Privacy policy

Last updated: 23 October 2026. This is a translation: the Italian version is the reference text.

In short

The developer does not collect any data: no account, no server, no advertising, no usage statistics.
Your data stays on your device, encrypted. If you choose to, it travels encrypted to your Google Drive.
No one, not even Google or the developer, can read it without your password or your Secret Key.
The app connects to the internet only for the features you use and to check whether a new version is available.

Who is the controller

Data on the device

Wallets, transactions, due dates, loans, goals and reports are kept in an archive on your device.

The archive is encrypted: SQLCipher, with a key protected by Argon2id and XChaCha20-Poly1305.
The main password is never saved.
You keep the Secret Key: you only need it if you forget the password.
The app PIN (optional) only works on that device: it is never saved in clear or synced, and the secret protecting it is kept by the security chip (Android) or by Windows data protection.

Account (optional)

In Settings › Account you can enter your name and the name shown in shared wallets. With "Read from Google" the app asks Google Drive for the email and name of your Google account: it saves them only in the encrypted archive and uses them for shared wallets.

Sync with Google Drive (optional)

If you turn it on, the app uses the app's hidden folder in your Google Drive (drive.appdata permission).

The app only sees its own files, not your other documents.
Each file is encrypted on the device before it leaves: Google only stores unreadable data.
The app does not read your name or email unless you use "Read from Google" (see Account).

The app's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can turn sync off in the app at any time. You delete the data on Drive from Google Drive › Settings › Manage apps › WalleCy › "Delete hidden app data". You revoke access from your Google account, in the section for third-party apps, or with "Disconnect from Google" in the app.

Shared wallets (optional)

A shared wallet uses a folder in your Google Drive (drive.file permission: the app only sees the files it creates or that you choose).

The app creates the "WalleCy-shared" folder in your Drive. When you invite someone, the wallet's folder is shared with their email through Google Drive, and Google sends them an email with the invite link.
The shared wallet's transactions are encrypted and signed on the device: Google cannot read them, only the wallet's members can.
Google can still read, as for any file on Drive: the folder name (with the wallet name), the file names (with the part of the email before the @), the emails of the people it is shared with and the invite message.
Members see the shared wallet's entries, the name shown in shared wallets and each member's email.
You can stop sharing or leave at any time; if you are the owner, the wallet's folder goes to your Drive trash.

The invite link opens wallecy.agjin.com/invito: the invite data comes after the "#" sign, stays in the browser or in the app and does not reach the site's server.

Camera (optional, Android)

You can take a photo of a receipt or a contract to fill in the fields faster.

The photo is read on the phone (Tesseract) and then deleted.
The photo is not sent to anyone.
The first time the more accurate reading is needed, the app downloads the Italian model (about 9 MB) from the Tesseract project on GitHub.

Unlock with fingerprint, face or PIN, Windows Hello

The check is done by your device's operating system: the app does not receive or store biometric data. It only receives the result, through a key kept in the device's security chip.

Internet connections

The app connects to the internet only for these things:

Google (sign-in and Google Drive): sync, shared wallets and "Read from Google", if you use them.
GitHub, for updates: when the app opens, at most every 6 hours, it downloads the signed list of versions from the download page and, if there is a new one, the file to install. It sends none of your data; like any website, GitHub sees the IP address. The Microsoft Store version is updated by the Store and does not run this check.
GitHub, once (Android): the model for reading photos (see above).
The pages you open in the browser (for example the download page).

This website

The wallecy.agjin.com website is hosted by Cloudflare. The pages use no cookies, advertising or statistics tools; Cloudflare processes the IP address to deliver and protect them.

Retention and deletion

The data stays as long as you keep it.

On Android, uninstalling the app deletes the archive on the phone.
On Windows the archive stays in the %APPDATA%\agjin\WalleCy folder after uninstalling (also for the Microsoft Store version), so you do not lose it if you reinstall: to delete it, delete that folder.
You delete the data on Google Drive as explained above.

Children

The app is not intended for children under 14 and does not collect anyone's data.

Changes

Every change to this policy is published on this page, with the date at the top.