Privacy Policy for Android

View iOS Version →

Privacy Policy for Android

Effective Date: October 20, 2025 | Last Updated: October 4, 2026 | Version 2.1

Introduction

Welcome to EZer ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal financial data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the EZer mobile application on Android devices.

In short:

  • Your financial data is stored in an encrypted database on your device.
  • It leaves your device only when you turn on a cloud feature: AI statement parsing, cloud backup or Household sharing. Each is optional and explained below.
  • Even if you use no cloud feature, the app uses an anonymous account ID, an app-integrity check and crash reports (see section 1.2 and "Crash Reporting").
  • We do not sell your data and we do not show ads.

By using EZer on Android, you agree to this Privacy Policy and consent to the data practices described herein.

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

Financial Data You Enter (stored on your device):

Important: We NEVER ask for:

  • Bank account passwords or login credentials
  • Full credit/debit card numbers
  • CVV/PIN codes
  • Social Security Numbers
  • Government ID numbers

If a statement you send for AI parsing shows your name, your bank's name or the last digits of an account, those details can appear in the parsed result that we store (see AI Statement Parsing).

1.2 Information Collected Automatically

Anonymous account ID (all users):

When the app first starts, it creates an anonymous account with Firebase Authentication. This account has a random identifier and no name or email. The app uses it to authenticate its requests to our servers (Google Cloud Functions), for example to check your EZer Plus subscription, to record your privacy choices, to look up currency rates and, if you use them, for AI statement parsing, cloud backup and Household sharing.

App integrity check (all users):

To protect our servers from abuse, the app uses Firebase App Check with Google Play Integrity. Google checks that the request comes from a genuine copy of EZer on a genuine device, and the resulting token is sent with the app's requests to our servers.

Subscription status checks (all users):

While you use the app, it asks our servers for your current EZer Plus status (about once an hour, sooner after a failed attempt). The request carries your account ID and the app-integrity token. Purchases themselves are handled by Google Play; see section 3.4 for the purchase records we keep.

Privacy choice records (all users):

When you give or withdraw a consent in the app (for example crash reporting, analytics or AI statement parsing), a record is sent to our servers: the consent type, whether it was given, the time, the policy version, the app version, the platform and your account ID. We keep these records as proof of your choices (see section 3.4).

Device Information:

Usage Data (only if you opt in):

Currency rate lookups (all users):

When you have accounts or transactions in more than one currency, the app asks our server for an exchange rate. The request contains only the two currency codes and a date, together with the anonymous account ID and app-integrity token that every request to our servers carries. No amounts or transaction details are sent. Our server obtains rates from the European Central Bank and keeps them in a cache organised by date and currency pair that is not linked to you. This lookup is free and needs no separate consent.

1.3 Information from Imported Files

Bank Statement Imports:

In this version the only way to import a bank statement is AI statement parsing (EZer Plus, optional), which sends the statement off your device as described in AI Statement Parsing. The transactions it returns are stored in your encrypted database on your device.

Receipt Images:

When you scan receipts using your camera, text is read on your device with Google ML Kit. The following is stored on your device:

Receipt scan feedback (optional): if you choose to share a scan that did not read correctly, we receive the receipt image with its top and bottom blurred, the scanned text with card numbers, names and phone numbers removed, the corrections you made, your region, the app version and the app installation ID. We use it only to improve receipt scanning. The app asks before the first time this is sent.

AI Statement Parsing (EZer Plus, Optional)

AI statement parsing reads a bank or credit card statement that you choose (PDF, image or CSV) and turns it into transactions. It is off until you give consent in the app, and you can withdraw consent at any time in Settings → Privacy Dashboard. All other features keep working without it.

What is sent, and to whom:

What we keep on our servers:

Turning the cache off: in Settings → Security Settings, switch on "Don't cache my statements on our servers". While it is on, the parsed result is not stored in the parse cache or with the parse job (only the job's status is kept); the parse history record is still kept, and every parse is charged.

Reporting a parsing problem (optional, separate consent): if you report a problem with a parsed statement, we receive the parsed transactions (not the statement file), your description, the country and currency codes, the model, the page count, error details, the app version and the app installation ID. We use it only to improve parsing. These reports are deleted with Delete All Data.

Household Sharing (EZer Plus, Optional, Android)

Household sharing lets up to 6 people (an owner, adults and read-only viewers) see each other's transactions, budgets, goals and bills, split bills and settle up. It is optional. Every member needs EZer Plus and must sign in with Google or Microsoft. You join only through an invite link or code that a member sends you; we do not collect invitees' email addresses or phone numbers.

What is shared: once you join, everything you record is shared with the household by default: transactions (income and expenses), budgets, goals and bills, plus the bill splits, settle-ups and reimbursements you take part in. The invite screen tells you this before you join. In Settings > Household you can exclude categories, hide accounts, and stop sharing a single transaction, budget or goal.

Who sees it: only the other members of your household. We do not sell it, use it for advertising, or show it to anyone else.

Encrypted on your phone: the amounts, descriptions, merchants, notes, categories, accounts and other details of shared items are encrypted on your phone (AES-256-GCM) before upload, with a household key that is exchanged between members' phones (X25519) and never stored on our servers in readable form. We cannot read these details.

Stored without that encryption, because our server needs it to run the household: the household name; each member's name, role and account ID; the date, type (income or expense) and status of each shared item and who created it; for splits, settle-ups and reimbursements, the kind, dates, the two members involved and whether it is settled (not the amount); the IDs of the categories and accounts you excluded; your display currency; and your push notification token with your device platform and app language.

Where: Google Cloud Firestore in India (Mumbai, asia-south1); household server functions run in the same region.

Notifications: household notifications are sent by our server through Firebase Cloud Messaging. They contain no names, descriptions or amounts; a shared-budget alert shows the percentage of the budget used.

Leaving, removal and deletion:

Exports on your phone: exports include the items other members shared with you, marked as theirs: the Privacy Dashboard data export and Reports CSV files have a "From Another Household Member" column, and Reports Excel and PDF files show "Shared by household" on those rows.

Household sharing is not available in the iOS app in this version.

Crash Reporting (Legitimate Interest)

We collect crash reports and non-fatal error logs through Firebase Crashlytics under our legitimate interest in keeping the app stable (GDPR Article 6(1)(f); equivalent legal bases under DPDPA and similar frameworks). These reports help us identify and fix bugs quickly. Reports include:

We do not add your transactions, balances or names to crash reports. Crash reporting is on by default but you can turn it off at any time in Settings → Privacy Dashboard → Crash Reporting.

2. How We Use Your Information

2.1 Primary Purposes

To Provide Finance Management Services:

To Provide Optional Cloud Features (only when you turn them on):

To Operate and Protect the Service:

To Improve Your Experience:

2.2 Categorization and AI

On your device:

What We Do:

  • Categorization and insights are computed on your device.
  • We do not send your transactions off your device for categorization.
  • The only AI processing outside your device is AI statement parsing, which you turn on yourself (see AI Statement Parsing).

2.3 Communications

Service Communications (created on your device, except Household notifications, which our server sends without names or amounts):

Marketing Communications (Opt-in Only):

You can control notification preferences in Settings.

3. How We Store Your Information

3.1 Local Storage (Android Device)

Encrypted Database:

Secure Preferences:

3.2 Cloud Backup (EZer Plus, Optional)

Cloud backup (Google Drive / OneDrive) is part of EZer Plus where available. It requires you to sign in. Backups are encrypted on your device with AES-256 before they are uploaded to the app folder of your own cloud storage account. Our servers never receive the backup file, and we cannot access your cloud storage account.

The backup encryption key:

What's Backed Up:

What's NOT Backed Up:

3.3 Data Retention

On Your Device:

Cloud Backups:

Deleted Data:

3.4 Data Held on Our Servers

Our servers run on Google Cloud (Firebase). This is everything we hold about you there, and for how long:

Data When Kept until
Anonymous account ID All users Delete All Data (uninstalling the app does not remove it)
Sign-in account (name, email, provider ID) If you sign in Delete All Data
Subscription and purchase records (store purchase token and transaction ID), credit balance and credit history If you buy EZer Plus or credits Delete All Data
Privacy choice records All users Delete All Data; a copy without your account ID (replaced by a one-way pseudonym) is kept for 7 years as proof of consent
AI parse cache, parse jobs, parse history If you use AI statement parsing Delete All Data; no automatic expiry. Parse cache and parse jobs are not kept while "Don't cache my statements on our servers" is on (see AI Statement Parsing)
Parsing problem reports and receipt scan feedback Only if you send them Delete All Data (including receipt images)
Backup encryption key If you use cloud backup Delete All Data (existing backups then cannot be restored)
Push notification token with platform and app language Signed-in users only (used for Household notifications) Delete All Data
Household: encrypted shared items (transactions, budgets, goals, bills, splits, settle-ups, reimbursements) If you use Household sharing (EZer Plus) Until the household is deleted or ends (deleted 30 days after it ends, or 90 days after a Plus-lapse pause), you delete your shared items when leaving, the owner removes you, or you use Delete All Data. A deletion marker without amounts or details is kept for 180 days (see Household Sharing)
Household: household name, member names, roles and account IDs, dates, types and status of shared items, who owes whom (no amounts), excluded category and account IDs, display currency If you use Household sharing (EZer Plus) Until the household is deleted or ends (as above) or you use Delete All Data (your member record is then kept as "Former Member", without your name)
Crash reports (Firebase Crashlytics) Unless you turn crash reporting off The retention period set by Firebase Crashlytics (not removed by Delete All Data)

4. How We Share Your Information

4.1 We Do NOT Sell Your Data

We will NEVER:

If you join a household, the items you share are visible to the other members of that household, as described in Household Sharing. That is the only case in which other EZer users can see your data.

4.2 Third-Party Services We Use

Google Firebase (all users):

Google Sign-In and Microsoft sign-in (optional):

Cloud storage for backups (if you enable Cloud Backup; part of EZer Plus where available):

AI provider (only if you use AI statement parsing):

Google ML Kit (For Receipt OCR):

Google Play Billing:

European Central Bank:

4.3 Legal Requirements

We may disclose your information if required by law:

We will notify you of legal requests unless prohibited by law.

5. Android-Specific Permissions

5.1 Permissions We Request

Permission Purpose Required/Optional What We Access
POST_NOTIFICATIONS Send bill reminders and alerts Optional N/A
CAMERA Scan receipts and documents Optional Camera feed (not stored)
READ_MEDIA_IMAGES Attach receipt images Optional Only selected images
USE_BIOMETRIC / USE_FINGERPRINT Secure app lock with fingerprint/face Optional Biometric authentication only
SCHEDULE_EXACT_ALARM Bill reminders and notifications Optional N/A
RECEIVE_BOOT_COMPLETED Restore scheduled reminders after the phone restarts Required N/A
INTERNET Cloud features, subscription checks, currency rates, crash reports Required Network access
BILLING EZer Plus and credit purchases through Google Play Required Google Play purchase records for EZer
WAKE_LOCK Background notifications Optional N/A
VIBRATE Notification vibration Optional N/A

EZer does not request permission to read SMS messages, notifications from other apps, your contacts or your location.

5.2 How to Manage Permissions

You can control all permissions:

  1. Android Settings > Apps > EZer > Permissions
  2. Or within EZer: Settings > Permissions
  3. Revoke any permission anytime

Impact of Denying Permissions:

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

How to exercise these rights:

6.2 Data Portability

Export Your Data:

Exported files are not encrypted. Anyone you share the file with, or anyone who can open it on your device or storage, can read it. To keep an encrypted copy, use Backup. Export exists so you can take your data elsewhere.

6.3 Right to be Forgotten

Delete Your Account and Data:

  1. Settings > Delete Account, or Settings > Privacy Dashboard > Delete All Data (both run the same deletion, called "Delete All Data" in this policy)
  2. Confirm deletion by typing DELETE (this is permanent)
  3. The app first asks our server to delete your server-side data, then wipes the EZer database on your device. A few local settings (for example the app-lock PIN and cached sign-in tokens) may remain on the device until you uninstall the app
  4. On our servers we delete: your account (anonymous or signed-in), subscription and purchase records and the link between your store purchase and your account, credits, AI parse cache, parse jobs and parse history, parsing problem reports and receipt scan feedback (including images), privacy choice records (a pseudonymized proof-of-consent copy is kept for 7 years), your push notification tokens and your backup encryption key. If you are in a household, the items you shared are deleted (a deletion marker without amounts or details stays for up to 180 days, see Household Sharing), your member record is kept as "Former Member" without your name, and any household you own is deleted. Bill splits, settle-ups and reimbursements with other members stay, without your name, because they are the other member's record too
  5. Backup files already in your own cloud storage account stay there until you delete them, but they can no longer be restored because the key is deleted
  6. Exported files you saved or shared are not affected
  7. We cannot recover deleted data

If deletion from our servers fails in the app, you can retry or email privacy@ezerapp.com. You can also request deletion at https://www.ezerapp.com/data-deletion.html.

6.4 Consent Management

You can withdraw consent anytime:

7. Security Measures

7.1 Data Protection

Encryption:

Authentication:

App Security:

7.2 Server Security

7.3 Third-Party Security Audits

We have not yet commissioned an independent security review. If you find a security problem, please report it to privacy@ezerapp.com.

8. Children's Privacy

EZer is intended for adults and is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@ezerapp.com.

9. International Data Transfers

Data Location:

For users in the European Union and other regions with transfer rules:

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

Your continued use of EZer after changes indicates acceptance of the updated Privacy Policy.

11. Your Choices and Controls

11.1 AI Statement Parsing

You can:

11.2 Analytics and Crash Reporting

You can:

How: Settings > Privacy Dashboard

The anonymous account ID and the app-integrity check cannot be turned off, because the app's requests to our servers depend on them.

11.3 Cloud Backup

You can:

How: Settings > Backup & Restore

11.4 Household Sharing

Household sharing is off until you create or join a household. In Settings > Household you can exclude categories, hide accounts, stop sharing a transaction, budget or goal, or leave the household at any time.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

Privacy contact: privacy@ezerapp.com

Response Time:

13. Compliance and Certifications

We comply with:

Security Standards:

14. Important Disclaimers

14.1 No Bank Account Access

Important: EZer does NOT:

We only:

15. Frequently Asked Questions

Q: Does EZer read my SMS messages or notifications?

A: No. The app does not request permission to read SMS messages or notifications from other apps.

Q: Is my statement sent to an AI company?

A: Only if you use AI statement parsing and give consent. The statement goes through our server to Anthropic (Claude). We do not store the file, but we store the parsed result linked to your account unless you turn the cache off. See AI Statement Parsing.

Q: Can I use EZer without any cloud feature?

A: Yes. You can enter transactions, scan receipts and use budgets, bills and goals without AI parsing, cloud backup or Household sharing. The app still uses an anonymous account ID, an app-integrity check, subscription status checks, currency rate lookups and crash reports (which you can turn off).

Q: How do I know my data is secure?

A: Your data is encrypted on your device using AES-256 encryption. Cloud backups are also encrypted before upload. You can also enable biometric lock for additional security.

Q: Can EZer employees access my financial data?

A: Data that stays on your device: no. Some data is on our servers in a form we could technically read: AI parsing results (unless you turn the cache off; see AI Statement Parsing) and the backup encryption key, which is stored on our servers so you can restore on a new phone. For Household sharing, the amounts and details of shared items are encrypted on your phone and we cannot read them, but the household name, member names and the dates, types and status of shared items are stored in a form we could read (see Household Sharing). We do not access this data except where needed to operate the service or where required by law.

Q: What happens to my data if I uninstall the app?

A: Uninstalling deletes the data on your phone. Cloud backups remain in your own cloud storage account, and you can restore them if you reinstall EZer, sign in with the same account and have not used Delete All Data. Uninstalling does not delete what we hold on our servers; use Delete All Data before uninstalling, or email privacy@ezerapp.com.

Q: Do you share data with Google?

A: Google provides our cloud infrastructure (Firebase): anonymous accounts, app-integrity checks, crash reports, our server functions and database, and analytics if you opt in. Google Drive stores encrypted backups if you choose it for cloud backup, and Google ML Kit reads receipts on your device (nothing sent). Google does not process your statements: AI statement parsing uses Anthropic only.

16. Android-Specific Privacy Features

Android Privacy Dashboard Integration:

Access Indicators:

Location:

Clipboard Access:

17. Summary of Key Privacy Points

What We DO:

  • • Store data locally in an encrypted database on your device
  • • Use an anonymous account ID, an app-integrity check and crash reports
  • • Send data off your device for AI parsing, cloud backup or Household sharing only when you turn them on
  • • Encrypt cloud backups before upload, with a key held on our servers for restore
  • • Allow data export (unencrypted, with a warning)
  • • Let you delete all data, on your device and on our servers
  • • Use industry-standard security measures

What We DON'T DO:

  • • Sell your data to third parties
  • • Share financial data with advertisers
  • • Read your SMS messages or other apps' notifications
  • • Access your bank accounts directly
  • • Store bank passwords or credentials
  • • Access your clipboard
  • • Track your location
  • • Show ads

18. Legal Basis for Processing (GDPR)

For EU users, our legal basis for processing your data:

Data Type Legal Basis Purpose
Account information (anonymous ID, sign-in details) Contract Provide app services
Transaction data Contract Finance management features
App-integrity tokens Legitimate Interest Protect our servers from abuse
Crash reports Legitimate Interest Keep the app stable
Usage analytics Consent Improve app performance
AI statement parsing (statement content, parse results) Consent Extract transactions from statements
Parsing problem reports and receipt scan feedback Consent Improve parsing and scanning
Cloud backups and backup key Consent Data backup and recovery
Subscription and purchase records Contract Provide EZer Plus and credits
Privacy choice records Legal Obligation Demonstrate consent
Currency rate lookups Contract Convert amounts between currencies
Marketing emails Consent Promotional communications

You can withdraw consent anytime in Settings > Privacy Dashboard.

By using EZer on Android, you acknowledge that you have read and understood this Privacy Policy.

Last Reviewed: September 27, 2026 | Next Review: March 27, 2027

© 2025 EZer. All rights reserved.