SprigSprig Privacy Policy
1. Who we are
Sprig is developed and published by Secundum Reality ("we", "us"). If you have any question about this policy or your data, email contact@homevism.com.
2. Data you enter stays on your phone
Sprig is a local-only app. The bookkeeping data you create is stored in the app's private storage on your device and nowhere else. This includes:
- income, expense and transfer entries, categories, memos and budgets;
- wallets and accounts, including any optional account number or IBAN you type in;
- invoices (client name, invoice number, due date, amount), recurring rules, mileage trips and tax summary figures;
- receipt photos you take or pick from your gallery and attach to entries;
- app settings such as your language, active book and whether Premium is unlocked.
We cannot see, access or recover this data. It is not uploaded to any server operated by us, and there is no cloud sync. The data file is encrypted on the device with AES-GCM using a 256-bit key that is generated inside the Android Keystore and cannot be extracted from the device.
3. No account, no sign-in, no bank connection
Sprig does not ask you to create an account, sign in, or connect a bank, card or payment provider. You enter every transaction yourself. We do not collect your name, email address, phone number, contacts, location or any financial account credentials.
4. App lock (biometrics)
You can protect Sprig with your fingerprint, face unlock or device passcode. Authentication is performed entirely by Android's BiometricPrompt and device-credential system. Sprig only receives a yes/no result. It never sees, stores or transmits biometric data.
5. Receipt photos and the camera
To attach a receipt, Sprig opens your device's camera app or photo picker through a standard Android intent and receives only the image you choose. Sprig does not access the camera directly, does not read other photos, and does not perform any text recognition or upload of the image. Receipt photos are stored in Sprig's private app storage and are deleted when you delete the entry or uninstall the app.
6. Backups and CSV export
You can export your entries as a CSV file through the Android share sheet, and you can create a backup file of all your data that is encrypted with a passphrase you choose (AES-256 with PBKDF2 key derivation and an integrity check). Where those files go is entirely your decision: the app hands them to the app or location you pick (for example your email, a messaging app or your own cloud drive). We do not receive a copy. Anyone who obtains a backup file and your passphrase can read it, so keep both safe. We cannot recover a forgotten backup passphrase.
7. Third-party services
Sprig contains no analytics or crash-reporting SDK. The following third parties may process limited data:
| Service | When it is used | What it may receive |
|---|---|---|
| Google Play Billing | Only if you buy or restore the Sprig Premium subscription. | Google processes the purchase and your payment details; we never see your card or bank information. Sprig receives a purchase confirmation from Google Play and stores the "Premium unlocked" flag locally. Purchase history is governed by the Google Privacy Policy and the Google Play Terms of Service. |
| Google AdMob (Google Mobile Ads SDK) | Only when you tap "Watch an ad" on the free plan to earn more entries. No ad is loaded, shown or requested in the background, and Premium users never see the ad service at all. | When an ad is requested, Google may receive your advertising ID, IP address, device type and settings, app identifier and information about the ad you interacted with, and may use it for ad serving, frequency capping, fraud prevention and reporting. See How Google uses information from sites or apps that use our services. You can reset or delete your advertising ID and turn off ad personalization in Android Settings › Google › Ads. |
Sprig requests only the permissions these functions need: internet access (for Play Billing and rewarded ads), biometric authentication for the app lock, and the Google advertising-ID permission that the ads SDK requires. It does not request location, contacts, phone, microphone or general storage permissions.
8. Data we do not collect
We do not collect, and the app does not transmit, your amounts, account names, memos, client names, invoice details, receipt images or anything else you type. We do not track you across apps or websites, do not sell any data and do not build advertising profiles. If a future version of Sprig adds anonymous usage statistics, this policy will be updated first and the change will be described in the app's release notes.
9. Deleting your data
- Individual items: swipe or use Delete inside the app. Deleting an entry also removes its receipt photo.
- Everything: uninstall Sprig. Because all data is stored locally, uninstalling removes it permanently. We hold no copy that could be deleted or restored.
- Backups and exports: delete any backup or CSV files from wherever you saved them.
- Subscription records: your Google Play purchase history is held by Google and can be managed in your Google account and the Play Store's Subscriptions section.
- Advertising ID: reset or delete it in Android Settings › Google › Ads.
If you need help with any of the above, email contact@homevism.com.
10. Sprig Premium subscription
Sprig Premium is an auto-renewing yearly subscription sold through Google Play. The price is shown in the app before you buy. Your Google Play account is charged at confirmation and renews automatically each year unless you cancel at least 24 hours before the end of the current period. You can cancel or manage the subscription at any time in Google Play › Payments & subscriptions. Refunds are handled under Google Play's refund policy.
11. Children
Sprig is a financial record-keeping tool intended for adults. It is not directed at children under 13 (or the age of digital consent in your country), and we do not knowingly collect personal information from children. Because the app collects no personal data on our side, there is nothing for us to delete; if you believe a child has used the paid features, contact Google Play support for the purchase.
12. Security
Your data file is encrypted at rest with a hardware-backed key in the Android Keystore, backups are encrypted with your passphrase, and the optional app lock adds biometric or passcode protection. No method of storage is perfectly secure, and the security of your device (screen lock, OS updates) remains your responsibility.
13. Your rights
Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California) you may have rights to access, correct, delete or port your personal data and to object to processing. Because Sprig keeps your data on your device and we hold none of it, you exercise these rights directly: view and edit everything in the app, export it as CSV, or delete it as described in section 9. For data handled by Google, use the controls in your Google account. You can also contact us at the address above, and you have the right to lodge a complaint with your local data protection authority.
14. Changes to this policy
We may update this policy when the app changes. The effective date at the top will change, and material changes will be noted in the app's Google Play release notes. Continued use of Sprig after an update means you accept the revised policy.
15. Contact
Secundum Reality · contact@homevism.com