Privacy Policy

The short version

Flint has no servers of its own. Your income, expenses, and financial targets are stored in an encrypted database on your device and never transmitted anywhere.

The only outbound network calls the app makes are:

1. Company logo lookups via the Brandfetch API — when you search for a brand name while adding an item.
2. Anonymous crash reports and usage analytics — if you leave the analytics toggle on (it is on by default). These contain no financial figures whatsoever. You can turn this off in Settings → Privacy at any time.
3. Google Play Billing — when you tap an upgrade or restore button. Handled by Google Play, not by Flint directly.

There is no Flint account, no cloud sync, no advertising identifier, and your financial data is never included in any of the above.

Information we collect

Information stored only on your device

When you use Flint you create financial data — income streams, recurring expenses, categories, and settings. This data is stored exclusively on your device in a SQLCipher-encrypted database. Flint has no backend and no mechanism to access this data remotely. If you uninstall the app, this data is deleted.

Information sent to third parties

Brandfetch (logo lookups)

When you search for a company or brand while adding a burn or income item, Flint queries the Brandfetch Brand Search API with the text you typed. This is used only to suggest a company logo — no financial figures, amounts, or personal information are included in this request. Logo lookups are optional; you can pick a generic icon instead and no request is made.

Brandfetch’s privacy policy is available at brandfetch.com.

PostHog (usage analytics)

If you have the analytics toggle enabled, Flint reports anonymous usage events to PostHog — things like which screens you visit and when you add an income or expense item. No financial figures, amounts, names, or any data you enter into the app are ever included in these events. Events are associated with a randomly generated device identifier, not your name or email.

You can opt out at any time in Settings → Privacy → Share anonymous analytics. When opted out, no events are sent and PostHog discards any queued data.

PostHog’s privacy policy is available at posthog.com/privacy.

Sentry (crash reporting)

If you have the analytics toggle enabled, Flint sends crash reports and diagnostic information to Sentry when the app crashes or encounters an unexpected error. These reports include the stack trace, device model, Android version, and app version. They do not include any of your financial data.

Crash reporting is disabled when you opt out of analytics in Settings → Privacy.

Sentry’s privacy policy is available at sentry.io/privacy.

Google Play Billing

Flint uses Google Play Billing to process Premium subscription and one-time purchases. When you tap an upgrade option or the Restore purchase button, the Google Play Billing library communicates with Google Play to launch the purchase sheet or query existing purchases on your Google account. Flint only sees the result (which Premium tier you hold, if any) — it does not receive payment details, credit card information, or any other account data from Google.

Google’s handling of your purchase and account data is described in the Google Play privacy policy.

Google Play

Flint is distributed through Google Play. Google may collect installation and in-app-purchase data as described in the Google Play privacy policy.

Analytics and crash reporting

Flint collects anonymous usage analytics and crash reports to understand how the app is used and to fix bugs quickly. This is opt-out: the toggle defaults to on during onboarding, and you can change it any time in Settings → Privacy → Share anonymous analytics.

What is collected when opted in:

• Screen views (which tabs you open)
• Feature interactions: adding/editing/deleting items, changing settings, viewing the paywall, completing or restoring a purchase
• Crash reports: stack trace, device model, OS version, app version
• Standard app lifecycle events: app opened, app backgrounded

What is never collected, regardless of the toggle:

• The amounts, names, or categories of any income or expense items you enter
• Your device’s advertising ID
• Your name, email, or any identifying personal information
• Your Google Play payment details

When you opt out, both PostHog and Sentry are fully disabled — no data is queued, stored, or transmitted.

Data security

Your financial data is stored using SQLCipher, an AES-256 encrypted SQLite variant. The encryption key is generated on first launch and stored in the Android Keystore, which is hardware-backed on supported devices. This means the database file is unreadable without the device’s unlock credentials even if extracted.

Data retention and deletion

All data Flint creates lives on your device. To delete it, uninstall the app. There is no account to delete and no server-side data to request removal of.

Children

Flint is not directed at children under 13 and does not knowingly collect any information from children.

Changes to this policy

If we make material changes we will update the date at the top of this page and, where appropriate, notify users through the app.

Contact

Questions about this policy? Reach us at privacy@flintkit.app.