Legal

Privacy Policy

This policy applies to every app published by Gokul Pathak, an independent developer based in Pokhara, Nepal, and to the website gokulpathak.com.np. It describes what those apps may collect, why, who else ever receives it, and how to have it deleted. Where a particular app does something beyond this, it is written in that app's own section further down. For any question or request about your data, write to [email protected].

Last updated: 26 October 2026

In short

My apps are built to work on your device. Anything that uses a cloud account is optional and stays off until you turn it on.
Your data is never sold, and the records you keep in my apps are never shared with advertisers.
Some apps show ads from Google AdMob. Google collects device information such as your advertising ID and IP address to serve them, as each app's section explains.
An app asks only for the permissions it actually uses, at the point it uses them.
You can ask for your data to be deleted at any time, and this website sets no cookies.

What may be collected, and why

An app collects something only when it has a feature that needs it, so a given app may use none of what follows. Its own section says which of these apply.

Account details. In apps that offer an account, your email address and a password, plus a display name if you choose to give one. Used to sign you in, to keep your data separate from everyone else's, and to sync it between your own devices.
The content you create in the app. The records the app exists to keep. This stays on your device, and reaches my cloud provider only if you switch syncing or backup on.
Files you pick. Photos or documents you choose to hand to a feature, used only for that feature. They are processed on the device unless the app's section says otherwise.
Technical information. App version, platform and whether an operation succeeded, so features work and problems can be fixed. This is not used to build a profile of you.
Advertising data, collected by Google. In apps that show ads, Google's ad service collects your device's advertising ID, IP address, ad interactions and diagnostics to serve and measure ads. I do not receive this data in a form that identifies you.
Request logs. When an app or this site contacts one of my servers, the request is logged briefly, including the IP address, time and status, to keep the service available and to stop abuse.

Sensitive permissions such as precise location, contacts, microphone or health data are not used by anything I publish today. If an app ever needs one, it will be named in that app's section and asked for at the moment the feature is used, and you can refuse without losing the rest of the app.

Storage, retention and security

On your device, data stays until you delete it in the app or uninstall the app.
In the cloud, data is kept for as long as your account exists, and is removed within 30 days of a deletion request.
Request logs are short-lived and kept by the hosting provider for a limited period.
Security. Traffic is encrypted with TLS, stored rows are tied to the account that owns them, and credentials such as an app lock live in the device's own keystore. This is not end-to-end encryption: an administrator at the hosting provider could technically read stored data, and no app of mine claims otherwise. No system is perfectly secure.

Your rights, and deleting your data

Depending on where you live, you may have the right to ask for a copy of your data, to correct or export it, to have it deleted, and to object to or restrict some uses. In my apps most of your data sits on your own device already, and backup or export features give you a copy at any time.

To delete cloud data for any app, email [email protected] from the address you signed up with and name the app. It will be deleted within 30 days at the latest, and confirmed by reply. Requests of any other kind are answered within the same 30 days, free of charge.

Where a feature needs your consent, such as an optional AI feature, you give it by switching the feature on and can withdraw it by switching it off. Consent for advertising, where it is required, is asked by Google's consent form, and you can limit ad tracking at any time by resetting or deleting your advertising ID in your phone's settings. Data for account features is processed to provide the service you asked for.

Details for each app

The policy above covers every app I publish. These sections add what a particular app does with your data, in its own words.

Android — com.gokul.expensetracker8

Private Vault

A personal finance app for accounts, transactions, transfers, money lent and borrowed, budgets, recurring items and investments. It works with no account and no network connection.

What stays on your device

Without a cloud account your financial data exists in one place: the app's private database on your phone. Reports, backup, export and App Lock all work there.
Your App Lock PIN and biometric preference are held in the device keystore. They never enter the database, a backup, an export or the cloud.
Balances, totals, budgets remaining and report figures are calculated on the device and never uploaded.
Receipt photos are read on the phone itself. The photo, the text read from it and the draft never leave the device. An unsaved draft expires seven days after you last opened it.
On Android, the system's automatic backup to Google Drive is turned off for this app.

What syncs, once you turn on Cloud Sync

Cloud Sync is off until you sign in and finish setup; signing in alone moves nothing. Once a device is linked, these records sync to your own account: accounts, categories, people, transactions, budgets, recurring templates, investment assets and their trades, your default currency, and deletions. Budgets carry the planned amount, never what you spent, and investments carry trades, never a holding, cost basis or gain.

Balances and every other calculated figure stay on the device. Each phone recomputes them, which is why two phones agree.

The two optional AI features

Both are off until you turn them on, both need a signed-in cloud account, and everything else works without them. Each request goes over TLS to this app's own server function, which forwards it to Anthropic's Claude API.

Category suggestions send the merchant name read from the receipt, after recognizable phone numbers, card numbers, email addresses, links and labelled identifiers are removed, plus the names of your expense categories under throwaway ids. The photo, the receipt text, the amount, date, account, notes, balances, budgets, people and history are not sent.
Explanations in Spending Insights send your question, with phone, card and email patterns removed, and the figures the app calculated for that one question: totals, spending by category, your largest expenses with short descriptions, budget amounts, balances per currency, totals owed, and upcoming recurring items. Summarized financial information is sent when you ask for an explanation.

Answers are shown and discarded. The server function logs technical metadata only, such as a request id, status, timing and token counts, never what was sent or returned. Anthropic states that it does not use commercial API inputs or outputs to train its models, and deletes them within 30 days unless a usage-policy flag or the law requires otherwise. Both features can be switched off in Settings.

Advertising

On Android, Private Vault shows a small number of ads served by Google AdMob. They appear only on the Transactions, Reports and More screens, never on Home or while you are entering a record, and each one is labelled Sponsored. Nothing ad-related loads until you first open one of those screens.

What Google collects. To serve and measure ads, Google's Mobile Ads SDK collects your device's advertising ID and app set ID, your IP address (from which an approximate location is estimated), interactions with ads such as views and taps, and diagnostic information about how the ad performed. Google uses this for advertising, analytics and fraud prevention, which may include showing ads based on your interests where your consent and local law allow.
What Google never receives. Your financial records: accounts, balances, transactions, people, budgets, investments, receipts and notes. The ad service sees the device, not your money.
Consent. In the European Economic Area, the United Kingdom and Switzerland, Google's consent form appears before any ad is requested. If you decline, the ad service is not started and no ad data is collected.
Your controls. You can reset or delete your advertising ID in your phone's settings (on most Android phones, Settings > Google > Ads), and manage ad personalization at My Ad Center.

Google processes this data under its own policies. See How Google uses information from sites or apps that use its services and the Google Privacy Policy. The iOS version, when released, will be covered here before it ships.

Permissions, and deleting data

Camera and photos for scanning a receipt, fingerprint or face unlock for App Lock, and notifications for bill reminders. Reminders are scheduled on your own device: no push server, no notification token. The app contains no analytics and no crash reporting of its own; the only third-party SDK that collects data is the advertising one described above.
Sign out and keep data unlinks the phone and leaves your records on it. Sign out and remove from this device clears the records on that phone while your cloud copy stays. Uninstalling removes the local database and any recovery snapshot.
Deleting your cloud account can be done inside the app under Settings > Cloud Sync > Delete Cloud Account, which removes the account and all of its synced data permanently. The records on your phone stay unless you choose to remove them too. You can also email [email protected] from the address you signed up with, and it will be deleted within 30 days at the latest.

This website

The site is hosted on Cloudflare Pages, which keeps short-lived request logs, including IP addresses, for security and reliability.
There are no cookies, no analytics and no advertising or tracking scripts. The app announcement on the home page is my own and loads nothing from an ad network.
Your browser stores a few small values on your own device: your light or dark preference, a random id for the chat panel, and whether you have already seen the intro and the app announcement. Clearing your browser data removes them.
The contact form opens your email app with a prepared message. Nothing is submitted to a server. Email you choose to send is kept in my mailbox.

The Ask AI assistant

The chat panel sends your message to a small backend of mine, which asks Google's Gemini API for an answer drawn from public information about my work. Conversations are not stored. The backend keeps short-lived server logs and uses your IP address, in memory only, to limit how many questions one visitor can send per minute.

The assistant runs on Gemini's free tier, and Google may use messages sent to it to improve its products. Please keep personal details out of the chat; it only needs questions about my work.

Children, changes and contact

Nothing I publish is directed at children under 13, and data is not knowingly collected from them. If you believe a child has created an account, write to [email protected] and it will be removed.

When this policy changes, the date at the top changes with it, a new app gets its section here before it is released, and anything significant is called out in that app's release notes. This page is always the current version.

Gokul Pathak, Pokhara, Nepal. Questions, data requests and account deletion: [email protected].