Privacy Policy for UPI Chat

1. Introduction & Core Privacy Principles

Welcome to UPI Chat (Package Name: com.upichat.app), an AI-powered smart expense tracking and conversational assistant application created by DK Nova and developed by DECODER ("we", "our", or "us").

We take your financial privacy with utmost seriousness. UPI Chat is intentionally designed as an offline-first, local-priority application. This Privacy Policy details our data handling practices, security safeguards, and privacy controls in full compliance with Google Play User Data Policies and global data protection regulations.

2. Data We Process and Purpose

2.1 Receipt Screenshot Images (Voluntary Sharing)

When you choose to scan a payment receipt, you explicitly share an image from your device gallery or via the Android Share Sheet.

• Purpose: Extract visible payment details (Amount, Merchant/Payee Name, Date/Time, UPI Reference ID/UTR, and Payment Mode).
• Processing: The image is preprocessed on-device and transmitted via encrypted HTTPS TLS 1.3 to Gemini Vision API solely to generate structured text OCR. Once parsed, the image is stored locally in your app's private internal storage directory.

2.2 Conversational Queries & Expense Records

• Local Conversational NLP: Natural language questions asked in English, Hindi, or Hinglish (e.g. "Aaj kitna kharch kiya?") are processed strictly on your device by LocalAssistantEngine with zero cloud transmissions.
• Transaction Records: Extracted or manually entered records (amount, category, timestamp, merchant) are stored inside your device's private SQLite Room Database.

2.3 Optional Account Information

• Guest Mode: You can use all core features anonymously without providing any email or phone number.
• Google Sign-In (Optional): If you choose cloud backup, Google Authentication processes your email, display name, and unique user identifier to synchronize your encrypted backup across devices.

3. Android System Permissions

UPI Chat requires minimal permissions strictly necessary for its advertised functionality:

4. Data Security and Retention

• Encryption at Rest: Local application databases are stored in isolated Android application sandboxes, inaccessible by other installed apps.
• Encryption in Transit: All external API communications use strict HTTPS TLS 1.3 encryption.
• Data Retention: You retain complete ownership of your data. All transactions remain on your device until you choose to delete individual records, clear categories, or wipe the app storage.

5. Your Rights and Data Deletion

You have full control over your personal data at all times:

• Export Your Data: You can export your complete transaction history to PDF, CSV, or Excel at any time via App Settings → Export.
• Delete All Data: You can erase all stored transactions, cached receipt images, and preferences by using App Settings → Clear Data, or by uninstalling the application.
• Account Deletion Request: If you used Google Sign-In and wish to delete your cloud backup permanently, you may do so inside the app or by emailing us at wecaredknova@gmail.com with the subject "UPI Chat Data Deletion Request".

6. Children's Privacy

UPI Chat is intended for general audiences and is not directed towards children under 13 years of age. We do not knowingly collect personal information from children.

7. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or UPI Chat's data safety practices, please contact us: