The short version.
- Your ledger is kept on your phone and, once you sign in, backed up to your unfold account on our server, so it syncs between your phones and comes back on a new one.
- You sign in with Google. That gives us your name, email address and a link to your profile photo. The photo stays on your phone.
- We measure how the app is used (which screens are opened, what kind of thing was done) with Google Analytics for Firebase, and measure our ads with Meta. These never include amounts, names, payees or notes.
- We don't sell your data, and unfold shows no ads.
- You can delete your account in the app, which erases your ledger on our server and on your phone.
Who we are.
unfold ("unfold", "we", "us") makes the unfold money tracker app for Android and runs unfoldmoney.com. This policy covers both. If you have a question about it, write to company.unfoldd@gmail.com.
Your ledger.
Everything you put into unfold is kept in a database on your phone:
- Transactions, with their amounts, payees, notes, categories, dates and times
- Accounts, cards and loans, with their names, types and balances
- Your categories, budgets and the categories you watch
- Your settings, such as your name, currency, week start, appearance and monthly budget
When you're signed in, unfold also keeps a copy of all of this on our server, linked to your account. It's sent over an encrypted connection, a couple of seconds after each change and every few minutes while the app is open. We keep it so your ledger is backed up, stays in sync between your phones, and comes back when you sign in on a new phone.
We use your ledger only to provide this backup and sync. We don't sell it, share it for anyone's marketing, or use it for ads. Your profile photo isn't part of it: it stays on your phone.
If your phone's Android backup is turned on, Android may also include unfold's data in your device backup to your own Google account, as it does for other apps. You control that in your phone's settings.
When you export your transactions, unfold creates a CSV file on your phone and opens the share sheet. The file goes only where you choose to send it.
Signing in with Google.
unfold asks you to sign in with your Google account when you set it up. We use Firebase Authentication, a Google service, to manage sign-in. From your Google account we receive:
- Your name
- Your email address
- A link to your profile photo, which unfold downloads once and keeps on your phone
- A user ID that Firebase creates for your account
Firebase keeps a record of your account (your user ID, email address, name and sign-in dates) so you stay signed in. Our server keeps your user ID, email address and name with your ledger, so the backup belongs to you and no one else.
You can sign in with more than one Google account on the same phone. Each account has its own ledger, and switching between them in Profile never mixes them.
How we measure the app.
Google Analytics for Firebase
To learn which parts of unfold are used and where people get stuck, the app records:
- Which screens are opened
- What kind of action happened, such as adding an entry, an account or a budget, finishing setup, changing a setting, exporting, or a sync that didn't go through
These events say what kind of thing happened, never how much or what it was called: no amounts, names, payees or notes. Google Analytics also collects standard information about your device and app, such as the device model, operating system version, app version, an app instance ID, your approximate location (from your IP address), and your device's advertising ID. Google handles this data under Google's privacy policy.
Meta App Events
We advertise unfold, and use Meta's (Facebook's) App Events to measure whether those ads work. Meta's SDK in the app logs when unfold is installed and opened. unfold also tells Meta when someone finishes setup and when an entry is added, without any detail about it. Meta's SDK collects your device's advertising ID and basic device information. Meta handles this data under Meta's privacy policy.
You can reset or delete your advertising ID at any time in your phone's settings (on most phones, Settings → Privacy → Ads, or Settings → Google → Ads).
What we don't do.
- We don't sell your personal data, or share it for anyone else's marketing.
- We don't show ads in the app.
- We don't read your SMS, email, contacts or call logs.
- We don't use your data to make credit or lending decisions.
App permissions.
- Internet and network state: for Google sign-in, backup and sync, analytics and ad measurement
- Vibration: for small haptic feedback as you use the app
- Advertising ID and Android's ad attribution: added by Google Analytics and Meta's SDK, for the measurement described above
unfold doesn't ask for your contacts, SMS, call logs, photos, camera or location.
This website.
unfoldmoney.com doesn't use cookies or analytics. It's served by Cloudflare, which processes technical information such as your IP address and browser type to deliver the site and protect it from abuse. A small animation library is loaded from cdnjs, which is also run by Cloudflare.
How long data is kept.
- On your phone: until you delete it in the app, delete your account, or uninstall unfold
- On our server: for as long as you have an account. When you delete a transaction in the app, its amounts are removed from the server copy and it's marked as deleted, but its date, payee and note are kept with your account until you delete the account; accounts you remove are kept the same way, so your older entries still add up. Deleting your account erases all of it
- Analytics and ad measurement: for the limited periods set by Google and Meta, after which it's deleted or made anonymous
Deleting your account and data.
In the app, go to Profile → Delete account and type DELETE to confirm. This erases, straight away and for good:
- Your ledger on our server: every transaction, account, budget, category and setting
- Your ledger on your phone
- Your sign-in with Google for unfold
Signing out or uninstalling the app doesn't delete the copy on our server, so that your ledger can come back when you sign in again. If you can't use the app, email company.unfoldd@gmail.com from the Google account you signed in with, with the subject "Delete my unfold account". We'll delete your account and everything linked to it within 30 days and confirm by email.
Your rights.
Under India's Digital Personal Data Protection Act, 2023, and other laws that may apply to you, you can ask us to tell you what personal data we hold about you, correct it, or delete it. You can also withdraw your consent at any time by deleting your account. To make a request or raise a concern, email company.unfoldd@gmail.com. We'll reply within 30 days.
Children.
unfold is meant for adults and isn't directed at anyone under 18. If you believe a child has signed up, contact us and we'll delete their account.
Security.
Your ledger travels between your phone and our server only over encrypted connections, and the server only gives a ledger to the Google account it belongs to. On your phone, it's protected by your phone's own security, so keep a screen lock on. No system is perfectly secure, but we collect only what unfold needs to work.
Changes to this policy.
If we change how unfold handles your data, we'll update this page and the date at the top before the change takes effect. For significant changes, we'll also tell you in the app.
Contact.
Questions, requests or complaints about privacy: company.unfoldd@gmail.com.