are at trakfi.in/delete-account. One exception: our payment/subscription records (see section 2) are kept after account deletion for accounting purposes, as is standard for financial transaction records. If you just want to clear a month's data without deleting your account, see trakfi.in/reset-clear.
All traffic to TrakFi is encrypted over HTTPS. Cloud-backed-up/synced financial data is protected by Firestore security rules restricting access to your own authenticated account (and, for shared categories, the household members you've invited). Payment credentials are never handled or stored by TrakFi's own systems.
TrakFi is an 18+ app. You must be at least 18 years old, or the age of majority in your region, to create an account or use TrakFi — this matches our Terms of Service, section 2. TrakFi is not directed at children, and we do not knowingly collect data from anyone under 18.
We may update this policy as TrakFi's features change. The "Last updated" date at the top will reflect the latest revision. Significant changes will be noted in the app where practical.
Questions about this policy or your data can be sent to trakfi.app@gmail.com.