Privacy Policy
Ebbly is a subscription and bill tracker made by Amurot. It works without an account, and your subscriptions stay on your phone. This policy explains the little data that ever leaves it.
- No bank login, and no access to your SMS, email, contacts or location.
- No ads, no analytics and no tracking SDKs. We never sell or share your data.
- Backups are encrypted on your phone with your passphrase. We cannot read them.
What stays on your phone
Your subscriptions, expenses, categories, payment-method labels, reminders and settings are stored only in Ebbly's private storage on your device. When you share or pick a receipt, screenshot, PDF or bank, card or UPI statement, it is read on the phone with on-device text recognition. The file is never uploaded, and the temporary copy is deleted after the import. Statement lines you don't add are discarded.
What leaves your phone
| When | What is sent | To |
|---|---|---|
| Exchange-rate refresh, about once a week | A plain request for current rates. No identifiers | Frankfurter (api.frankfurter.dev) |
| App settings check | A plain request for a small config file. No identifiers | Ebbly's Firebase Hosting |
| Crash reports (on by default, off in Settings) | The error, device model, Android version and a random installation ID. Never your subscription data | Firebase Crashlytics (Google) |
| Sign-in, only if you choose it | Your email address, and your Google display name if you use Google | Firebase Authentication (Google). For email links, also Ebbly's sign-in service on Vercel and the email provider Resend, which sends the link |
| Backup, only if you turn it on | One file, encrypted on your phone with AES-256 and a key from your passphrase | Your own Google Drive (a hidden app folder), or Firebase Storage if you signed in with email |
| Purchases of Ebbly Pro, and redeem codes | Handled entirely by Google Play. A redeem code opens Google Play's own redeem page |
Google, Vercel and Resend act as service providers for Amurot. They process this data only to provide their service. All traffic uses HTTPS.
Why we use it
- Email and name: to sign you in and connect your backups to you.
- Crash reports: to find and fix bugs.
- Exchange rates and config: to show totals in your currency and keep the app working.
We do not use any of it for advertising or profiling.
Your passphrase
Your backup passphrase never leaves your phone and is never stored by us. If you forget it, the backup cannot be opened, by you or by us.
How long we keep it
- Account details: until you delete your account.
- Backups in Ebbly cloud (email accounts): until you delete them or your account. Backups in your Google Drive are in your Drive, and you control them.
- Crash reports: kept by Firebase Crashlytics for up to 90 days.
- Sign-in rate-limit counters: a hashed form of your email address (kept for at most one day) and the request's IP address (at most one hour), only to stop abuse of sign-in emails.
Delete your account
In the app: open Ebbly → Profile → your account → Delete account. This deletes your Ebbly account and every backup stored in Ebbly cloud right away. Subscriptions on your phone stay, and so do backups in your Google Drive.
Without the app: email support@amurot.com from the address you signed in with, with the subject "Delete my Ebbly account". We delete the account and its cloud backups within 30 days and reply to confirm.
Google Drive backups: in Google Drive on the web, open Settings → Manage apps → Ebbly → Delete hidden app data.
Everything on your phone: Ebbly → Settings → Erase everything, or uninstall the app.
Your rights
You can ask to see, correct, export or delete the personal data we hold about you, or object to its use. Email support@amurot.com and we will answer within 30 days. You can also complain to your local data-protection authority.
Children
Ebbly is meant for adults managing their own spending and is not directed at children under 13. We do not knowingly collect data from children.
Changes
If this policy changes, we update this page and its date. Significant changes are also mentioned in the app's release notes.
Contact
Amurot · support@amurot.com