PRIVACY

What Vittafy does with your mail, in plain words.

Vittafy reads the transaction mail your banks and cards already send you, and turns it into a picture of your money. The AI that reads it is downloaded onto your phone, so the mail never leaves the device. This page explains what is read, what is kept, where it is kept, who else sees it, and how to get rid of it.

Last updated 18 September 2026

No server in the middle No Vittafy account, no Vittafy database. Your mail goes from Google to your phone and stops there.

The model is on your phone Vittafy downloads its AI model to your device. Your mail is read there, not on anyone’s server.

Delete means delete Everything lives on your device. Remove the app and it is gone, with no copy for anyone to hand back.

There is no Vittafy account

You do not sign up. There is no Vittafy server holding your transactions, no Vittafy database with your name in it, and no login for us to lose. The app runs on your phone: it signs in to your mailbox with Google, and reads it with an AI model downloaded onto the device.

The Gmail access we ask for

You connect your mailbox by signing in with Google. The consent screen you see is Google's own, and the access granted is read-only: Vittafy can read messages, and cannot send, reply, forward, archive or delete anything. Read-only is enough because everything Vittafy needs already exists in mail your bank sent you - it never has to write to your mailbox, and it never has to talk to your bank.

Only messages that look like transaction mail are opened - bank and card alerts, payment receipts, salary credits, statement mail.

Personal mail is not opened, not indexed and not sent anywhere.

Vittafy does not ask for Google Contacts, Calendar, Drive or profile scopes.

You can revoke Vittafy's access from your Google Account security settings at any time, without opening the app.

What the model extracts, and what it throws away

When the on-device model reads a transaction mail, it pulls out a small set of structured fields and keeps only those. The message itself is not retained: after extraction the mail body and subject are dropped, and the entry in your ledger is the numbers, not the email.

Kept: amount, merchant or counterparty, account or card identifier (usually the last four digits), date, and the category assigned.

Not kept: the mail body, the HTML, attachments, headers, or any part of the message not needed for those fields.

Nothing is written back to your mailbox - no labels, no read receipts, no replies.

If a mail cannot be read confidently, it is skipped rather than guessed at, and you can add the entry by hand.

The AI runs on your phone

The first time you set Vittafy up, the app downloads its AI model onto your device. From then on that model reads your mail locally. There is no AI service in the middle, no API key to buy, and no request leaving your phone to have your mail understood.

Mail text is processed on the device by the downloaded model. It is not sent to us or to any AI provider.

Questions you ask in the app are answered by that same local model, from the data already on the phone.

The model download itself is an ordinary file download, and carries none of your mail or financial data.

Model updates are downloads too - nothing is uploaded in exchange.

Where your data lives

Everything Vittafy knows about your money sits in an encrypted store inside the app, in the app's own private storage on your device. Other apps cannot read it. It is included in your phone's own encrypted backup if you have one turned on, and nowhere else.

No copy is uploaded, mirrored or synced to us.

If you use the app on two phones, each one builds its own picture from your mailbox. They do not sync through us.

The Google sign-in token is held in the platform's own secure credential storage, not in the ledger database.

Fingerprint and passcode

Vittafy can require your fingerprint, face or device passcode every time the app is opened, using Android's own biometric prompt. Vittafy never sees your biometric data - the phone answers yes or no, and nothing about your face or fingerprint is stored by the app.

The lock is set inside the app and applies on open, and after the app has been in the background.

If biometrics fail or are unavailable, the device passcode is the fallback.

Export as CSV

Whatever Vittafy has read is yours to take out. A CSV export writes your transactions, accounts and holdings to a file you choose the destination for - your own storage, a cloud drive, an email to yourself. Once the file leaves the app it is covered by whatever you send it to, not by this policy.

The export is generated on the device. It is not routed through any server of ours.

You can export before deleting the app if you want to keep the history.

Advertising

Vittafy shows ads, served by Google AdMob. Ads are how the app stays free. AdMob is Google's product with its own privacy policy, and it never receives your mail or your financial data - but it is a third-party SDK inside the app, and it does collect its own data.

What AdMob collects is what ad SDKs normally collect: the device advertising identifier (the Android Advertising ID), IP address, device and app information, coarse location inferred from that IP, and which ads were requested, shown or tapped.

The SDK communicates with Google's ad servers while the app is open, so the app is not network-silent even though your mail never leaves the device.

No mail content, transaction, merchant, balance, holding, category or Ask question is ever passed to AdMob or to any advertiser, and none of it is used to target ads.

You can limit ad tracking in your phone's own privacy settings: Android lets you reset the advertising identifier, or delete it entirely so apps receive no identifier at all.

Google's use of data from apps that use AdMob is covered by Google's own advertising privacy terms.

What we do not collect in the app

Beyond the ad SDK described above, the app contains no analytics SDK, no session recording, and no crash report that carries your financial data. Everything in this section is about the app on your phone; this website is a separate thing and is covered below.

We do not sell, rent or share your financial data. It never reaches us in the first place.

We do not build a profile of your money, and no such profile is available to advertisers.

We do not contact your bank, and we never ask for banking credentials, net banking passwords or OTPs.

This website, which is not the app

vittafy.in is an ordinary marketing site and it does use analytics, which the app does not. Two tools: Cloudflare Web Analytics, which counts pages without cookies, and Microsoft Clarity, which records how visitors move through the pages - scrolling, clicks, where people give up. Clarity is Microsoft's product with its own privacy policy, and it sets cookies.

Clarity runs on every page of this website, including the calculators.

On the calculators that means the figures you see on screen can appear in a recording. The amounts you type into the fields are masked, but the results calculated from them are ordinary page text. Put in real numbers only if you are comfortable with that; the calculators work just as well with rounded ones.

Your figures are still never saved by us and never sent to us as data. The calculation happens in your browser and nothing is kept when you close the tab.

None of this touches the app. Installing Vittafy does not carry website analytics onto your phone, and nothing measured here is connected to anything in the app.

What delete means here

There is no server copy, so a deletion request is not something you send us and wait for. You perform it, on the device, and it is done when you say so. The only thing that survives is what your mailbox still holds - which was always your bank's mail in your Google account, not ours.

Delete a single transaction, a whole account, or the entire history from inside the app.

Disconnect a mailbox, which stops all reading and removes what came from it.

Delete the app. That removes the encrypted store with it. There is no copy to request back, and nothing for us to confirm.

Revoke Vittafy in your Google Account security settings to end mail access independently of the app.

Limitation of liability

Vittafy is provided as is, without warranty of any kind. Because your data sits on your own device, its safety depends on your device, your Google account and your own security choices - things outside the app's control.

In the event of any data leak, loss, breach or unauthorised access, neither the app nor its developer accepts liability for any resulting loss or damage, direct or indirect.

The app is a record-keeping tool. It is not a bank, not a broker and not investment, tax or legal advice, and it is not liable for decisions taken on the basis of what it shows.

Amounts read from mail can be wrong if a sender changes format. Always check against your bank's own statement before acting on a figure.

You are responsible for keeping your device locked, your Google account secure, and your own backups of anything you export.

Changes to this page

If what Vittafy reads, keeps or sends ever changes, this page changes with it and the app tells you before the new version takes effect. The date at the top is always the date of the current version.

Questions about any of this

Write to support@vittafy.in. If you want your data gone, you do not need to ask us - deleting the app deletes it. There is nothing on our side to request back.

Read the FAQ