The shortest privacy policy you'll read today

Last updated: 16 July 2026 · Applies to the Amla Android app and this website.

Amla does not collect, transmit, sell, or share any of your data. It can't: the app ships without the internet permission, so Android itself prevents it from sending anything, anywhere, ever.

What the app reads, and why

SMS (read): to find the transaction messages your bank already sends and turn them into expense records. Parsing happens entirely on your device. Amla never sends, forwards, or uploads SMS; it has no network access to do so.
Camera / photos (optional): only when you scan a receipt. The image is processed by an on-device text-recognition model and stored locally, attached to your transaction.
Microphone (optional): only when you use voice entry. Speech is transcribed by Android's on-device speech recognition where available.
Notifications (optional): to remind you about upcoming recurring payments and send a weekly digest. These are generated locally.

Where your data lives

All data (transactions, categories, receipts, settings) is stored in the app's private storage on your device.
Backups and CSV exports are created only when you ask, and are saved wherever you choose via the system file picker. Amla never uploads them.
The one-tap data reset deletes everything Amla stores. Your original SMS are untouched, because Amla never modifies your inbox.

What we don't do

No accounts, sign-ups, or logins.
No analytics, crash reporting, advertising, or tracking SDKs.
No cloud sync, no servers. There is no “our systems” for your data to be on.
No connection to your bank. Amla never sees your credentials and cannot initiate transactions.
No sale or sharing of data with anyone, because none is collected.

This website

This site is a set of static pages. It sets no cookies, runs no analytics, and loads no third-party resources, fonts included. If you email us for early access or feedback, we'll use your email address only to reply, and never add it to a marketing list.

Changes

If this policy ever changes, the change will be posted here with a new date. Given the architecture (no network permission), there isn't much room for it to change in a way that matters.

Contact

Questions? Get in touch.