Privacy policy

Effective 30 October 2026

Dlaha is built so that your spending stays yours. Your records live on your phone, not on our servers. We show no ads, run no analytics or trackers, and sell or share nothing.

On your phone

• Your records (amounts, dates, names, notes, categories, budgets, bills, goals, wallets, learned names) are stored in the app's private storage. They are excluded from Android's automatic cloud backup.
• Receipt photos you scan or share are read on the phone, even offline, and deleted straight after. They are never uploaded.
• Voice entry uses only your phone's own speech recognizer, after you tap the microphone. Audio is never stored or sent by Dlaha.
• Payment alerts (Google Play installs only, off until you allow Notification access): Dlaha reads the title and text of notifications from BCA, GoPay and ShopeePay only, to draft an expense for you to review. Notifications from other apps are ignored. Alert text stays on the phone.
• Backups and spreadsheets you export are files you control. Encrypted backups can be opened only with this phone's key or your recovery code.

Only if you sign in with Google (optional)

• Sign-in. Your phone sends a Google sign-in token to our server once per session. The server checks it with Google and keeps only an anonymous ID. We never receive or store your name, email address or photo.
• Google Drive backup. Encrypted backups go into a hidden app folder in your Google Drive. We cannot read them; Google stores them under Google's terms.
• Household sharing. Phones you approve exchange records through our relay, encrypted on the phone so the relay can't read them. The relay keeps: each phone's anonymous ID and public key, which household it belongs to, keys locked to each approved phone, and encrypted messages. Messages are deleted once every phone in the household has them, and always after 30 days. Invites expire after 15 minutes; households idle for 180 days are deleted.
• Security records. Short-lived technical counters that protect the service. They can't be traced back to your Google account and are deleted within days.

Service providers

The relay and sign-in check run with a cloud hosting provider that processes data only on our behalf. Sign-in and Drive backup use Google. They process data only to provide these services.

Security

Connections use HTTPS only. Records shared between phones are end-to-end encrypted, with keys that never leave your phones. Release builds block screenshots and screen recording, and an optional app lock asks for your fingerprint or screen lock.

Your choices and deletion

• Settings → Delete all data removes your records from the phone.
• Settings → Delete my Dlaha account removes your anonymous ID, household memberships, keys and messages from our server.
• No phone? Delete your account on the web.
• Uninstalling removes everything Dlaha stored on the phone. Exported files and Drive backups are yours to delete.

Children

Dlaha is not directed at children under 13.

Changes and contact

We will post changes here with a new effective date. Questions: [email protected].