PiFl Labs Co., Ltd. ("PiFl Labs", "we", "us") provides the mobile app "Spending Log: Expense Tracker" (the "App") for iOS and Android. This policy explains what information is processed when you use the App, why, who receives it, and the choices you have.
1. Summary
- You enter your spending by hand. The App has no account or sign-up, no bank or card linking, no receipt scanning and no cloud sync, and it does not give advice.
- Your spending records, purchases you held back, recurring expenses, categories, budgets and settings (including an optional hourly wage) are stored only on your device. We do not collect them and cannot see them.
- The App shows ads through Google AdMob and measures how the App is used through Google Analytics for Firebase. These Google services receive device identifiers and usage data, as described in Section 4.
- You can refuse personalized ads and tracking at any time (Section 7).
2. Who is responsible and how to contact us
The controller of the personal information described in this policy is:
PiFl Labs Co., Ltd.
59 Jukseongseo-gil, Jeju, Republic of Korea
D-U-N-S 696579400
Email: support (at) pifl-labs.com
For any privacy question or request, write to support (at) pifl-labs.com.
3. Information that stays on your device (not collected)
| Data | Where it is kept | Sent to us or third parties? |
|---|---|---|
| Spending records (amount, category, memo, date, and any "Worth it" / "Regret it" mark) | Local database (SQLite) inside the App on your device | No |
| Purchases you held back ("Resisted": amount, category, memo, date) | Same | No |
| Recurring expenses (amount, category, memo, day of the month) | Same | No |
| Categories and budgets | Same | No |
| Settings (currency, month start day, week start day, theme, language, reminder time, optional hourly wage, Pro status, temporary unlock times) | Same | No |
| Copy of your data from just before your last restore (only after you restore from a backup file) | A file in the App's private storage on your device | No |
- We have no server that receives this data. It never leaves your device unless you export it, create a backup file or share a receipt image yourself.
- Paste from message: only when you tap "Paste from message" does the App read the text on your clipboard; it then works out the amount, date and merchant on your device. That text and the result are not sent to us or to any third party, and the App does not request permission to access your messages or notifications.
- Share from another app: you can send the text of a payment message to the App from another app's share menu. The text is kept in a storage area on your device that only the App can use (on iOS, an App Group container shared with the App's share extension) until the App opens and reads it; the App then deletes it. The text is processed on your device just like "Paste from message", is not sent to us or to any third party, and no permission is needed.
- Calculated on your device: "Usual for this time" suggestions, the work-hours view of your expenses, the regret ranking and the monthly receipt are worked out on your device from your own records.
- Export: when you export a CSV or PDF file, the file is created on your device. On Android you choose where to save it in the system "Save as" screen; on iOS you choose what to do with it in the share sheet. The App does not request storage permission. Once you save or send the file elsewhere, that destination's terms apply.
- Monthly receipt image: when you share it, the image is created on your device and passed to the share sheet, where you choose where it goes. You can hide amounts before sharing.
- Backup file: only when you tap "Create backup file" does the App create a file (JSON) containing your records (expenses with their marks, held-back purchases, recurring expenses, categories, budgets) and your settings, including the hourly wage if you set one. Pro status and temporary unlocks are not included; to get Pro back, use "Restore purchases". You choose where the file is saved (Android: the system "Save as" screen; iOS: the share sheet), and it is never sent to us. The file is not encrypted, so keep it somewhere safe. "Restore from backup" reads only the file you pick and shows a preview before anything changes. Just before a restore is applied, the App keeps a copy of your previous data in its private storage on your device so that "Undo last restore" can bring it back; that copy is replaced at the next restore and deleted when you undo.
- Device backups: your operating system's own backup (iCloud device backup on iOS, Android Auto Backup to your Google account) may include the App's data. Apple or Google performs that backup under your account and their terms; we never receive it. You can manage backups in your device settings.
- Deletion: deleting an entry in the App removes it from the device. Uninstalling the App deletes all App data on the device (copies in OS backups follow your backup settings).
4. Information processed by third-party services
The App contains software development kits (SDKs) from Google. When you use the App, these SDKs send the information below directly from your device to Google. None of them receive your amounts, memos, merchant names, hourly wage, the text you paste or share, balances, budgets or whether you are over budget.
4.1 Google AdMob (advertising) — Google LLC
- Information: advertising identifier (on iOS, the IDFA only if you allow tracking; on Android, the Android advertising ID), IP address, device and operating system information, and ad interaction data (for example, which ads were shown or tapped).
- Purposes: serving ads, measuring ads, and preventing fraud.
- Personalized vs. non-personalized ads: ads are personalized only where you have allowed it (Section 6). Otherwise the App requests non-personalized ads, which are not based on your past behavior; Google still uses the information above to deliver and measure ads and to prevent fraud.
- Where ads appear: a banner on the Home, Calendar and Stats screens, full-screen ads at most twice a day, and rewarded ads only when you choose to watch one.
4.2 Google Analytics for Firebase (app analytics) — Google LLC
- Information: app-instance ID (a random identifier for this installation of the App), device and operating system information, approximate location that Google derives from your IP address, and usage events.
- What usage events contain: only categorical values and on/off flags, such as which feature was used, how an expense was entered (typed, pasted, shared or from a suggestion), the key of a default category, whether a budget was set during onboarding, whether a backup was restored by merging or overwriting, whether an expense was marked "Worth it" or "Regret it", and whether amounts were hidden on a shared receipt image. Never amounts, memos or merchant names, the text you paste or share, your hourly wage, balances, or budget-exceeded status.
- Advertising ID: collection of the advertising ID by Firebase is disabled.
- Purpose: understanding, in aggregate, how the App is used so we can fix problems and improve it.
4.3 In-app purchase — Apple / Google
"Pro" (product ID com.pifl.pipi.spend.pro) is a one-time purchase processed by the App Store (Apple Inc.) or Google Play (Google LLC). We never receive your card or payment details. The App receives the purchase result from the store on your device to unlock Pro, and "Restore purchases" asks the store again. This information is not sent to us.
4.4 Emails you send us
If you email support (at) pifl-labs.com, we receive your email address and your message. The "Report an inappropriate ad" item in Settings opens an email to us that is pre-filled with the response IDs of recently shown ads and your operating system name and version; you can review or edit it before sending. We use this only to answer you and, for ad reports, to report the ad to Google.
Google's policies
- Google Privacy Policy: https://policies.google.com/privacy
- How Google uses information from sites or apps that use its services: https://policies.google.com/technologies/partner-sites
5. Notifications
The evening reminder is optional. It is a local notification scheduled on your device at the time you choose; it is not sent from a server, and its text contains no advertising. The App asks for notification permission during onboarding, and every feature works without it. You can turn the reminder off in the App's Settings or in your device's notification settings.
6. Consent and tracking
- iOS – App Tracking Transparency (ATT): on first launch, iOS asks whether the App may track you. If you allow it, AdMob may use the IDFA for personalized ads. If you choose "Ask App Not to Track", the IDFA is not available and the App requests non-personalized ads only.
- EEA, UK and Switzerland: Google's consent form (User Messaging Platform, "UMP") asks for your consent to personalized ads and to storing or accessing information on your device for ads.
- US states with privacy laws (including California): Google's US-state privacy message lets you opt out of the sale or sharing of personal information for targeted advertising.
- "Privacy choices" in Settings: when Google's consent tools require it in your region, Settings shows "Privacy choices", which reopens the form so you can change your choices at any time.
Legal bases (EEA, UK, Switzerland)
| Processing | Legal basis |
|---|---|
| Personalized ads; storing or accessing information on your device for ads | Your consent (GDPR Art. 6(1)(a)), given in the UMP form. You can withdraw it at any time via "Privacy choices". |
| Non-personalized ads, ad measurement and fraud prevention | Our legitimate interest in offering the App free of charge with ads (Art. 6(1)(f)), within the choices you make in the UMP form; where that form asks for consent for these purposes, your consent. |
| Aggregated app analytics (Firebase) | Our legitimate interest in understanding how the App is used in order to fix and improve it (Art. 6(1)(f)). Data is minimized: no advertising ID, no amounts or other spending content. You may object at any time (Art. 21) by writing to us. |
| Pro purchase | Performance of the purchase contract (Art. 6(1)(b)). |
| Answering your emails | Our legitimate interest in responding to you (Art. 6(1)(f)). |
7. How to refuse or withdraw
- iOS: Settings > Privacy & Security > Tracking — turn tracking off for the App (or turn off "Allow Apps to Request to Track").
- Android: Settings > Google > Ads > Delete advertising ID (on older Android versions: "Opt out of Ads Personalization"). Menu names may vary by device.
- In the App: Settings > Privacy choices (shown where Google's consent tools apply) — change or withdraw consent, or opt out of sale or sharing.
- Pro: buying Pro removes ads.
- Notifications: turn off the reminder in the App's Settings or in your device's settings.
- Stop all collection: uninstall the App.
8. Users in Korea — behavioral information for personalized ads
In line with the Personal Information Protection Commission's guidelines on behavioral information for personalized advertising:
| Item | Details |
|---|---|
| Behavioral information collected | Advertising identifier (IDFA only if tracking is allowed; Android advertising ID), ad interaction data (ads shown and tapped), IP address, device and OS information |
| Collection method | Collected automatically by the Google AdMob SDK when you use the App |
| Purposes | Serving personalized and non-personalized ads, measuring ads, preventing fraud |
| Business that collects and processes it | Google LLC |
| Retention | According to Google's retention policy: https://policies.google.com/technologies/retention |
| How to refuse | iOS: Settings > Privacy & Security > Tracking / Android: Settings > Google > Ads > Delete advertising ID / In the App: Settings > Privacy choices (where shown) |
| Contact | support (at) pifl-labs.com |
We do not collect sensitive behavioral information, and the App never uses your spending content for ads.
9. Users in Japan — advertising ID and external transmission
- Advertising ID: the App uses the advertising ID (IDFA on iOS only if you allow tracking; Android advertising ID) through Google AdMob for the purposes in Section 4.1. See Section 7 for how to stop this.
- External transmission (Telecommunications Business Act, Art. 27-12): the App sends the following information from your device to an outside party.
| Recipient | Service | Information sent | Purposes |
|---|---|---|---|
| Google LLC | Google AdMob | Advertising ID, IP address, device and OS information, ad interaction data | Serving and measuring ads, preventing fraud |
| Google LLC | Google Analytics for Firebase | App-instance ID, device and OS information, usage events (approximate location is derived from the IP address) | Analyzing how the App is used to improve it |
10. California and other US states
- Categories collected in the past 12 months: identifiers (advertising ID, app-instance ID, IP address); internet or other electronic network activity (ad interactions, app usage events); approximate geolocation (derived from IP address); device information. Sources: your device, through the Google SDKs. Purposes: Section 4.
- Sale or sharing: we do not sell personal information for money. Making identifiers and ad interaction data available to Google for targeted advertising may count as "selling" or "sharing" under California and other state laws. Do Not Sell or Share My Personal Information: open Settings > Privacy choices in the App and choose the opt-out in Google's US-state privacy message. You can also limit tracking with the device settings in Section 7.
- Sensitive personal information: we do not collect or use it.
- Your rights: to know, access, correct and delete personal information, to opt out of sale or sharing, and not to be discriminated against for using these rights. Send requests to support (at) pifl-labs.com. Because your spending data never leaves your device, you can view, export or delete it directly in the App.
- We do not knowingly sell or share personal information of consumers under 16.
11. Retention
- Data on your device: kept until you delete it in the App or uninstall the App.
- Backup files you create: kept wherever you saved them until you delete them; uninstalling the App does not delete them.
- Data received by Google (AdMob, Firebase): retained by Google according to its policies (https://policies.google.com/technologies/retention). We use analytics data only in aggregated form.
- Emails to support: kept for 3 years after your request is resolved, then deleted, unless the law requires us to keep them longer.
12. International transfer
Information collected by Google AdMob and Google Analytics for Firebase is sent over the internet from your device to Google LLC (United States) when you use the App, and is processed in the United States and other countries where Google operates. For transfers from the EEA, UK and Switzerland, Google relies on safeguards recognized by data protection law, such as the EU–U.S. Data Privacy Framework and standard contractual clauses. You can avoid personalized-ad processing as described in Section 7, or stop all transfers by uninstalling the App.
13. Children
The App is not directed to children under 13 (under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has used the App and you want related information deleted, contact us at support (at) pifl-labs.com.
14. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal information, to data portability, to withdraw consent at any time, and to complain to a data protection authority. Write to support (at) pifl-labs.com; we will respond within the time required by law. Your spending data is on your device only, so you can view, export and delete it yourself in the App. For information held by Google, we will help with your request, and you can also use Google's own tools (for example, resetting or deleting your advertising ID).
15. Security
Your spending data is kept in the App's private storage on your device and is protected by your device's own security settings, such as the screen lock. Because we do not run a server that stores your spending data, it cannot be leaked from our side.
16. Changes to this policy
We may update this policy when the App or the law changes. We will post the new version with a new effective date, and if the changes are significant we will let you know in the App or by other appropriate means.
17. Contact
PiFl Labs Co., Ltd. — 59 Jukseongseo-gil, Jeju, Republic of Korea — support (at) pifl-labs.com