FidauraFidaura privacy
Fidaura privacy, explained in plain English
What stays on your phone, what our server can and cannot see, what the SMS permission is for, and what the ad network receives. This page is a readable companion to the full privacy policy.
What stays on your phone
Everything the app needs (capture, viewing, editing, insights, budgets) works on your device. Your transactions, categories, budgets, accounts and goals live in an encrypted database on your phone. There is no signup and no server-side copy of your financial data.
The SMS permission, explained
- Optional. Fidaura asks only when you choose Auto capture, with an explanation first. Manual mode works fully without any permissions.
- Two permissions, two jobs. Read SMS fills in your recent transaction alerts when you first opt in. Receive SMS logs a new alert the moment it arrives.
- Only money messages. A transaction filter decides whether a message is a money movement. Personal chats, OTPs and promotions are ignored.
- Parsed on your phone. Message text is never sent to us or to anyone else, and the raw text is never stored. Only the amount, direction, merchant and bank are kept.
- No more than that. Fidaura is not your SMS app and never sends messages.
What our server sees
Only if you use collections (shared expense splitting). Entries are end-to-end encrypted on your device and relayed through our server as encrypted data it cannot read. The key travels only inside the invite link you share, in the part of the link that never reaches our server. When a collection is closed, the relay data is deleted, and it expires on a timer regardless.
On Android, Fidaura uses Firebase Cloud Messaging (Google) so a collection can wake your phone when it has new encrypted updates. Google’s software creates a device token when the app starts. If you are in a collection, the app sends that token and a random device ID to our relay, which keeps it until the collection is closed. The wake-up carries no financial data, names or message content, only a fixed marker; your phone then fetches the encrypted updates itself. Fidaura does not use Firebase Analytics or Crashlytics.
The app may also download a digitally signed rules file from our server to improve how messages are understood. That is a download only: no personal or financial data is sent with it.
What the ad network can access
Fidaura shows ads from Google (AdMob) to stay free. Like any ad network, it receives your device’s advertising identifier, device information and IP address. You can reset or limit that identifier in Android Settings → Privacy → Ads.
It is never given anything about your money. The ad requests carry no data from the app: no amount, merchant, category, account, balance, bank or message text. We do not choose which ads appear; Google does.
Who gets what
| Data | Your phone | Fidaura server | Ad network (Google) |
|---|---|---|---|
| Transactions, merchants, accounts, budgets | Yes, encrypted | No | No |
| SMS text | Parsed, never stored | No | No |
| Collection entries | Yes, encrypted | Encrypted data only, deleted on close | No |
| Notification token (Android) | Created by Google’s software | Token + random device ID per collection, until it closes | — |
| Advertising ID, device info, IP address | — | — | Yes, to show ads |
Backups and export
You can create an encrypted backup file protected by a passphrase only you know, and export your data as CSV at any time. Both stay wherever you choose to save them; we never receive a copy. Android’s own cloud backup is switched off for Fidaura, so the operating system does not copy your data off the device.
Deleting your data
- Uninstalling the app deletes your data from the phone. Keep your own backup if you want to return.
- There is no server-side account or profile to delete, because none is created.
- Collection data on the server, including the notification token, is deleted when the collection closes. Encrypted data also expires automatically on a timer.
Questions? Write to admin@innocorelabs.com.
Privacy questions
Can Fidaura or its server see my SMS?
No. SMS are parsed on your phone and never uploaded. The raw text of a message is not even stored on the device. Only the extracted transaction facts are kept, in an encrypted database.
What does the ad network receive?
Ads come from Google (AdMob). Like any ad network it receives your advertising identifier, device information and IP address. It is never given anything about your money, because the ad requests carry no data from the app.
What does Fidaura’s server store?
Nothing about your own transactions, and there is no account. If you use collections, the server relays encrypted data it cannot read and deletes it when the collection closes. It also holds a notification token and a random device ID for each collection you are in, used only to send a content-free wake-up, and deletes them when the collection closes.
How do I delete my data?
Uninstalling the app deletes your data from the phone. There is no server-side account or profile to delete. Collection data on the server is deleted when the collection closes and expires on a timer anyway.