PRIVACY IN PLAIN LANGUAGE

Privacy Policy

Last updated: 10 September 2026.

This policy explains how the global Android and web service Where's My Money? processes data. The controller is CRAFTED CODE STUDIO DOO BEOGRAD (VOŽDOVAC), Dragice Končar 1, 6th floor, apartment 31, Belgrade (Voždovac), Serbia, company number 22323571, tax ID 115877060.

What data we process

Account data: email address, account identifier and basic profile details provided by Google when you choose Google sign-in.
Financial records you enter: expenses, income, transfers, budgets, balances, currencies, categories, merchants, cost places and transaction types.
Subscription and entitlement data: product and order identifiers, protected purchase token, subscription period and status, where a paid offer is available. We do not receive or store your payment-card number.
Settings and technical data: app preferences, record identifiers, synchronization times, backup metadata and technical information needed to provide and secure the service.
Optional usage analytics: only with your consent, anonymous events such as opening a report, starting a trial, language selection and technical error type. We do not send email addresses, user IDs, financial amounts, merchants or record contents to usage analytics.

No bank or card access: the global edition does not connect to your bank account, read card transactions or store card details. It processes only information you choose to enter.

Why we process data

to create, display, categorize and report your personal financial records;
to synchronize and restore data between Android and the web;
to provide trials, promotional access or confirmed subscriptions;
to protect accounts, prevent abuse and provide support.

Services we use

We use Google Firebase services, including Authentication, Cloud Firestore and Cloud Functions, Google Play Billing where subscriptions are offered, and optional Google Analytics/Firebase Analytics when you consent. Providers process only the data needed to perform these functions and may process it in countries where they operate, subject to their safeguards and applicable law.

Your analytics choice

Usage analytics is off by default. You may enable or disable it in the Android app or through Analytics settings on the web. Refusing analytics does not restrict the service.

Aggregated analysis

Analysis of financial-record content is not currently active and is not covered by consent to anonymous usage analytics. If introduced, it will require separate, clear and voluntary consent. Only sufficiently anonymized and aggregated information will be used; information identifying a user, account or individual record will not be published or provided.

Retention and security

Cloud data is retained until you delete your account or request deletion, unless limited retention is required by law, security, fraud prevention or dispute resolution. Local data remains on your device until you delete it, clear app data or uninstall the app. We use authentication, HTTPS and access rules, but no system can eliminate every risk.

Deletion and contact

You can start deletion in the Android or web app. If you cannot access the app, follow the account-deletion instructions or email privacy@gdesumojepare.rs.

For privacy questions, contact the same address. We will update this page before materially different processing begins where required.