Roomath
Privacy Policy
The short version
- The Roomath app reads your SMS only on your phone to track expenses. Your messages and financial data are never sent to us or to anyone else.
- There is no account and no login. We don't collect your name, email, phone number, contacts, location or photos.
- We have no servers that store user data, show no ads and never sell data.
- Uninstalling the app deletes everything it stored.
- This website uses privacy-friendly, cookie-free analytics, and collects your details only if you choose to contact us.
1. Who we are
Roomath (“Roomath”, “we”, “us”, “our”) is a personal budget planner and expense tracker for Android. Roomath is owned and operated by Srikant Nair, an individual based in Mumbai, Maharashtra, India.
For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian law, we are the “Data Fiduciary” only for the limited website data described in Section 7. We do not receive or process the data inside the app at all.
2. What this policy covers
This policy applies to:
- the Roomath Android app distributed through Google Play (the “App”); and
- the website at roomath.in (the “Website”).
By using the App or the Website you agree to this policy. If you do not agree, please do not use them.
3. The Roomath app: everything stays on your device
Roomath is built to work entirely on your phone and fully offline. It has no user accounts, no login and no servers of ours that receive your data.
To work, the App creates and stores the following information locally, in the App's private storage on your device:
| Information | Where it comes from | Why |
|---|---|---|
| Transaction details: amount, date and time, merchant or payee, debit/credit, payment method, bank or card name and the last few digits of an account or card shown in the SMS, and available balance if shown | Bank, card, UPI and wallet transaction SMS on your phone | To record your expenses and income automatically |
| Bill and payment reminders: biller, due amount and due date | Reminder SMS from banks, billers and service providers | To plan upcoming payments into your budget |
| Budgets, goals, categories, salary date, notes and settings | Entered by you | To calculate how much you can safely spend |
| Expenses you add or edit manually | Entered by you | To keep your records complete |
Home-screen widget. If you add the Roomath widget to your home screen, it shows your safe-to-spend amount there. The widget reads this from the App's storage on your device. Anyone who can see your home screen can see that number, so remove the widget if you'd rather keep it private.
This information never leaves your device through Roomath. We cannot see it, access it, recover it or share it, because we never receive it.
The App does not collect: your name, email address, phone number, contacts, call logs, precise or approximate location, photos, videos, files or other media, advertising ID, or analytics, tracking or crash data. The App contains no advertising and no third-party analytics or tracking SDKs.
4. SMS access in detail
Automatic expense tracking is Roomath's core feature, and it requires Android's read-SMS permission (READ_SMS). Roomath only reads messages already in your SMS inbox. It cannot send, edit or delete messages, and it does not intercept incoming messages. Here is exactly how it is used:
- Asked for clearly. Before Android asks you for SMS permission, Roomath explains what it will read and why. You can refuse, and you can still add expenses manually.
- When it reads. Roomath scans your inbox once when you set it up, and then checks it again for new messages to keep your transactions and upcoming payments up to date.
- Filtered on your device. Roomath scans messages on your phone to find financial ones. Personal conversations and one-time passwords (OTPs) are identified and ignored. They are not stored, analysed further or used for anything.
- Only financial messages are used. From bank, card, UPI, wallet and bill-reminder messages, Roomath extracts the transaction or reminder details listed in Section 3.
- Never uploaded. SMS content and the details extracted from it are processed and stored only on your device. They are never transmitted to us or to any third party.
- Never used for anything else. SMS data is used only to provide budgeting and expense-tracking features to you. It is not used for advertising, profiling, credit scoring or lending, and it is not sold.
- You're in control. You can turn off SMS access at any time in Android Settings → Apps → Roomath → Permissions → SMS. Automatic tracking will stop; data already stored stays on your device until you delete it.
5. App permissions
| Permission | Why we ask |
|---|---|
| SMS (read / receive) | To track expenses and bill reminders automatically, as described in Section 4. |
| Notifications | To show reminders and alerts generated on your phone, such as your daily transaction review reminder and spending or income alerts. Notifications are created locally; we do not send push messages from a server. You can turn them off at any time in Android Settings. |
| Run at startup | To reschedule your daily reminder after your phone restarts or the App is updated. It is not used to read SMS at startup. Android grants this automatically and doesn't show a prompt. |
Roomath does not request permission to send or receive SMS, or to access your call logs, phone state, photos, media, files, contacts, camera, microphone or location.
6. Purchases and subscriptions
Roomath may offer optional in-app purchases or subscriptions. These are processed entirely by Google Play. We never receive your card, UPI or bank details. Google Play tells the App whether a purchase is active so that premium features can be unlocked on your device. Google's handling of your payment information is governed by the Google Privacy Policy and the Google Play terms.
If you install the App from Google Play, Google may also collect information about your device and app installs under its own policies. That collection is by Google, not by Roomath.
7. This website (roomath.in)
Analytics
We use Cloudflare Web Analytics to understand how many people visit the Website and which pages they view. It is privacy-first: it does not use cookies, does not use local storage, does not fingerprint you and does not track you across websites. We see only aggregate statistics such as page views, referring websites, country and browser type.
Hosting and security
The Website is hosted and protected by Cloudflare, Inc. Like any web host, Cloudflare processes technical information such as your IP address, browser user agent and the pages requested in order to deliver the Website and protect it from abuse. See the Cloudflare Privacy Policy.
Contact form and email
If you contact us through the form on our Contact page or by email, we receive the name, email address and message you provide. We use them only to reply to you and to handle your request. Form submissions are delivered to our inbox through Web3Forms, a form-delivery service, and our email is provided by Google (Gmail). We do not add you to any mailing list unless you ask us to.
Cookies
The Website does not set advertising or tracking cookies. Cloudflare may set a strictly necessary security cookie to protect against bots and attacks.
8. Sharing and selling
We do not sell, rent or trade personal data. We do not share personal data with advertisers or data brokers.
App data is never shared, because we never receive it. Website contact details are shared only with the service providers named in Section 7, so they can deliver the Website and your messages, or where we are required to by law, such as a valid order from a court or government authority.
9. Data retention and deletion
- App data stays on your device until you delete it. To delete all of it, uninstall Roomath, or go to Android Settings → Apps → Roomath → Storage → Clear data. Because we hold no copy, there is nothing further to delete on our side. Roomath has no cloud backup of its own, and Android's automatic app backup is turned off for Roomath, so your data is never copied to Google Drive or another device. Deleted data cannot be recovered.
- Contact messages are kept only as long as needed to respond to you and for a reasonable period afterwards for our records, generally not more than 24 months, unless the law requires otherwise. You can ask us to delete them at any time.
- Analytics are aggregated and contain no personal identifiers.
10. Security
App data is stored in Roomath's private app storage, which Android's app sandbox keeps isolated from other apps. Because data never leaves your device through Roomath, there is no server for anyone to breach. Your data is still only as safe as your phone, so please use a screen lock and keep your device updated. The Website is served only over encrypted HTTPS.
11. Children
Roomath is intended for people who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data through the Website, please contact us and we will delete it.
12. Your rights
Under the DPDP Act and other applicable law, you have the right to:
- get a summary of the personal data we process about you and how we use it;
- have inaccurate or incomplete data corrected or updated;
- have your data erased;
- withdraw your consent at any time;
- nominate another person to exercise your rights if you die or become incapacitated; and
- have your grievances addressed.
For App data, you exercise these rights directly on your phone: view, edit or delete entries in the App, revoke permissions in Android Settings, or uninstall the App. For Website data, such as a message you sent us, email support@roomath.in. Withdrawing consent does not affect processing that happened before you withdrew it.
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.
13. Grievance Officer
In line with the DPDP Act and the Information Technology Act, 2000 and its rules, our Grievance Officer is:
Srikant Nair
Roomath, Mumbai, Maharashtra, India
Email: support@roomath.in
We will acknowledge your complaint within 7 days and aim to resolve it within 30 days, or sooner where the law requires.
14. Changes to this policy
We may update this policy as Roomath changes or the law requires. When we do, we'll update the “Last updated” date above. If a change materially affects how your data is handled, we'll highlight it on this page and, where appropriate, in the App before it takes effect.
15. Contact us
Questions about privacy? Email support@roomath.in or use our contact form.