Privacy Policy

Last updated: August 3, 2026

FinWander is a personal multi-currency money tracker. It is built privacy-first: the financial data you enter stays on your device. We do not run accounts, we do not have a copy of your records, and we cannot see them.

1. Who we are

“FinWander”, “we”, “us” — the developer of the FinWander Android application. Contact: support@finwander.com.

2. What data the app handles, and where it lives

Your financial data — stored only on your device. Everything you enter is saved in a local database on your phone and is never sent to us:

• Accounts (names you choose, type, optional bank/institution label) and balances.
• Transactions: amounts, currencies, dates, your notes/descriptions, categories.
• Currency exchanges, multi-step exchange chains, cost basis and profit/loss history.
• Recurring payment templates (e.g. “Rent”, “Salary”) and your settings (base currency, etc.).

We have no server-side copy of this data. We cannot read, recover, or share it.

Receipt photos (optional) — processed on your device. If you photograph a receipt, the image is read using on-device text recognition (Google ML Kit, offline) to pre-fill an amount and date for you. The photo and the recognized text are not uploaded. However, the ML Kit component itself may send technical service data to Google when it is used — such as device information, the app’s identifier, per-installation identifiers, and API usage/performance metrics; it does not include your photos, recognized text, or financial data. This is Google’s SDK behaviour, described in Google’s ML Kit data disclosure. (See the optional cloud feature in section 6.)

Fonts — fetched from Google. The app’s interface fonts (Inter, JetBrains Mono) are downloaded at runtime through the Google Play services font provider and cached on the device. When this happens, Google receives a standard web request: your IP address, the app’s package name, and the font names — no personal or financial data. Without a network or Google Play services, the app simply uses the system font.

Exchange rates — downloaded to your device. To show up-to-date rates, the app downloads a bundle of current exchange rates from our rates service (cdn.finwander.com / rates.finwander.com). These downloads don’t describe your finances: the current-rates bundle is the same for everyone, and rate-history requests contain only currency pair codes (for example USD → RUB) and a time marker.

These requests are anonymous: they contain no account, no name, no email, no device identifier — nothing that identifies you or your finances. As with any internet request, our server technically sees your IP address and standard connection metadata; we do not use them to identify you. The service returns rate numbers, which are then stored on your device.

3. What we do NOT collect

• No sign-up, login, name, email, or phone number.
• No device location (the app does not request or use location).
• No device identifiers, advertising ID, or fingerprinting by us.
• No analytics, crash-reporting, or advertising SDKs added by us. (The Google components the app uses — Play services fonts and ML Kit — may send their own technical service data to Google, as described in section 2 and listed in section 4.)
• No selling or sharing of your data with anyone.

4. Everything that leaves your device

• Anonymous rate downloads (a shared rates bundle; history requests carry currency codes + a time marker), as described above.
• Font requests to Google (IP address, app package name, font names) via the Google Play services font provider, as described above.
• ML Kit technical service data to Google (device info, app identifier, per-installation identifiers, API usage/performance metrics — never your photos, recognized text, or financial data), only when you use receipt scanning, as described above.
• What you export yourself. You can export your data as a CSV or JSON file and share it through Android’s standard share sheet to a destination you choose (email, cloud drive, messenger, etc.). That action, and where the file goes, is fully under your control. The exported file is not encrypted, so share it only where you trust it.

Your financial records themselves are in none of these flows — they never leave the device unless you export them.

5. Backups

The app explicitly excludes your financial database and settings from Google’s automatic cloud backup and device-to-device transfer. If you want a backup, use the in-app export (above), which keeps you in control of the file.

6. Optional cloud receipt recognition (not active)

A future optional feature may offer enhanced receipt recognition by sending a receipt photo to our processing service. It is off by default, requires your explicit opt-in, and is currently not available in the app. If and when it is enabled, this policy and our Google Play “Data safety” disclosure will be updated before it can be used, and it will clearly tell you that a photo is being sent.

7. Permissions

• Internet — to download exchange rates and interface fonts (see sections 2 and 4).
• Camera — only when you choose to photograph a receipt; the image is read on your device.
• Background rate updates — the app refreshes exchange rates in the background using Android’s standard WorkManager component. This adds several technical, automatically granted permissions: keeping the device awake briefly during an update (WAKE_LOCK), checking whether a network is available (ACCESS_NETWORK_STATE), re-scheduling updates after the phone restarts (RECEIVE_BOOT_COMPLETED), and running an update reliably as a short foreground task (FOREGROUND_SERVICE). None of these give access to your data.
• Internal broadcast protection — a technical, app-private permission (…DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION) that shields the app’s internal messages from other apps. It is a safeguard, not a data access.

8. Where rate data is processed

Exchange-rate requests are served over HTTPS. Our rates service is, at the time of writing, operated from servers located in Russia. Because these requests carry no personal or financial information about you, no personal data is processed there.

9. Keeping and deleting your data

Your data stays on your device for as long as you keep the app installed. You can delete individual records, erase all app data from the in-app data-management screen, or uninstall the app — which removes all locally stored data from your device.

10. Children

FinWander is a general personal-finance tool and is not directed at children.

11. Changes to this policy

If we change how the app handles data, we will update this page and the “Last updated” date above (and, for any new data sending, the Google Play Data safety section).

12. Contact

Questions about privacy? Email support@finwander.com.