Privacy Policy

AlloCat is a personal-finance app operated by Octane Innovations. Your financial data is yours. We collect the minimum needed to run the app, we never sell your data, and we never share it with third-party advertisers or data brokers. The raw content of your SMS messages never leaves your device.

AlloCat’s core feature is automatic spend tracking from your bank/UPI transaction SMS (“SMS-based money management”). To support this on Android, the app uses the RECEIVE_SMS permission. We handle this data as follows:

• On-device parsing. When a new SMS arrives, it is examined on your device. Only messages that look like a financial transaction (a debit/credit with an amount) are processed. One-time passwords (OTPs), personal messages, and promotional texts are filtered out and discarded immediately.
• The raw SMS never leaves your device. The full message text and the sender are stored only in local storage on your phone (for display and de-duplication). They are not uploaded to our servers.
• No third parties. SMS content is never sent to any third-party service, advertiser, or AI provider. All parsing is local.
• We do not read your SMS inbox. AlloCat only inspects messages as they arrive; it does not request the READ_SMS permission and never reads your existing stored messages.
• What syncs to your account. Only the fields extracted from a transaction SMS - the amount, currency, a normalized merchant name, the direction (spend/credit), and a date - together with a one-way hashed de-duplication key, are synced to your account so your budgets stay consistent across devices.

When you sign in, we store the data you create in the app - budgets, categories, goals, debts, assets, net-worth snapshots, and the extracted transaction fields described above. This is kept in our managed database (Supabase) and is associated with your account so it can sync across your devices. It is transmitted over encrypted connections.

We support email and Google sign-in. We store your email address and an account identifier to operate your account. We do not access your Google contacts, email, or other Google data beyond basic profile/email needed for sign-in.

Your data is used solely to provide the app’s features: tracking budgets and spending, syncing across your devices, and sending you notifications you have enabled (for example, a budget-limit alert). We do not use it for advertising or marketing, and we do not sell it.

Some AlloCat features use AI, including the in-app assistant, weekly insights, and certain alert messages. To generate these, we send the relevant derived financial context (such as budget totals, spending amounts, and category names) to our AI provider, OpenRouter, which processes the request and returns a response. We do not send the raw content of your SMS messages to any AI provider. This data is used only to produce the feature you asked for; it is not used for advertising or marketing, and we do not sell it.

AlloCat offers an optional paid subscription. Purchases are processed by Google Play Billing. We use Adapty to manage your subscription status and entitlements, which involves a device identifier. We do not receive or store your full payment card details; those are handled by Google Play.

With your permission, AlloCat sends local and push notifications - for example, when a new transaction needs categorizing or a budget nears its limit. You can disable these in your device settings at any time.

You can withdraw SMS or notification permission at any time in Android settings; the related features simply stop. You may permanently delete your account and all associated data in-app under Profile → Delete account, or by following the steps on our account-deletion page. Deleting the app also removes all locally stored data, including any raw SMS text.

AlloCat is not directed to children under 13.

We may update this policy; material changes will be reflected by the “Last updated” date above.

Questions about this policy or your data? Email innovationsoctane@gmail.com.