Costic Privacy Policy

Last updated: September 28, 2026

Costic ("the app") is an offline-first personal finance tracker: everything works without an account or an internet connection. This policy explains what data the app collects, how it's used, and what control you have over it.

Summary

Data stored locally on your device

Costic stores your accounts, transactions, categories, budgets, debts, and dream jars (savings goals) in a local database on your device. This data is never transmitted anywhere unless you use one of the optional features described below. Uninstalling the app permanently deletes this local data.

Optional Cloud Backup

Cloud Backup is off by default. Signing in requires confirming that you are at least 13 years old. If you choose to sign in — either with your Google account or via a one-time email link (no password) — the app will:

This data is only accessible to your signed-in account. We do not access, read, or analyze it ourselves. Supabase acts as our infrastructure provider (a data processor) for this feature only — see Supabase's privacy policy for how they handle data on our behalf.

You can sign out at any time from the Cloud Backup screen, which stops any further backups, and delete your cloud backup at any time with the "Delete cloud backup" button on the same screen. To delete your account itself, contact us using the email address at the bottom of this page.

Contacts (debt tracker)

If you use the "pick contact" option in the Debts feature, the app asks for one-time access to your contacts so you can select a single person. Only the name and phone number of the contact you pick are copied into that debt entry, stored locally on your device like any other Costic data. The app does not read, scan, or upload your full contact list.

Approximate location (first-launch setup only)

The first time you open Costic, it makes a single network request to a third-party IP-geolocation service (ipapi.co) to guess a sensible default currency and language for you. This reveals your device's IP address (and therefore your approximate location) to that service. Costic does not request or use precise GPS location at any point, and this lookup is not used for anything beyond pre-filling two setup fields, which you can change yourself immediately afterward.

Notifications

Costic can show local notifications for budget warnings, debt due dates, a weekly spending summary, and recurring transactions. These are scheduled entirely on your device by the operating system — no notification content is sent through a push server, and no data about your notifications leaves your device.

App ratings

Costic may occasionally ask you to rate it, and you can rate it any time from More > Support. Ratings and reviews are handled entirely by Google Play's in-app review system; we don't receive any personal data from it beyond what Google Play publicly shows alongside a review.

Data deletion

You can delete all local data at any time by uninstalling the app, or by using the in-app "Import/Export" and account-management screens. A cloud backup can be deleted from the Cloud Backup screen in the app; to delete your account, contact us at the email address below.

Children's privacy

Costic is not directed at children under 13 and does not knowingly collect data from them. Creating a Cloud Backup account requires confirming that you are at least 13.

Changes to this policy

If this policy changes, we'll update the date at the top of this page and, for material changes, note it in the app's release notes.

Contact

Questions about this policy or a data deletion request? Email fineo.dev@gmail.com. See also our Terms of Use.