Privacy Policy
Last updated: 26 September 2026
- With your permission, the app reads the SMS that banks and payment apps send you, to list your transactions and autopay mandates and to announce them aloud.
- Your messages, amounts, account numbers and balances are read and stored only on your phone. They are never uploaded to us or to anyone else.
- We collect anonymous usage and crash data through Firebase, Mixpanel and the Meta SDK, and Google Play handles your subscription.
- There is no login. We do not sell your data, and uninstalling the app deletes everything it stored on your phone.
1. Who we are
Autopay Tracker (the “App”, package com.auspo.autopaymanager) is published by Auspo Apps (“we”, “us”, “our”). This policy explains what information the App uses, why, and the choices you have. It applies to the App on Android. How the auspoapps.com website itself handles visits is described in our website privacy policy.
For the purposes of the Digital Personal Data Protection Act, 2023 (India), we are the Data Fiduciary for the personal data described here.
2. SMS permission
The App asks for two Android permissions, Receive SMS and Read SMS, for one purpose: detecting bank transactions and UPI / NACH autopay mandates from the messages banks and payment apps send you.
- Receive SMS lets the App process a bank message the moment it arrives, so the transaction appears in your passbook and, if voice alerts are on, is announced aloud.
- Read SMS lets the App read your existing inbox once after you grant permission (and again when you tap Refresh) to build your autopay list and transaction history from past bank messages.
Only messages that match bank and payment-app patterns (transaction alerts, mandate registrations, debit reminders) are used. Personal conversations and other SMS are ignored and never stored. All reading, parsing and storage happen on your device. No SMS content, amount, account number, sender or balance is transmitted off your phone.
The App explains this before asking for the permission. You can revoke it at any time in Android Settings → Apps → Autopay Tracker → Permissions; the App then stops reading messages and keeps working with what it already stored.
3. Information stored on your phone
The App keeps a local database of the transactions, bank accounts (bank name and last digits only, as they appear in the SMS), autopay mandates and upcoming payments it detected, plus your settings (language, notification sound, alert switches). This data is stored in the App's private storage, is not backed up to the cloud by us, and is deleted when you uninstall the App.
4. Information we collect
We use Google Analytics for Firebase, Firebase Crashlytics, Firebase Performance Monitoring and Mixpanel to collect anonymous data about how the App is used and whether it is working:
| What | Examples | Why |
|---|---|---|
| App interactions | Screens opened, language and notification sound chosen, whether a voice alert was spoken or failed and why, the bank name and transaction type of an alert | Understand which features are used and fix alerts that fail |
| Crash and performance data | Stack traces, device model, Android version, App version | Find and fix crashes and slow screens |
| Identifiers | An anonymous Firebase user ID created for your installation, the Firebase installation ID and the Android advertising ID | Count users and installs without knowing who you are |
| Subscription status | Whether Autopay Tracker Pro is active | Unlock premium features |
| Rating and feedback (optional) | The stars and text you enter in the “Rate the app” dialog | Improve the App |
Analytics events do not include SMS text, transaction amounts, account numbers, merchant names or balances. The data is not used to build a profile of you and is not sold.
The App includes the Meta (Facebook) SDK, which may report app installs and app-open events together with the advertising ID to Meta so that we can measure advertising campaigns. You can reset or delete your advertising ID in Android Settings → Privacy → Ads.
4.1 Anonymous account
The App signs in to Firebase anonymously when it starts. This creates a random user ID that is not linked to your name, phone number, email or Google account. It is used only to tell installations apart in analytics and to store the optional rating you submit. There is no registration and we do not ask for any personal details.
4.2 What we do not collect
We do not collect your SMS, transactions, balances, account or card numbers, UPI PIN, net-banking credentials, contacts, location, photos or files, and the App never connects to your bank or UPI account.
5. How we use information
| Purpose | Information used | Where it is processed |
|---|---|---|
| Show your passbook, autopays and upcoming debits; announce them aloud | Bank SMS | Your phone only |
| Keep your settings | Language, sound, alert switches | Your phone only |
| Provide the subscription | Subscription status from Google Play | Google Play, your phone |
| Understand usage and improve the App | App interactions, identifiers | Firebase, Mixpanel |
| Fix crashes and keep the App reliable | Crash and performance data | Firebase |
| Measure which ads led to installs | Advertising ID, install events | Meta |
We process personal data on the basis of your consent — given when you install the App, grant the SMS permission after the in-app explanation, and continue using it — and for the legitimate uses permitted by law. You can withdraw consent at any time (see section 9).
6. Service providers and sharing
We do not sell or rent your personal data. We share it only with service providers who process it for us:
| Provider | What it does | Privacy policy |
|---|---|---|
| Google Firebase (Authentication, Analytics, Crashlytics, Performance Monitoring, Cloud Firestore) | Anonymous sign-in, analytics, crash reports, storage of the optional rating | firebase.google.com/support/privacy |
| Google Play Billing | Subscription purchase and management | policies.google.com/privacy |
| Mixpanel | Product analytics | mixpanel.com/legal/privacy-policy |
| Meta Platforms (Facebook SDK) | App events and install attribution | facebook.com/privacy/policy |
We may also disclose information if required by law, to respond to lawful requests from authorities, or to protect our rights, users or the public. Some providers may process data outside India; where they do, it is protected by their contractual and security commitments.
7. Android permissions
| Permission | Why |
|---|---|
| Receive SMS | To process each new bank message as it arrives (section 2) |
| Read SMS | To read existing bank messages once and build your history (section 2) |
| Notifications | To show the alert that goes with a spoken announcement |
| Vibrate | To vibrate instead of speaking when your phone is on silent |
| Internet and network state | Analytics, crash reports and checking the subscription with Google Play |
| Advertising ID | Install attribution (section 4) |
The App uses no foreground service, does not run at startup and does not ask to be excluded from battery optimisation.
8. How long we keep data
- Everything derived from your SMS lives only on your phone and is deleted when you uninstall the App or clear its storage.
- Analytics and crash data are retained by the providers in section 6 for their standard periods (Firebase Analytics up to 14 months; Crashlytics 90 days), or until you ask us to delete the data tied to your anonymous ID.
9. Your rights and choices
Subject to applicable law, you can:
- ask for a summary of the personal data we hold about you;
- ask us to correct or delete it — see Delete your data;
- withdraw consent, by revoking the SMS permission, uninstalling the App or writing to us;
- nominate another person to exercise these rights on your behalf;
- raise a grievance with our Grievance Officer (section 12) and, if unresolved, with the Data Protection Board of India.
You can reset the Android advertising ID or opt out of ads personalisation in Android Settings → Google → Ads.
10. Security
Your SMS-derived data never leaves the device and is kept in the App's private storage, which other apps cannot read. Data sent to analytics services travels over HTTPS/TLS. Keep your phone's screen lock on: anyone with your unlocked phone can see what the App shows.
11. Children
The App is intended for adults who hold a bank account and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has used the App, contact us and we will delete their data.
12. Contact and Grievance Officer
Questions, requests or complaints about privacy:
- Email: auspoapps@gmail.com, or Settings → Send Feedback in the App
- Grievance Officer: Auspo Apps, at the email address above
We aim to acknowledge requests within 72 hours and resolve them within 30 days.
13. Changes to this policy
We may update this policy as the App changes. We will post the new version here with a new “Last updated” date and, for significant changes, tell you in the App.
← Back to Autopay Tracker