Bachat
Privacy policy
In short: Bachat keeps your money data on your phone. We don't run a server that receives it, we have no accounts, and we use no ads, analytics or tracking. The only times anything leaves your phone are when you choose a feature that needs it, listed below.
Who we are
Bachat is made by Rajnish Kumar, an individual developer based in Abu Dhabi, United Arab Emirates ("we", "us"). For anything about privacy, write to support@trybachat.com.
What Bachat handles on your phone
To show your spending, the app works with:
- Bank and shop messages that your own Shortcuts automation, chosen email account or a shared statement passes to the app: amount, currency, shop, date, card's last four digits and the message text.
- What you enter: spends you add, categories, budgets, bills, savings jars, debts, goals, and the optional "About me" answers in Grow (such as age range, country and salary).
- Receipt photos and statements you choose. They are read on the phone with Apple's on-device text recognition.
- Settings, such as your home currency and app lock.
All of this is stored in an encrypted database on your device. The key is kept in the iOS Keychain. We cannot see it. Raw message text is kept, encrypted, so the app can re-check it when its rules improve; you can remove spends, or delete everything, at any time.
Where your iPhone supports Apple's on-device AI, Bachat uses it to read messages and suggest categories. That runs on the phone; nothing is sent to us or to an AI service.
When data leaves your phone (only if you choose)
| Feature | What is sent, and to whom |
|---|---|
| Outlook sign-in (optional) | Your phone signs in to Microsoft and downloads bank and shop emails directly. Read-only. Microsoft handles this under its own privacy statement. Nothing passes through us. Disconnect any time in the app. |
| Exchange rates | Once a day the app downloads public reference rates from Frankfurter (European Central Bank rates). The request contains no personal data, though, like any website, that service can see your IP address. You can turn this off in Settings. |
| Backups (optional) | If you turn on automatic backup, an encrypted backup file is written to a folder you pick (for example iCloud Drive, Google Drive, OneDrive or Dropbox). That provider stores the file under its own terms. It can't read the contents without your backup password. |
| Report a problem (optional) | Opens your Mail app with a message to us. Nothing is sent until you tap Send. If you choose to attach the diagnostics file, it can include the text of bank messages from the last 14 days, so check it before sending. We use reports only to fix problems and answer you. |
| Siri and Shortcuts | When you log a spend by voice with Siri, or run a Shortcuts automation, Apple processes it under Apple's privacy policy. Bachat receives only the result. |
| Quick add by voice | Speech is turned into text on the phone; the app does not send audio anywhere. |
A future version may offer optional cloud AI for longer written answers. It will be off by default, will send only redacted totals (no names, card or account numbers), and will run through a service that keeps nothing. We will update this policy before it ships.
What we never do
- No accounts, and no collecting your name, email or phone number to use the app.
- No ads, no ad networks, no analytics or tracking tools, and no tracking across other apps or websites.
- No selling, renting or sharing of your data, not even anonymised or "aggregated".
- No reading of personal or work emails, and no access to your SMS inbox. iOS doesn't allow it, and we wouldn't want it.
- No storing of bank passwords. Statement passwords you save stay in your phone's Keychain.
Permissions the app may ask for
Each is asked only when you use the feature: camera and photos (receipts), microphone and speech recognition (Quick add by voice), Face ID (app lock and showing hidden amounts), and notifications (reminders you turn on). You can change them in iOS Settings.
How long data is kept
On your phone: until you remove it or tap "Delete everything", or delete the app. Support emails: as long as needed to help you, and no longer than 24 months, then deleted.
Your rights
Because your data lives on your device, you control it directly: you can see, correct, export (backup) and erase it in the app. For anything you have sent us, such as a support email, you can ask us to show it to you, correct it or delete it. Write to support@trybachat.com. We reply within 30 days.
United Arab Emirates
We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). You have the right to information, access, correction, erasure, restriction, objection and portability for personal data we process, and you can complain to the UAE Data Office.
India
We follow the Digital Personal Data Protection Act, 2023 and its Rules. You give consent by choosing each feature, and you can withdraw it at any time by turning the feature off, disconnecting an account or deleting everything. For any grievance, contact our grievance contact, Rajnish Kumar, at support@trybachat.com. You may also nominate someone to act for you, and you can complain to the Data Protection Board of India if we do not resolve your concern.
Children
Bachat is meant for adults managing their own money. It is not directed at children under 18, and we do not knowingly receive data from them.
Security
Data on the phone is encrypted, protected by iOS, and can be locked with Face ID. Connections the app makes use HTTPS. No system is perfect: please keep your phone's passcode on and your backups protected with a strong password.
This website
trybachat.com uses no cookies, no analytics and no third-party scripts. It is hosted on Cloudflare, which processes standard connection data (such as IP addresses) to deliver and protect the site.
Changes
If this policy changes, we will update the date at the top and, for important changes, say so in the app's release notes before they apply.