Bana Budget AI â Personal Finance Tracker for Qatar & Pakistan Expats
We DO NOT collect, store, transmit, sell, share, or process any of your personal or financial data on any server, cloud, or external system â anywhere in the world.
Every piece of data you enter into Bana Budget AI â your accounts, transactions, budgets, goals, and income records â exists only on your personal device. When you uninstall the app, all data is permanently and irreversibly deleted.
This is not a policy statement â it is the technical architecture of the application. There is no server to send data to. There is no database on our end. There is no backend. Your data cannot leave your device because we have built no mechanism for it to do so.
Bana Budget AI is an independent mobile application developed for personal finance management. The application is available on the Google Play Store and is intended for individuals â particularly expatriates â managing finances across Qatar and Pakistan.
Developer Contact: banabudgetai@gmail.com
For the purposes of applicable data protection laws, we act as the data processor and controller. However, because all data processing occurs entirely on your device and no data is ever transmitted to us, our role is effectively that of a tool provider â not a data handler.
This Privacy Policy applies to:
This policy does not apply to third-party websites or services that may be linked from within the app, including exchange rate API providers. Those services are governed by their own privacy policies, which are referenced in Section 9.
We believe you have the right to understand â technically â why your data is safe. Here is the architecture of Bana Budget AI:
đĄ Technical summary: The app has no server, no database, no user accounts, no authentication system, and no data transmission layer. It is a standalone local application. Your data is as private as data in a notebook you keep in your pocket.
We explicitly confirm that we do not collect, store on our servers, or have any access to:
đĢ We have no way to access your data even if we wanted to. There is no server-side infrastructure that receives data from this app.
The following data is stored exclusively on your device and is under your complete control at all times:
| Data Type | Purpose | Location |
|---|---|---|
| Bank account names & types | Display and balance tracking | Device local storage only |
| Last 4 digits of card/account | Account identification (no full numbers stored) | Device local storage only |
| Transaction amounts, dates, categories | Expense and income tracking | Device local storage only |
| Budget limits and spending amounts | Budget management | Device local storage only |
| Savings goals | Goal tracking | Device local storage only |
| Country and currency preferences | App configuration | Device local storage only |
| Custom categories created by user | Personalisation | Device local storage only |
Security design: Only the last 4 digits of any account or card number are accepted by the app. Full account numbers cannot be entered or stored.
Bana Budget AI includes an AI-powered SMS parsing feature. This is how it works technically:
â ī¸ Note: We do not request or use the READ_SMS or RECEIVE_SMS system permissions. The SMS paste feature relies on the user's own manual copy-paste action only.
To display live currency exchange rates, the app makes anonymous HTTPS requests to third-party exchange rate APIs. The details of these requests are:
| What is sent | What is NOT sent |
|---|---|
| Currency code pair (e.g. "QAR", "PKR") | Your name or identity |
| Standard HTTP headers (app user-agent) | Your financial data |
| Timestamp of the request | Your device identifiers |
| Your location | |
| Your account data |
These requests are indistinguishable from any other anonymous web request. The exchange rate providers see only that someone requested a currency rate â the same information visible to anyone who visits their website.
Bana Budget AI requests only the following Android permissions:
| Permission | Why | Can be denied? |
|---|---|---|
| INTERNET | To fetch live currency exchange rates from public APIs | No â app requires internet for exchange rates |
The app does not request and does not use:
The app uses the following third-party services for exchange rates only. No personal data is shared with any of them:
| Service | Purpose | Data shared | Privacy Policy |
|---|---|---|---|
| open.er-api.com | Primary exchange rate source | Currency codes only | https://www.exchangerate-api.com/privacy |
| exchangerate-api.com | Fallback exchange rate source | Currency codes only | https://www.exchangerate-api.com/privacy |
There are no advertising networks, analytics SDKs, social media SDKs, crash reporting tools, or any other third-party code embedded in this application.
All data is retained on your device for as long as the app is installed. There is no server-side data retention period â because no server-side data exists.
âšī¸ If you use your device manufacturer's backup service (e.g. Google One Backup, Samsung Cloud), your app data may be included in that backup. This is governed by your device manufacturer's privacy policy, not ours.
The following security measures are implemented in the application and by design:
User responsibility: We strongly recommend enabling your device's screen lock (PIN, pattern, or biometric) and device encryption for maximum security of locally stored data.
Bana Budget AI is not directed at children under the age of 13. We do not knowingly collect any personal information from children under 13. If you believe a child under 13 has used this application, please contact us at banabudgetai@gmail.com.
In jurisdictions where the age of digital consent is higher (e.g. 16 in certain EU member states), the same restriction applies.
Bana Budget AI is designed to comply with the privacy laws of all major jurisdictions. Because no personal data is collected or processed by us, compliance is achieved by design rather than by policy alone.
General Data Protection Regulation. Compliant via data minimisation (zero collection), purpose limitation, and storage limitation (device only).
United Kingdom GDPR post-Brexit. Same principles apply. No personal data processed by controller.
California Consumer Privacy Act. We do not sell, share, or process personal data. No opt-out needed as no data is collected.
Personal Data Privacy Protection Law. Compliant â no personal data transmitted outside device. No cross-border transfer occurs.
Pakistan Personal Data Protection Bill & PECA 2016. No personal data collected or processed by the app operator.
UAE Personal Data Protection Law. Compliant â no data processing or storage by the app provider.
Saudi Arabia Personal Data Protection Law. No personal data collected or stored outside user device.
Digital Personal Data Protection Act. Compliant â no personal data processed by the app operator.
Australian Privacy Principles. No personal information collected, stored, or used by the app provider.
Canada's Personal Information Protection Act. No personal information collected for any commercial purpose.
Fully compliant with Google Play Developer Programme Policies including Data Safety requirements.
Organisation for Economic Cooperation & Development Privacy Principles. All 8 principles met by design.
âī¸ Key legal principle: Because we collect zero personal data and have no server-side processing, the "data controller" obligations under most privacy laws are minimal or inapplicable. You retain full and sole control of your data at all times.
Under applicable privacy laws, you have the following rights. Because all data is stored locally on your device, most rights are exercisable directly through the app without needing to contact us:
All your data is visible within the app at all times. No request needed.
Edit any transaction, account, budget, or goal directly in the app.
Delete individual items in-app, or uninstall the app to delete everything permanently.
Export your data via Settings â Export Data (coming soon in next update).
You may stop using the app at any time. Uninstalling removes all data permanently.
You control what data is entered. No data is processed without your explicit action.
No automated profiling or decision-making is performed on your data.
Contact us at banabudgetai@gmail.com or your local data protection authority.
The following reflects our official Google Play Data Safety form submission:
| Question | Our Answer |
|---|---|
| Does your app collect or share any of the required user data types? | No â no data is collected or shared |
| Is all user data collected encrypted in transit? | Yes â HTTPS/TLS used for all network requests |
| Do you provide a way for users to request data deletion? | Yes â in-app delete and uninstall permanently removes all data |
| Does the app share location data? | No |
| Does the app collect financial information? | No â financial data is stored locally on device only, not collected by us |
| Does the app share personal data with third parties? | No |
| Does the app use data for advertising? | No |
| Does the app use data for analytics? | No |
We may update this Privacy Policy from time to time to reflect changes in the app, applicable laws, or our practices. When we make material changes, we will:
Your continued use of the app after changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.
Version history:
For any privacy-related queries, data deletion requests, or complaints:
We respond to all privacy enquiries within 72 hours.
banabudgetai@gmail.comIf you are not satisfied with our response, you have the right to lodge a complaint with your country's data protection authority â for example, the Qatar National Cyber Security Agency (NCSA) or the Pakistan Telecommunication Authority (PTA).