Doh-Sasa — Privacy Policy

What the app does

Doh-Sasa watches for incoming SMS messages related to money — mobile money alerts, bank debit/credit notifications, and similar financial SMS — and automatically records them as transactions in a private ledger on your phone, so you don't have to type them in by hand. It also learns your own patterns (which counterparties you usually categorize a certain way, which supermarkets you shop at) entirely from data already on your phone, to suggest — never silently apply — categories and descriptions.

What data it accesses, and why

• SMS messages (read/receive) — required to detect and parse incoming financial SMS. The app only keeps messages that look money-related (based on wording like "Ksh", "received", "sent", "debited", "credited", etc.); anything else is ignored immediately and never stored. Only present in the direct-distribution version of the app — a separate version, distributed differently, doesn't request this at all and instead relies entirely on you choosing to share a message in (see below).
• Shared text (Share Sheet) — if you forward or share a message into Doh-Sasa from your Messages app (or anywhere else), that text is read once, parsed the same way an automatically-detected message would be, and then handled exactly like any other transaction — nothing different happens to it, and nothing about it is sent anywhere beyond what's already described in this policy.
• Notifications — used to remind you to add a short description to a transaction, occasional budget/recurring-payment alerts, and a roughly-monthly feedback prompt. Nothing else.

The network requests this app makes

This app has no analytics library, no crash-reporting service, and no advertising SDK. It makes three kinds of requests, and nothing else:

• Update check — a single anonymous request to GitHub's public release listing, at most a few times a day, to see if a newer version exists. Contains no transaction data, no SMS content, and no identifier tied to you.
• Install registration — on first launch, a one-time write of a random install ID and whatever name you choose to give the app (used only to personalize insights and so you can be identified for authorization) to a database we control, so an install can be recognized and approved.
• Authorization check-in — while the app is open, it checks roughly every 45 seconds (and once on every launch) whether this specific install is still authorized to run, sending only the random install ID. This is what allows access to be granted or revoked without needing an account system.
• Exchange rate lookups — only if you log a transaction in a foreign currency, a request naming the currency codes and date involved (no amount, no personal data) is sent to a public exchange-rate service to fetch the real historical rate for that day.

Every transaction, description, category, budget, savings goal, and log entry itself lives in a local database on your phone (Android's standard Room/SQLite storage) and is never transmitted anywhere.

Sharing your data

The app includes explicit export options — a full JSON backup, a real spreadsheet (.xlsx) for Sheets/Excel, an email-backup button, and a "Share logs" button — plus your device's own share sheet for any of these. Nothing is shared automatically or without your direct action of tapping one of these buttons.

How long data is kept

Data stays on your device for as long as the app is installed. Uninstalling the app permanently deletes all of it — there is no backup copy anywhere else unless you've explicitly exported one yourself.

Children

Doh-Sasa is a personal finance tool and is not directed at children.

Changes to this policy

If this policy changes, the date at the top of this page will be updated.