Legal

Privacy Policy

Effective date: May 7, 2026 · Last updated: June 30, 2026 · Applies to all Wild Duck Labs Android apps

🔒

Short version: Our apps collect no personal data and store everything exclusively on your device. The optional Google Drive backup feature sends your data only to your own Google Drive — not to us. We have nothing to sell and nothing to share.

Apps Covered by This Policy

This Privacy Policy applies to all Android applications published by Wild Duck Labs on Google Play:

💰

Money Manager — Offline Finance App

com.wildducklabs.moneymanager

Ages 3+

This policy will be updated as new apps are published. Each app's specific permissions and storage details are documented in the App-Specific Details section below.

Who We Are

Wild Duck Labs is an independent mobile app studio. We build premium, privacy-first applications for Android. We are the sole developer and publisher of the apps listed above.

Contact: support@wildducklabs.com

Data We Collect

We collect no personal data. None.

All information you enter into our apps is stored exclusively on your device. We have no servers, no user accounts, and no mechanism to receive or access your data.

Our apps do not collect, transmit, or share:

Your name, email address, or any contact information
Location data of any kind
Any content or data you enter into the app
Device identifiers, advertising IDs, or hardware fingerprints
Usage analytics, session logs, or crash reports
Biometric data (fingerprint or face recognition)
Photos, files, or media from your device

Your data may leave your device only when you explicitly choose to export or share it (e.g., a backup file or an exported report) — and only to the destination you select. We receive nothing.

On-Device Storage

Our apps store data locally using standard Android mechanisms. The specific types of storage each app uses are listed in the App-Specific Details section. In general, we may use:

SQLite database — for structured app data. Protected by Android's file-level encryption on supported devices.
Shared Preferences — for lightweight app settings such as theme, language, or preferences. Plain text, device-local.
Encrypted Secure Storage — for security-sensitive data such as a PIN, using Android's hardware-backed keystore (AES encryption).
App files and cache — for temporarily generated files (e.g., exports, backups) before you share them via the system share sheet.

None of this data is transmitted to us or any third party.

Android Permissions

Each app requests only the permissions necessary for its features. No permission is used to collect or transmit data. The specific permissions each app requests are listed in the App-Specific Details section.

We never request permissions unrelated to core app functionality. If a permission is optional (e.g., biometric unlock, notifications), the app works fully without granting it.

Internet & Network Access

Our apps are built to be fully offline by default. There are no servers, no analytics endpoints, and no third-party SDKs that phone home.

Money Manager uses the INTERNET permission exclusively for the optional Google Drive Backup feature. Network access only occurs when you explicitly connect your Google account and initiate or schedule a backup or restore. If you never connect Google Drive, no network traffic is generated.

Google Drive Backup & Google User Data

Money Manager offers an optional Google Drive backup feature. This section describes in full how we access, use, store, and handle Google user data in accordance with the Google API Services User Data Policy.

What Google data we access

When you connect Google Drive, we request access to two pieces of information:

Your Google account email address — displayed in the app so you can confirm which account is connected. It is never stored in our database, never transmitted to our servers (we have none), and never used for any purpose beyond display.
Files in your Drive appDataFolder — a private, hidden storage area in Google Drive that is accessible only by this app. Files stored there are not visible in your regular Google Drive and cannot be accessed by other apps or by us. We access this folder only to upload backup files you create and to download them when you choose to restore.

How we use Google user data

Backup uploads — when you tap "Backup Now" or an automatic backup runs, a single encrypted database snapshot (.mmdb file) is uploaded to your Drive appDataFolder. The previous backup file is deleted after a successful upload to avoid accumulation.
Backup restore — when you tap "Restore from Drive", we download your most recent backup file from your Drive appDataFolder to your device's temporary storage, restore the database, then delete the temporary copy.
Backup metadata — we read the file name, size, and modification time of your latest backup file in order to display "Last Drive backup" information in the app. No file contents are read for display purposes.

How we store Google user data

On Google Drive — your backup file is stored in your own Drive appDataFolder. It is governed by Google's Privacy Policy and is under your control through your Google account.
On your device — we store only the timestamp of the last successful upload locally (in SharedPreferences) so the app can display "Last backed up" without making a network call on every launch. No Google account credentials, tokens, or personal data are stored by us.
We store nothing on our servers — we operate no servers and receive no copy of your data or credentials.

How we share Google user data

We do not share Google user data with anyone. Your backup file travels only between your device and your own Google Drive. Your email address is displayed locally and never transmitted beyond your device.

Scope used

We request the https://www.googleapis.com/auth/drive.appdata scope only. This is the minimum scope needed for the backup feature. It grants access solely to the appDataFolder — not to any files in your main Google Drive.

User control

Connecting Google Drive is entirely optional — the app is fully functional without it.
You can disconnect Google Drive at any time in Settings → Backup → Disconnect.
Disconnecting removes our app's access token. Any backup files in your appDataFolder can be deleted by you directly via Google Account → Third-party apps with account access → Money Manager → Remove Access.

Third-Party Services & SDKs

Our apps use no analytics, advertising, or tracking SDKs — no AdMob, Facebook SDK, Crashlytics, Amplitude, Segment, Sentry, or similar services.

Our apps are built with the Flutter framework (open-source, Google), which handles UI rendering. Flutter does not collect personal data on our behalf and makes no network calls in our configuration.

Money Manager uses the following Google SDKs for the optional Drive backup feature:

Google Sign-In — handles OAuth 2.0 authentication so you can authorize the app to access your Drive appDataFolder. Your credentials are managed entirely by Google and are never seen by us.
Google APIs (Drive v3) — used exclusively to upload, list, download, and delete backup files in your Drive appDataFolder. See the Google Drive Backup section above for full details.

All other libraries we use are open-source packages that operate entirely on-device without external communication.

Children's Privacy (COPPA)

All Wild Duck Labs apps are rated Ages 3+ on Google Play. Because we collect absolutely no personal data from any user, regardless of age, our apps are inherently compliant with the Children's Online Privacy Protection Act (COPPA) and Google Play's Families Policy.

We do not knowingly collect, use, or disclose personal information from children under 13. Since we collect no personal information at all, there is nothing to access, correct, or delete on anyone's behalf.

Parents or guardians with questions are welcome to contact us at support@wildducklabs.com.

Data Sharing & Sale

We do not sell, rent, trade, or share any data with any third party. We have no data to share — it all lives on your device.

Data Retention & Deletion

All app data resides on your device (or your own Google Drive if you use that optional feature). You have complete control over it:

Delete data within the app at any time using in-app delete options.
Clear all app data via Android Settings → Apps → [App Name] → Storage → Clear Data.
Delete any backup or export files from your device storage.
Disconnect Google Drive in Settings → Backup → Disconnect to revoke the app's Drive access.
Delete Drive backup files by revoking app access at myaccount.google.com/permissions.
Uninstalling the app removes all associated data from your device.

We hold no copy of your data on any server. Your device (and optionally your own Google Drive account) are the only places your data exists.

Security

We design our apps with security as a core principle:

Database encryption — Android's file-level encryption protects app databases on supported devices (Android 6.0+).
Encrypted secure storage — sensitive values such as PINs are stored in Android's hardware-backed keystore (AES encryption).
Zero network surface — apps without the INTERNET permission have no network attack surface by design.
Export and backup files — files you generate may contain personal data. Treat them as sensitive and store them securely.

Your Rights

Because all data lives exclusively on your device, you exercise your data rights directly — no requests to us are required or possible:

Access — all your data is visible within the app at all times.
Portability — export or back up your data using in-app export features.
Rectification — edit any record directly in the app.
Erasure — delete individual records in-app, or clear all data via Android system settings.

Residents of the EU (GDPR), California (CCPA/CPRA), and other jurisdictions with data protection laws: since we process no personal data on our systems, no formal data subject request to us is necessary to exercise your rights.

Changes to This Policy

We may update this policy when we publish new apps, add features that affect storage behavior, or clarify existing practices. Changes will be reflected here with an updated effective date at the top of this page.

We will never introduce data collection or network transmission without updating this policy and notifying users through the relevant app's Play Store listing. Our commitment to zero data collection is a foundational design principle.

App-Specific Details

This section documents the specific permissions, storage mechanisms, and features for each app covered by this policy.

💰 Money Manager — Offline Finance App com.wildducklabs.moneymanager

A privacy-first personal finance app for Android. Track income and expenses, manage multiple wallets, set budgets, monitor debts, and generate reports — all data stays on your device by default. An optional Google Drive backup feature is available (see Google Drive Backup).

Permissions

INTERNET — used exclusively for the optional Google Drive backup feature. No network traffic occurs unless you connect Google Drive and trigger a backup or restore. Not used for analytics, ads, or any server communication.
USE_BIOMETRIC / USE_FINGERPRINT — optional biometric unlock (fingerprint or face). Processed entirely by Android's system APIs; we never access or store biometric data.
POST_NOTIFICATIONS — optional local reminders for recurring transactions, budget alerts (at 80% threshold), and debt due dates. All notifications are on-device with no network calls.
SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM — delivers notifications at precise times (e.g., 9 AM on a scheduled date).
RECEIVE_BOOT_COMPLETED — re-schedules pending notifications after a device restart.

This app does not request CAMERA, ACCESS_FINE_LOCATION, or READ_CONTACTS.

On-Device Storage

SQLite database — transactions, wallets, accounts, categories, budgets, debts, recurring rules, events.
Shared Preferences — display name, preferred currency, theme, period preference (monthly/weekly), notification toggles, last Drive backup timestamp.
Encrypted Secure Storage — optional PIN (AES, hardware-backed keystore). Auto-locks when app is backgrounded.
Receipt attachments — only the file path is stored in the database; the image stays in your device storage and is never transmitted.
Manual backup (.mmdb) — written to a temp directory and shared via Android share sheet. You choose the destination.
Auto-backup — saved to external storage under money-manager-backups/ (falls back to app documents directory). Stays on device.
Google Drive backup — optional. One .mmdb snapshot uploaded to your Drive appDataFolder (private). See Google Drive Backup section for full details.
Exported reports — CSV, Excel, and PDF files generated on-demand, shared via share sheet, then deleted from the temp directory.

Technical Info

Platform: Android 5.0+ (API 21+)
Framework: Flutter 3.24+ / Dart 3.5+
Database: SQLite via Drift
Version: 1.1.0 (build 6)

Contact Us

Questions about this policy or our privacy practices?

Wild Duck Labs
support@wildducklabs.com
wildducklabs.com