Privacy Policy

MS Family ("we", "us", or "our"), developed and operated by XPOOL Technology Pvt Ltd (website: https://xpool.info, contact: velgo7686@gmail.com), is committed to safeguarding the privacy and security of our users. This Privacy Policy describes how MS Family collects, uses, processes, stores, and protects your information when you use our mobile application and associated web services located at https://xpool.info.

• • Account & Authentication Data: When you register or log in, we collect your email address, full name, chosen username, and profile picture (if uploaded). For Google Sign-In, we receive your verified Google email address, display name, and avatar URL.
• • Financial & Transaction Records: User-entered and auto-detected expenses, incomes, categories, bank names, merchant names, amounts, transaction dates, and custom notes.
• • Document Vault (My Proofs): Images and PDF documents (receipts, warranties, bills, or identity proofs) uploaded voluntarily by you for storage.
• • Live Safety Geolocation (Optional): Real-time latitude and longitude coordinates collected only when you explicitly enable the Family Safety Tracking feature. Location may be collected while the app is in the foreground and background (via a foreground service with persistent notification) when tracking is active.
• • Device & Notification Data: Push notification tokens (Firebase Cloud Messaging) and basic device attributes needed for responsive rendering.
• • SMS-Derived Financial Data (Optional): When you enable the Smart SMS Reader feature, structured financial information (amount, merchant, bank, date, transaction type) is extracted from bank transaction SMS messages on your device. See Section 3 for details.

• • Purpose of SMS Access: MS Family requests READ_SMS and RECEIVE_SMS permissions solely to detect financial transaction notifications from banks, credit cards, UPI, and digital wallets to automatically create transaction records in your account.
• • On-Device Processing: SMS messages are parsed entirely locally on your device using on-device pattern-matching algorithms. Raw SMS message text is not uploaded, transmitted, or backed up to any cloud server.
• • Data Minimization: We do not store the original SMS text, sender message body, full account numbers, UPI transaction remarks, or reference texts. Only structured financial details (amount, type, date, bank, merchant) are saved, with the standard note: "Automatically detected from SMS".
• • No Advertising Use: SMS content and SMS-derived financial data are not used for advertising, marketing, user profiling, or shared with data brokers.
• • Prominent Disclosure & Consent: SMS access is requested only after a separate contextual in-app disclosure with an explicit affirmative consent action. You can toggle this feature off at any time in Settings or revoke SMS permissions in your Android system settings.
• • Play Console Declaration Note: This feature requires Google Play approval through a Permissions Declaration Form. READ_SMS and RECEIVE_SMS are restricted permissions under Google Play policy.

• • Explicit Consent: Geolocation is accessed only when you actively turn on Live Tracking for family safety purposes.
• • Background Collection: When tracking is active, location may be collected while the app is in the background via an Android foreground service. A persistent notification informs you that tracking is active.
• • Restricted Sharing: Coordinates are transmitted securely and displayed only to members of your verified Family Group.
• • Automatic Deletion: Location records are automatically purged from the database after 24 hours via a scheduled cleanup job.
• • User Control: You can stop location sharing at any time from the Live Tracking screen or by revoking location permissions in your device settings.
• • Play Console Declaration Note: Background location access requires Google Play approval through a Background Location Declaration.

• • Private Storage Buckets: Files uploaded to My Proofs are stored in private Supabase Storage buckets. These buckets are not publicly accessible.
• • Infrastructure Encryption: Files are encrypted at rest by the cloud storage infrastructure provider (Supabase/AWS). All transfers use TLS encryption.
• • Row-Level Security (RLS): Database-level access rules ensure that only the file owner can access their uploaded documents. Storage policies enforce user-scoped folder access.

• • Google AdMob: MS Family uses Google AdMob, a service provided by Google LLC, to display advertisements within the application. Advertising helps support the operation and continued development of MS Family. Premium subscribers enjoy an entirely ad-free experience.
• • Information Processed for Advertising: The Google Mobile Ads SDK and applicable advertising partners may process certain information for advertising delivery, advertising measurement, analytics, security, fraud prevention, and related purposes. Depending on the user's device, settings, general location (such as IP-derived country or general region; MS Family does NOT collect or provide precise GPS coordinates for advertising), consent choices, and applicable law, this information may include IP address, device and advertising identifiers (such as Google Advertising ID), app interactions, advertisement impressions and interactions, diagnostic information, performance information, and privacy or consent choices. The information processed for advertising is handled according to applicable Google and advertising-partner policies and the user's privacy choices.
• • Personalized and Non-Personalized Advertising: Personalized advertising may be provided where legally permitted and where the required user consent has been obtained. Users may consent, decline consent, or manage applicable advertising privacy choices. If personalized advertising consent is not provided, non-personalized or limited advertising may be used where permitted. Non-personalized ads do not use mobile advertising identifiers for profiling, but continue to rely on contextual signals (such as device type or coarse region). Advertising behavior may vary according to region, device configuration, consent status, and applicable law.
• • European Privacy Choices: For users located in the European Economic Area (EEA), the United Kingdom, and Switzerland, MS Family supports Google's consent management solution / User Messaging Platform (UMP) for applicable advertising privacy choices. Through this system, users can: (1) Consent, (2) Do not consent, or (3) Manage their privacy choices. Where supported within the application or device environment, users may review or manage applicable privacy choices through a clearly labeled "Privacy and cookie settings" option or through their device-level Google advertising controls.
• • Advertising and Financial Information: MS Family does not intentionally provide the contents of users' SMS messages, parsed financial transactions, uploaded financial documents, savings information, loan information, or other private financial records to Google AdMob for advertising personalization or ad targeting. Advertising services operate separately from MS Family's financial-management functionality.
• • Privacy Choices & Opt-Out: Users may manage their personalized advertising preferences at any time via device settings (Google Settings → Ads on Android) or through Google's Ads Settings portal at https://adssettings.google.com. MS Family does not sell your personal data to third parties.

• We use the following third-party services:
• • Supabase: Managed authentication, PostgreSQL database with Row-Level Security, and encrypted cloud storage for document vault.
• • Firebase Cloud Messaging (FCM): Real-time push notifications for alerts and reminders.
• • Firebase Analytics: Anonymous usage analytics to understand how users interact with app features. This data helps us improve the application.
• • Google Sign-In: Secure, passwordless authentication using Google OAuth2.
• • Google AdMob / Google Mobile Ads: Banner advertisement delivery, ad measurement, and fraud prevention for free-tier users. Google processes information according to its own privacy policy (https://policies.google.com/privacy) and advertising technology terms (https://policies.google.com/technologies/ads). For more details, see how Google uses information from sites or apps that use its services at https://policies.google.com/technologies/partner-sites.
• • Razorpay: Secure payment processing for web-based premium subscriptions.
• • Google ML Kit (On-Device): Text recognition for receipt scanning and OCR features. Processing occurs entirely on your device.
• • Google Generative AI: AI-powered features for financial insights and categorization assistance. Queries sent to Google's AI services do not include raw SMS content or personally identifiable financial data.

• We implement administrative, technical, and physical safeguards to protect your data:
• • All network communications between the application and our services are encrypted in transit using Transport Layer Security (TLS/HTTPS).
• • Database isolation is enforced via PostgreSQL Row-Level Security (RLS), ensuring that users cannot access data belonging to other families.
• • Storage access is enforced via per-user folder-scoped policies, preventing unauthorized file access.
• • Optional on-device App Lock protected by hardware-backed biometrics (Fingerprint / Face ID) and system PIN.
• • Server-side validation prevents unauthorized family_id injection and cross-family data access.
• • No system is immune to all threats. We encourage users to keep device credentials and invite codes secure.

• • Financial & Profile Data: Maintained as long as your account remains active, enabling you to review multi-year budget trends. Deleted upon account deletion.
• • Geolocation Data: Automatically purged after 24 hours via a scheduled database cleanup job.
• • Deleted Documents: Removed from active listings immediately upon user action. Permanently purged from cloud storage within 30 days.
• • SMS-Derived Data: Only the structured transaction record is retained. Raw SMS text is never stored. Transaction records are deleted upon account deletion.
• • Push Notification Tokens: Maintained while needed for notification delivery. Deleted upon account deletion.
• • Advertising Data: AdMob data collection, measurement, and retention are governed by Google's privacy policy (https://policies.google.com/privacy).

• You have control over your personal data:
• • Access & Export: You can view all records and download your financial history (as PDF) at any time in Settings.
• • Edit & Correct: You can edit or delete individual transactions, categories, and documents at any time.
• • Complete Account Deletion: You can permanently delete your account and all associated data via Settings → Privacy & Security → Delete Account.
• • Web Deletion Portal: If you no longer have access to the app, you can request account deletion via our web portal at https://xpool.info/delete-account. Authenticated users are processed immediately. Unauthenticated requests are verified and processed within 7 business days.
• • What Is Deleted: Authentication credentials, user profile, family memberships, transaction records, uploaded documents, storage objects, location records, push notification tokens, and user preferences.
• • Ownership Respect: Data belonging exclusively to other family members is not affected by your account deletion.

• MS Family is not directed to children under 13 years of age. We do not knowingly collect personal information directly from children under 13.
• • When family groups include minor children, parent or legal guardian authorization is required.
• • Minor family members should not independently create accounts. Parents or guardians should manage their participation in family groups.
• • Children's data is not used for advertising purposes.

We may update this Privacy Policy from time to time to reflect feature changes, regulatory adjustments, or platform policy updates. Significant revisions will be notified via in-app banners or email notifications. The "last updated" date at the top of this policy indicates the latest revision.

If you have questions, concerns, or data privacy requests regarding this policy or MS Family, please contact us at velgo7686@gmail.com or visit https://xpool.info or https://xpool.info/privacy.