Privacy Policy
RecurTrack · Last updated 23 August 2026
RecurTrack keeps your payment records on your phone. We never see what you track, who you split with, or how much you pay, and we never hold, receive, or move your money. The one exception is cloud backup, a Plus feature that is off by default — see “Cloud backup” below.
Who we are
RecurTrack ("we", "the app") is operated by Mayank Pal, India. For any privacy question or request, contact support@mayankpal.co.in. We act as the Data Fiduciary for the limited personal data described below under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
What stays on your device, and never reaches us
All of the following is written to a database on your phone. It is not uploaded, backed up to us, or readable by us:
- The subscriptions, bills and recurring payments you add — names, amounts, due dates, billing cycles and notes
- The people you split payments with, including any name, phone number or UPI ID you save for them
- Your own UPI ID (VPA), used only to build payment links on your device
- Your split history and who has settled up
- Your reminder settings and message wordings
If you delete the app, this data is deleted with it. You can export all of it at any time from Settings → Export my data.
What we do collect
| Data | Why | When |
|---|---|---|
| Email address | To create your account, sign you in, and let you reset your password and recover your data on a new phone. | Only if you choose to create an account with an email. |
| An anonymous account identifier | To tell one account from another and to attach a Plus subscription to the right person. | Always, including when you continue without an account. |
| Purchase status | To know whether your RecurTrack Plus subscription is active. | Only if you subscribe to Plus. |
We do not collect your name, location, contacts, advertising identifiers, device fingerprints or usage analytics. We do not track you across other apps or websites, and we do not run advertising.
If you continue without an account
Choosing "Continue without an account" creates an anonymous identifier with no email attached. We hold no information that identifies you personally. If you later add an email, that same account gains an email address and everything you already have is kept.
Your contacts
If you tap "Pick from contacts" when adding someone to a split, iOS shows you its own contact picker and returns only the single contact you choose. We copy that person's name and number into your device's local database so you do not have to type them.
Your contact list is never read in bulk, never uploaded, and never leaves your phone. You can decline the permission and add people manually instead.
Who processes data on our behalf
| Processor | What they handle | Where |
|---|---|---|
| Google (Firebase Authentication) | Your email address, password (stored only as a cryptographic hash — we never see it), and account identifier. | Google infrastructure, including servers outside India. |
| Apple | All payment details for a RecurTrack Plus subscription. Apple bills you directly; we never see your card. | Per Apple's privacy policy. |
| RevenueCat | Your account identifier and whether your subscription is active. No payment details. | Servers outside India. |
Transfers outside India
Because Firebase and RevenueCat operate globally, your email address and account identifier may be stored and processed on servers outside India. We disclose this under the DPDP Act. Unless you turn on cloud backup (below), your payment records never leave your device.
Money, and what we are not
RecurTrack never holds, receives, pools or transfers your money. When you ask someone for
their share, the app builds a standard upi:// link and hands it to your UPI
app. The payment happens directly between you and them through the UPI network. We are not
a payment aggregator, payment gateway or money transmitter, we take no cut of any payment,
and we have no visibility into whether a payment succeeded.
Cloud backup (Plus, opt-in)
RecurTrack Plus includes an optional cloud backup so you can restore your payments on a new phone. It is off by default. Nothing is uploaded unless you turn it on and tap “Back up now”.
When you do, a copy of your payments, people, splits and settlement history is stored in Google Firebase (Firestore), in the Mumbai (India) region, encrypted in transit. It is readable only by your own account — our security rules make one user's backup unreadable to anyone else. Deleting your account removes it. We never see the contents as usable data, and this backup is never used for anything but restoring your own device.
If you never enable backup, this section does not apply to you and your data stays on your phone as described above.
Household sharing (Plus, opt-in)
If you start or join a household, the payments you choose to share are stored in the same Firebase region and become readable by the other people in that household. Only they can read it — our rules restrict a household to its own members — but this is the one feature where your payment records are visible to another person, by design.
You control it: nothing is shared until you tap “Share my changes”, and leaving a household stops it. Anyone holding your invite code can join, so treat it like a password and only send it to people you intend to share with.
How long we keep things
Your account record is kept until you delete it. Deleting your account from Settings → Delete my account removes your account and email from Firebase and erases all local data on the device immediately. Deletion is permanent and we cannot recover it. Subscription records held by Apple are governed by Apple's own retention rules.
Your rights
Under the DPDP Act you may:
- Access and export your data — built into the app under Settings → Export my data
- Correct your information — edit anything directly in the app
- Erase your data — Settings → Delete my account, which is immediate and complete
- Withdraw consent — delete your account, or simply uninstall the app
- Nominate another person to exercise your rights in the event of death or incapacity — write to us
- Complain to the Data Protection Board of India if we have not resolved your grievance
Grievance officer
Mayank Pal — support@mayankpal.co.in. We aim to respond to any privacy request within 30 days.
Children
RecurTrack is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has created an account, write to us and we will delete it.
Security
Your payment records sit inside your app's private storage, protected by your device's own encryption and passcode. Passwords are handled entirely by Firebase Authentication and are never visible to us. No system is perfectly secure, but because we hold so little, there is very little to lose.
Changes
If this policy changes materially we will update the date at the top and, where the change affects how your data is used, tell you in the app before it takes effect.