Your privacy is the reason Billsfort exists. This policy explains, in plain language, what data the Billsfort app ("the App", "we") handles, where it lives and what you can control. Billsfort is developed by generictec, the data controller under the GDPR (Regulation (EU) 2016/679).
Contents
1. The 30-second summary
- Billsfort is local-first: your bills, expenses and receipts are stored only on your phone.
- You don't need an account to use the App. We don't collect your name or email to get started.
- The "savings intelligence" runs on the device - we don't send your transactions to servers.
- Backup, if you enable it, goes to your own Google Drive, encrypted. Never to Billsfort servers.
- We use anonymous analytics to improve the App, which you can turn off in settings. No ads, no third-party trackers.
2. Data stored on your device
Everything you record in Billsfort - bills, expenses, categories, income, receipts and the insights generated from them - is stored locally in a database on your device. This data is not transmitted to us and we have no way to access it. If you delete the App (without a backup), this data is removed from the device.
3. Optional account and sync
A Billsfort account is optional. It is only needed if you choose to sync your data across multiple devices. If you create an account, we process:
- Your email address (and/or your sign-in provider identifier), for authentication.
- The data you choose to sync, transmitted encrypted and stored only to enable synchronisation across your own devices.
Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR). You can delete your account at any time, which removes the associated data from our sync systems.
4. Backup to your Google Drive
If you enable backup, Billsfort creates an encrypted file and uploads it to the application folder (appDataFolder) of your Google Drive, through your own Google account. That file lives in your Drive - we never see it or host it. Billsfort requests only the minimum access to your Drive needed to save and restore that file, and you can revoke that access in your Google account settings at any time. Alternatively, you can export all of your data to CSV, which stays under your control.
5. Anonymous analytics and diagnostics
To understand how the App is used and to improve it, we collect anonymised, aggregated usage statistics via Google Analytics for Firebase. We have configured this collection for privacy:
- Events do not include your financial data (amounts, bill names, categories or receipts).
- Your IP address is anonymised and advertising signals are always disabled - the App never requests ad consent or shares data for advertising.
- You can turn off analytics in the App settings. When you do, we stop associating activity with an identifier and receive only aggregated, cookieless counts.
Legal basis: our legitimate interest in maintaining and improving the App (Art. 6(1)(f)), balanced by data minimisation and the opt-out. We may also collect technical crash reports to fix bugs.
Separately from the App, this website (billsfort.app) uses Google Analytics for aggregate visit statistics (page views, device type, approximate country), so we can understand interest in Billsfort. On your first visit we show a cookie banner: if you accept, Google Analytics stores statistics cookies; if you decline, we store no cookies and Google Analytics only sends aggregated, anonymous, cookieless measurements (so-called Consent Mode). Either way, this data relates to site browsing only, is not combined with your App data - which stays on your phone - and is never used for advertising. You can change your choice at any time via the Cookies link in the footer of any page.
6. Cookies on this website
The Billsfort app does not use cookies. This website (billsfort.app) uses a small number of cookies, solely for visit statistics - never for advertising and never to identify you personally. On your first visit we show a banner where you can accept or decline these cookies, and you can revisit that choice at any time via the Cookies link in the footer.
- Strictly necessary - keep the pages working and store no personal information.
- Analytics (Google Analytics) - cookies such as
_gaand_ga_<id>let us count visits and understand, in aggregate, which pages are of interest. They are only stored if you accept in the banner; if you decline, Google Analytics runs in cookieless mode and we receive only aggregated counts. We run Google Analytics with IP anonymisation and advertising signals disabled.
We use no advertising, social-media or cross-site tracking cookies. You can also block or delete cookies in your browser settings (the "Privacy" or "Cookies" section) - the site keeps working normally. Google's handling of this data is governed by Google's privacy policy.
7. Payments and subscriptions
Premium and lifetime purchases are processed by the App Store (Apple) or Google Play (Google). We do not receive or store your card details. We only receive the store's confirmation that your subscription is active, in order to unlock Premium features. The handling of your payment data is governed by Apple's and Google's privacy policies.
8. Device permissions
- Camera - only when you capture a receipt or scan a QR code. Images stay on your device.
- Notifications - for local bill reminders. They're generated on the device, not by a server.
- Biometrics - if you enable the biometric lock, authentication is performed by the operating system; we never access your biometric data.
9. Who we share data with
We do not sell your data and we do not share it for advertising. We use only the processors strictly necessary to run the features you choose to use: Google (Firebase Analytics; Google Drive, when you enable backup) and the app stores (for payments). Each handles data under its own policies.
10. Your rights (GDPR)
Because most of your data lives only on your device, you have direct control: you can view, edit, export (CSV) or delete it in the App at any time. For any data we may process (optional account, anonymous analytics), you have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent. To exercise these rights, contact us at info@billsfort.app. You also have the right to lodge a complaint with your supervisory authority (in Portugal, the CNPD).
11. Children
Billsfort is not intended for anyone under 16 and does not knowingly collect data from children.
12. Changes to this policy
We may update this policy to reflect improvements to the App or legal changes. We'll post the revised version on this page, with the "Last updated" date at the top. Material changes will be flagged in the App.
13. Contact
Data controller: generictec. For any privacy question, write to info@billsfort.app.