Skip to content
Yuzuri

Privacy Policy

Yuzuri

How the Android version handles your data

The following describes the Android version (Android 9.0 and later). Everything above applies to iOS; only the points below differ on Android.

Your records are stored in a local database (Room) on your device. They are never sent to the developer's servers.

The app itself contains no networking code.

Sensitive fields such as account numbers and passwords are encrypted (AES-GCM) with a key held in the Android Keystore before they are stored on your device. The key cannot be extracted from the Keystore, so a copy of the ciphertext elsewhere cannot be decrypted.

Photos you attach are chosen with the system photo picker, which hands the app only the photo you pick, so the app does not ask for permission to read your whole photo library. The chosen photo is copied into the app's own storage and the database keeps only its location.

Both cloud backup and device-to-device transfer are disabled (allowBackup="false" plus data_extraction_rules.xml). To move to a new device, export a backup yourself from inside the app.

The key for sensitive fields cannot leave the device, so carrying only the ciphertext to a new device would leave it unreadable. To move, write an encrypted backup (protected by a passphrase) from inside the app. Restoring works without a purchase.

The only external services used are Google Play Billing (purchases) and Google Play In-app Review (rating prompt). Google processes all payments; card details never reach the developer.

When you export a PDF or an encrypted backup, you choose where it is saved (Android's file picker). If you use Share to send it to another app, a temporary copy is kept in the app's cache and deleted the next time you share and on the next launch. What the receiving app does with it is up to that app. Nothing you write is passed to Google Play Billing or In-app Review.

The only device permission the app asks for is biometric authentication (fingerprint or face) for the app lock. The biometric data itself is handled by Android; the app receives only whether authentication succeeded. You can turn the app lock off.

Uninstalling the app deletes the data on your device. With backup and transfer disabled, no copy remains outside it.

Backup files you exported yourself stay wherever you saved them.

Controller, contact and your rights

This app is provided by Freetokyo Labs, which acts as the data controller. For any question about this policy or about personal data, contact support@freetokyolabs.com. We normally reply within five business days.

If you are in the EU, the EEA or the UK, the GDPR gives you the right to access, rectify, erase, restrict and port your personal data, to withdraw consent and to object to processing. You may also lodge a complaint with your national supervisory authority.

If you are a California resident, the CCPA/CPRA gives you the right to know, delete and correct the personal information collected about you, and to opt out of its sale or sharing. We do not sell or share personal information.

Where this app stores data only on your device, we have no access to it, so most of these rights are exercised directly on the device: delete or export inside the app, or delete the app. We will still answer any request you send us.

Retention: on-device data is kept until you delete it or remove the app. Support emails are deleted 24 months after the request is closed.