Privacy Policy - Rokad Flow

Rokad Flow is a personal finance management application designed to help users track income, expenses, accounts, and financial activities — all stored privately on your own device.

We respect your privacy and are fully committed to protecting your data. This Privacy Policy explains what data is handled, how it is stored, and what controls you have over it.

Rokad Flow does not collect, transmit, or share your personal financial data with us or any third party.

Rokad Flow is an offline-first application.

All financial data — including expenses, income, accounts, categories, and notes — is stored locally on your device only.

We do not collect, store, or transmit your financial data to our servers.

Data Type	Purpose	Stored Where
Transaction records	Your income & expense entries	Device only
Account information	Wallet / account names & balances	Device only
Category data	Custom spending categories	Device only
Backup files (.db)	Local backup copies of your data	Device storage only
Security preferences	App lock and authentication settings	Device secure storage only

3.1 Offline Backup

Offline backups are created entirely on your device. No data is sent to any server, cloud service, or third party.

Offline backups are stored in the app-specific storage directory:

    
Android 10+ (SDK 29+) :
  /Android/data/com.shaani.rokadflow/files/backups/

Android 9 and below (SDK 28-) :
  /storage/emulated/0/Download/RokadFlow/backups/

iOS :
  App Documents folder

Android 10+ app-specific backups may be deleted when the app is uninstalled
Android 9 and below backups stored in Downloads may remain after uninstall
No internet connection is required
No data is uploaded externally

3.2 Export Database

The app also provides an optional Export Database feature.

Export Database allows users to save a copy of their financial database to any folder they choose using the system file picker.

    
Examples:
  Downloads/
  Documents/
  SD Card/
  USB Storage/
  Custom user-selected folders
    
  

Exported files are stored only in locations selected by the user
Exported files are not uploaded to our servers
Exported database files usually remain available even after uninstalling the app
No automatic file access occurs without user interaction
The app uses Android Storage Access Framework for secure user-controlled file access

3.3 Restore Feature

Restore reads a .db backup file from your device only.

You can select any compatible .db backup file
No internet connection is required during restore
Before every restore, the app automatically creates a safety backup
No data is uploaded externally during restore

3.4 Backup File Management

The app keeps the last 10 manual backups and removes older ones automatically
Auto-backup creates a single overwritten file to reduce storage usage
You can view, restore, export, or delete backups from within the app
Offline app-specific backups on Android 10+ may be removed when the app is uninstalled
Exported database files saved to shared storage usually remain available after uninstall

3.5 What We Do NOT Do

We do NOT upload your financial data to our servers
We do NOT access your backups remotely
We do NOT share your financial data with third parties
We do NOT use your financial data for advertising or analytics
We do NOT sell your financial data
We do NOT request MANAGE_EXTERNAL_STORAGE permission

The app provides an optional cloud backup feature using Google Drive.

Users can sign in with their Google account to enable this feature
Backup files are stored in your personal Google Drive appDataFolder — a private folder only your app can access
We do not access or store your data on our own servers
Google Drive usage is governed by Google's Privacy Policy
You can revoke Google Drive access anytime from your Google Account settings

The app uses Google AdMob to display advertisements. AdMob may collect the following to serve relevant ads:

Device information (device model, OS version)
Advertising ID
IP address
Ad interaction data (clicks, impressions)

This data is collected and processed by Google, not by us. For more information, see Google's Privacy Policy.

You can opt out of personalized ads by adjusting your device's ad settings:

Android: Settings → Google → Ads → Opt out of Ads Personalization
iOS: Settings → Privacy → Tracking → Disable

The app allows users to manually select backup files using the system file picker (Storage Access Framework).

No files are accessed without explicit user action
File access is limited to user-selected files only
The app only reads compatible .db SQLite database files for restore purposes
The app can create export files only after the user selects a destination location
No hidden background file scanning occurs

Permission	Used For	Required On
`WRITE_EXTERNAL_STORAGE`	Save backup files to Downloads folder	Android 9 and below only
`READ_EXTERNAL_STORAGE`	Read backup database files for restore operations	Android 9 and below only
`USE_BIOMETRIC`	Enable optional biometric authentication for App Lock security	Supported Android devices
`USE_FINGERPRINT`	Enable fingerprint authentication on older Android devices	Older Android versions only
`INTERNET`	Google Drive backup synchronization and AdMob ads	All Android versions
`ACCESS_NETWORK_STATE`	Detect internet connectivity for cloud backup and ads	All Android versions

Storage Access & Backup Management

Rokad Flow allows users to create, export, restore, and manage SQLite database backup files directly on their device.

Users can manually choose backup export locations, including:


Downloads/
Documents/
SD Card/
USB Storage/
Custom user-selected folders

The app uses Android storage APIs and system file picker functionality to allow user-controlled backup management.

No hidden background file scanning occurs
No unrelated personal files are accessed
No financial data is uploaded to our servers
All backup operations are initiated manually by the user
Users remain fully in control of exported files

Android 10+ (SDK 29+)

On modern Android versions, the app primarily uses:

App-specific storage directories
Android Storage Access Framework (SAF)
User-selected file access

These methods provide secure and privacy-focused backup management compliant with Android storage policies.

Permissions we do NOT request:

READ_MEDIA_IMAGES
READ_MEDIA_VIDEO
READ_MEDIA_AUDIO
CAMERA
CONTACTS
LOCATION
MICROPHONE
SMS
CALL_LOG

We do not share your personal financial data with any third parties.

The only external data flows are:

Google Drive — only if you opt in to cloud backup, stored in your own private Google Drive folder
Google AdMob — anonymous ad serving data only (no financial data)

Your financial data is stored locally on your device or in your own Google Drive account.

Backup files are standard SQLite .db files
Your device's built-in security (screen lock, encryption) protects backup files
We recommend keeping backup files in a secure location
No account or login is required to use the app

Package	Purpose	Data Sent Externally
path_provider	Find device storage paths	None
permission_handler	Request storage permission	None
file_picker	Let user select backup file	None
device_info_plus	Detect Android SDK version	None
package_info_plus	Read app version for backup metadata	None
google_sign_in	Google Drive authentication	Google only (if opted in)
googleapis	Google Drive backup storage	Google only (if opted in)
google_mobile_ads	Display advertisements	Google AdMob
local_auth	Biometric authentication (Fingerprint / Face Unlock)	None
flutter_secure_storage	Securely store app security preferences and encryption keys	None

You have complete control over your data:

View all backup files from within the app
Delete any backup file at any time
Restore from any previous backup
Access backup files directly via your device's file manager
Copy backup files to another device manually
Delete all data by uninstalling the app
Revoke Google Drive access anytime from Google Account settings
No account required — no login, no sign-up, no email needed

Backup files remain on your device until you delete them
The app automatically keeps the last 10 manual backups and removes older ones
Uninstalling the app may remove app-specific offline backups on Android 10+
Exported database files saved to shared storage locations selected by the user usually remain available after uninstall
Users can manually delete backups at any time using the app or device file manager

Rokad Flow is not intended for children under the age of 13. We do not knowingly collect any personal information from children. If you believe a child has used the app, please contact us and we will take appropriate action.

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of the app after changes constitutes your acceptance of the updated policy.

Privacy Policy for Rokad Flow

1. Introduction

2. Data Collection

3. Backup & Restore Feature

3.1 Offline Backup

3.2 Export Database

3.3 Restore Feature

3.4 Backup File Management

3.5 What We Do NOT Do

4. Google Drive Backup (Optional)

5. Advertising

6. File Access

7. Permissions

8. Data Sharing

9. Data Security

9.1 Biometric Authentication (Optional)

10. Third-Party Packages Used

11. User Control

12. Data Retention

13. Children's Privacy

14. Changes to This Policy

15. Contact Us