Short version. Vynance stores your financial records — transactions, accounts, balances, budgets, debts, pensions and receipt photos — in a database on your device. We do not run a server that receives them, we do not sell or share them, and we do not use them for advertising. The only copy that ever leaves your phone is a backup you choose to create, encrypted in transit and stored in your own private Google Drive app folder that we cannot browse.
Vynance ("the app", "we", "us") is an Android application published by Vynci Softworks ("the developer").
Vynance is a local-first application. Everything you record is written to a private database file inside the app's own sandboxed storage, which other apps on your phone cannot read. This includes:
None of the above is transmitted to the developer. We operate no analytics service, no crash-reporting service, no advertising SDK and no user-profiling system. There is no account database on our side holding your balances.
Signing in with Google is required to use Vynance. We use Android's Credential Manager with Google Identity Services. From your Google profile the app receives, and stores on your device only:
This identifies you for Google Drive backup and detects when a different Google account signs in on the same device. Sign-in state is held in local preferences; the developer receives no copy of it except where you send feedback (section 3.5).
Account switching: because the database is a single device-local file with no per-account ownership, signing in with a different Google account wipes the local database and per-user preferences before continuing, so the previous user's records are not exposed to the new one. You are then offered a restore from the new account's own Drive backup. Back up before switching accounts.
You may back up your data to Google Drive, manually or on a schedule you choose (off, daily, weekly or monthly). A backup is a ZIP archive of the app database plus your receipt images, uploaded over HTTPS to Google Drive.
The app requests only the drive.appdata scope. This is Drive's hidden, application-specific folder:
Vynance's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google Sign-In and Drive is used solely to provide the backup and restore features you request; it is never sold, never transferred to third parties except as needed to provide those features, never used for advertising, and never read by humans.
You can revoke the app's Drive access at any time at myaccount.google.com/permissions.
You may export your data as a CSV or PDF file, or export the raw database to a location you pick with the Android file picker. These files are written where you choose and are never uploaded anywhere by the app. Once exported, the file is outside the app's sandbox and its security is your responsibility.
Receipt images are deliberately excluded from CSV and PDF export.
If you use more than one currency, the app fetches daily reference rates from the public Frankfurter API (api.frankfurter.app). The request contains only currency codes — no amounts, no account details, no identifiers. Rates are cached locally. Your device's IP address is necessarily visible to that service, as with any network request.
If you use "Send feedback" in Settings, the following is written to a Google Firebase Realtime Database controlled by the developer:
| Field | Purpose |
|---|---|
| Star rating (optional) and topic | Triage |
| Your message | The feedback itself |
| Your signed-in email address | So we can reply |
| App version and version code | Reproducing bugs |
| Device model, Android SDK level, locale | Reproducing bugs |
No financial data crosses this boundary. No amounts, balances, accounts, categories, transactions, receipts or budgets are included — by design. Please do not type sensitive figures into the message box; whatever you write there, we will read.
Feedback records are retained for as long as needed to act on them and are deleted on request. Firebase is operated by Google; see Firebase's privacy documentation.
Vynance Premium is sold as a subscription through Google Play Billing. Google processes the transaction end to end. We never see or receive your card number, bank details, billing address or any payment credential. The app only asks Google whether an active entitlement exists, and caches that yes/no answer locally so paid features do not flicker while Play is contacted. Purchases are governed by Google Play's Terms of Service.
The app can create a transaction from speech. This uses the RECORD_AUDIO permission and Android's on-device speech-recognition framework. Audio is handed to the recogniser your device provides — usually Google's, which may process it on Google's servers under Google's own privacy terms. Vynance does not record, store, or transmit audio itself; it receives only the resulting text and parses it locally. The permission is optional; deny it and every other feature works normally.
Attaching a receipt uses Android's system photo picker, so the app never requests broad photo-library or camera permissions and can only see the single image you select. The chosen image is copied into the app's private storage. It is deleted when you delete the transaction (after the undo window expires). Receipts are included in Google Drive backups and excluded from CSV/PDF exports.
The app can post local notifications for budget thresholds, credit-card utilisation and bill dates, recurring transactions and pension contribution reminders. These are generated entirely on your device from your own data. No push service is used and nothing is sent to a server to produce them. The POST_NOTIFICATIONS permission is optional.
If you enable the app lock, authentication is performed by Android's BiometricPrompt against credentials already enrolled on your device. Vynance never receives, stores or transmits your fingerprint, face data or device PIN — it receives only a success or failure result.
| Service | What it receives | When |
|---|---|---|
| Google Sign-In / Identity Services | Standard authentication data | At sign-in (required) |
| Google Drive (appdata scope) | Your encrypted-in-transit backup archive, stored in your own account | Only if you enable backup |
| Google Play Billing | Payment details, handled by Google | Only if you subscribe |
| Google Firebase Realtime Database | Feedback message, email, app/device version data | Only if you send feedback |
| Frankfurter API | Currency codes only | Daily, if multi-currency is used |
| Device speech recogniser | Spoken audio (handled by the OS provider) | Only when you use voice entry |
To request deletion of anything we hold, contact vyncisoftworks@gmail.com. Since we hold almost nothing, such requests are usually limited to feedback records.
Depending on where you live (GDPR in the EU/UK, CCPA/CPRA in California, DPDP Act in India, and comparable laws elsewhere) you may have the right to access, correct, delete, port or restrict processing of your personal data, and to object to it or withdraw consent.
In practice, most of these you can exercise yourself without asking us: your data is on your device, exportable to CSV or PDF at any time, and deletable at any time. For anything we hold — feedback records — write to vyncisoftworks@gmail.com and we will respond within 30 days. Under the CCPA we do not sell or share personal information, so there is nothing to opt out of.
Our lawful bases under GDPR are: contract (sign-in and delivering the app's function), consent (Drive backup, microphone, notifications, feedback), and legitimate interests (fixing bugs from feedback you send).
Data is stored in the app's private sandbox, inaccessible to other apps on a non-rooted device. Network traffic uses HTTPS. Optional biometric/device-credential locking is available. Drive backups sit inside Google's infrastructure under your account's own protections.
No system is perfectly secure. A rooted or compromised device, or a backup you export to shared storage, sits outside these protections. Keep your device locked and your Google account protected.
Vynance is not directed at children under 13 (or under 16 where local law sets that threshold) and we do not knowingly collect their data. If you believe a child has provided us with information, contact us and we will delete it.
The Google services described above operate globally and may process data outside your country, under Google's own safeguards and standard contractual clauses. Your financial records themselves are not transferred anywhere, because they do not leave your device.
We may update this policy as the app changes. The "Last updated" date at the top will change and material changes will be highlighted in the app or on the Play Store listing. Continuing to use Vynance after an update means you accept the revised policy.
Questions, requests or complaints: vyncisoftworks@gmail.com
EU/UK users may also lodge a complaint with their local data protection authority.