UPI Tracker

UPI Tracker helps shopkeepers and individuals automatically record UPI payment transactions from payment app notifications and, optionally, bank SMS messages. The App provides sound alerts, reports, ledger management, PDF export, and optional cloud backup. We designed the App to process only transaction-related information needed for these features.

2.1 Account information

• Email address – used for login via one-time password (OTP) verification.
• Display name – optional profile name you provide in the App.
• UPI ID / QR details – UPI payment address you configure for receiving payments.

2.2 Transaction data

When the App detects a UPI-related notification or SMS, it may extract and store:

• Transaction amount and type (credit or debit)
• Counterparty / party name
• Date and time of transaction
• UPI app source (e.g., PhonePe, Google Pay, Paytm)
• Transaction reference ID, when available
• Extracted UPI ID from message content
• Notes you add manually
• Raw SMS text (only when the transaction is parsed from SMS)

2.3 Device and app data

• App settings (language, sound preferences, sync preferences)
• Local device identifiers used for cloud sync (derived from your account email)
• Basic diagnostic logs for sync troubleshooting (stored in your cloud sync area when enabled)
• Platform information (e.g., Android) for error logging

2.4 Information we do not collect

• We do not read or store unrelated SMS messages (non-transaction SMS are ignored).
• We do not access your contacts, call logs, photos, or precise location.
• We do not collect bank account numbers, PINs, passwords, or OTP codes from messages.
• We do not record or store full notification content beyond what is needed to parse UPI transactions.

Android permissions are requested only to provide App functionality. You can deny optional permissions; core notification-based tracking still works when notification access is granted.

• Authenticate your account via email OTP
• Detect, record, and display UPI transactions
• Generate daily reports, charts, and ledger summaries
• Play sound and voice alerts for incoming payments
• Sync and backup your data across devices (when cloud sync is enabled)
• Export PDF reports you request
• Improve App reliability and fix errors

5.1 On your device

Transaction records, settings, and profile data are stored locally in an on-device database (SQLite). Biometric lock settings are handled by your device's secure hardware; we do not store your fingerprint or face data.

5.2 Cloud storage (optional)

If you sign in and enable sync, your profile, UPI settings, and transaction data are stored in Google Firebase Realtime Database, hosted by Google LLC. Data is associated with an identifier derived from your account email and is used only to sync your App data.

We use the following third-party services to operate the App:

• Google Firebase (Authentication, Realtime Database) – Firebase Privacy
• Google Play Services – required for Android app distribution and updates.

These providers process data according to their own privacy policies. We share only the minimum data required for App functionality.

We do not sell, rent, or trade your personal information. We may share data only:

• With Firebase/Google to provide cloud sync and authentication infrastructure
• When you explicitly use share/export features (e.g., sharing a PDF report)
• When required by law, court order, or to protect our legal rights

• Local data remains on your device until you delete it or uninstall the App.
• Cloud data remains until you delete your account data from the App settings or contact us to request deletion.
• Diagnostic logs in cloud sync are retained only as long as needed for troubleshooting.

You can:

• Deny optional SMS permission and still use notification-based tracking
• Turn cloud auto-sync on or off in App settings
• Delete individual transactions or clear cloud data from settings
• Export your data as PDF
• Revoke notification access or other permissions in Android system settings at any time
• Request access, correction, or deletion of your data by contacting us

If you are in India, you may have rights under applicable data protection laws, including the Digital Personal Data Protection Act, 2023, to access, correct, and erase your personal data.

We use industry-standard measures including encrypted connections (HTTPS/TLS) for cloud communication, secure local storage, and optional biometric app lock. No method of transmission or storage is 100% secure; we work to protect your data but cannot guarantee absolute security.

UPI Tracker is intended for business and personal finance use by adults. The App is not directed to children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us and we will delete it.

Firebase servers may be located outside India. By using cloud sync, you consent to the transfer and processing of your data in countries where Google operates data centers, subject to appropriate safeguards.

We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top of this page. Continued use of the App after changes means you accept the updated policy. For significant changes, we may also notify you inside the App.