Acube Labs ("we," "us," or "our") operates the Expense Analyzer mobile application (the "App"). This App is built with a Privacy-First, Local-Only Architecture. We believe your financial data is one of your most sensitive assets; therefore, our architecture ensures we never have access to it.
1. Data Storage & Physical Multi-User Isolation
The App is designed so that your personal and financial information remains on your device. Unlike traditional apps that store data in a shared cloud, we use a "Local-First" approach.
- No Developer Servers: Acube Labs does not operate, own, or lease any servers that store your financial transactions, account balances, or chat history.
- Physical Multi-Tenant Isolation: To support shared devices (tablets/phones), the App implements strict physical data isolation. When you sign in, the App creates or opens a unique SQLite database file (`expense_analyzer_user.db`) specifically for that email.
- Total Separation: Your data is physically separated on the disk from any other user who logs into the App on the same device. Data from "User A" is technically inaccessible to the App when "User B" is logged in.
- Local Processing: All data parsing (PDF/Excel) and classification occur locally on your hardware.
2. AI Usage & Processing Choices
The App provides an intelligent assistant (Finora AI) and automated categorization. We provide complete transparency on how your data is processed:
- On-Device AI (Default & Private): By default, the App uses local machine learning models (MediaPipe/On-Device LLMs). In this mode, 100% of the AI processing happens on your device. No text, descriptions, or amounts are sent over the internet.
- Google Gemini AI (Opt-In): If you choose to enable Gemini AI for enhanced accuracy or complex queries, specific data (such as transaction strings or chat messages) is sent directly to Google Gemini APIs.
- User-Owned API Access: We implement a "Bring Your Own Key" (BYOK) model for Gemini AI. Because the app connects directly to Google using your credentials, your financial data and chat history are technically invisible to Acube Labs.
- Ephemeral Processing: This data is sent solely for real-time processing and is not stored or logged by Acube Labs.
- User Control: You can disable cloud-based AI at any time in the "AI Agent" settings.
3. Third-Party Services
- Secure Cloud Backups (Google Drive): If you enable backups, your local database is encrypted and uploaded directly to a hidden, private folder in your own Google Drive. Acube Labs has no technical means to decrypt or view these files.
- Authentication: We use Google Sign-In solely to identify which private local database file to open. We do not use your profile for marketing or tracking.
4. Data Retention & Deletion
- User-Initiated Deletion: You have the "Right to be Forgotten." You can use the "Clear All Data" feature in Settings to instantly wipe all local databases, preferences, and files associated with your profile.
- App Uninstallation: Deleting the App from your device permanently removes all locally stored data. We recommend performing a final backup to your Google Drive if you wish to retain your records.
- Cloud Backup Deletion: To delete your cloud backups, use the "Clear Cloud Backup" option within Settings or manage app data via Google Drive settings.
5. Contact Information
For questions or privacy inquiries regarding this policy, contact us directly at:
acubelabs.dev@gmail.com
