Hokayantra Privacy Policy
Effective date: 8 October 2026
This policy explains what information the Hokayantra app ("the app", "we", "us") handles, why, who receives it, and the rights you have wherever you live.
Who is responsible: Hokayantra is developed by Piyush Patel, an individual developer, who is the data controller (in India, the "data fiduciary") for the app. Contact: androidpyus@gmail.com.
Summary
- You don't need an account, and we don't run any servers. We never receive the information you enter in the app.
- Your finances, tasks, habits, journal, workouts and settings stay on your device.
- The app shows ads from Google AdMob. Google collects device identifiers and related information to show and measure those ads. Where the law requires it, the app asks for your consent first, and you can change your choice at any time in Settings → Ad privacy settings.
- If you turn on City/State display, your coordinates are sent to your phone's built-in place-name service (Google on Android, Apple on iOS) to look up the place name.
- We don't sell your personal information for money.
Information stored only on your device
The following is saved in the app's private storage on your phone. It is never sent to us or anyone else:
- Settings: theme, language, compass preferences and pinned tools.
- Birth year: asked once when you first open the app, and used only to choose the right ad treatment for your age (see Children below).
- MoneyFlow: transactions, budgets, goals, bills, subscriptions and an optional PIN.
- FocusFlow: tasks, habits, journal and mood entries, study and exam plans, and focus session history.
- Workouts and timers: workout logs, body weight, exercise history, interval presets and session history.
This data is processed only on your device, at your request, to provide the features you use. It stays there until you delete it in the app, clear the app's data or uninstall the app. If you use a backup or export feature, the file goes only where you choose to save or share it.
Device permissions
| Permission | Used for | Where the data goes |
|---|---|---|
| Location | True North declination, coordinates, altitude and City/State | Coordinates are used on your device. Only if City/State display is on are they sent to your platform's place-name service (Google or Apple) to get a place name. They are not used for advertising. |
| Camera | Magnifier and flashlight | The live preview is shown on screen only. Images are not saved or sent anywhere. |
| Microphone | Sound Meter | Only the sound level is measured, on your device, while the Sound Meter is open. Audio is never recorded, saved or sent anywhere. |
| Notifications, and Alarms & reminders (optional) | Reminders before bills and subscriptions are due, and an alert when a countdown timer ends | Scheduled and shown by your device. Nothing is sent anywhere. |
| Motion and magnetic sensors | Compass, level, angle meter, metal detector and other tools | Processed on your device only. |
You can refuse or withdraw any permission in your device settings. Only the features that need it will stop working.
What leaves your device, why, and who receives it
| Information | Purpose | Legal basis (EU, UK, Brazil) | Received by |
|---|---|---|---|
| Advertising ID (Android Advertising ID or Apple IDFA), app set ID, IP address, device and app information, ad interactions | Showing personalised ads | Your consent | Google (AdMob) |
| IP address, app set ID, device and app information, ad interactions (such as app launches, taps and video views), diagnostic information (such as app launch time, hang rate and energy use) | Showing non-personalised ads, limiting how often ads repeat, measuring ads and their performance, preventing fraud | Our legitimate interest in funding a free app | Google (AdMob) |
| Approximate location derived from your IP address | Choosing which consent rules apply, and ad delivery | Legal obligation (consent rules); legitimate interest (ad delivery) | Google (AdMob) |
| Age group (under 13, 13 to 17, or adult), never your birth year | Making sure minors get only non-personalised, age-appropriate ads | Legal obligation | Google (AdMob) |
| Precise coordinates (only when City/State display is on) | Looking up your city and state | Providing the feature you turned on | Google (Android) or Apple (iOS) place-name service |
Google acts as an independent controller for advertising data. It uses this information as described in How Google uses information from sites or apps that use our services and the Google Privacy Policy. Apple's place-name service is covered by the Apple Privacy Policy.
We don't receive, store or have access to any of the information in this table.
Your advertising choices
- EEA, UK and Switzerland: the app asks for your consent before personalised ads are shown. You can accept, refuse, or choose individual purposes and partners.
- US states with privacy laws: you can opt out of the "sale" or "sharing" of your information for targeted advertising (see below).
- Change your choice at any time: open Settings → Ad privacy settings in the app. Withdrawing consent doesn't affect processing that took place before you withdrew it.
- iPhone: you will be asked whether the app may track you. If you choose "Ask App Not to Track", your IDFA is not shared.
- Android: you can reset or delete your advertising ID in Settings → Google → Ads (or Settings → Privacy → Ads, depending on your device).
- Google account: you can review and manage ad personalisation at myadcenter.google.com.
If you refuse or opt out, you will still see ads, but they won't be personalised.
International transfers
Google may process advertising data in the United States and other countries outside your own. For data from the EEA, UK and Switzerland, Google relies on safeguards such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses. Details are in Google's privacy policy.
How long information is kept
- Information in the app: on your device until you delete it, clear the app's data or uninstall the app.
- Advertising data: kept by Google according to its own retention policies (how Google retains data).
- Emails you send us: kept only as long as needed to answer you, and deleted within 12 months.
Your rights
Wherever you live, you can ask us about your personal information, and we will answer. Depending on your location, the law may also give you the rights below.
Because we don't receive the information you enter in the app, you control it directly on your device. For advertising data, Google holds the information. You can manage it through the choices above, or contact Google through its privacy policy. We will help with any request we can.
European Economic Area, United Kingdom and Switzerland (GDPR, UK GDPR, Swiss FADP)
You have the right to access, correct or delete your personal information; restrict or object to its processing (including processing based on legitimate interests); receive it in a portable format; and withdraw consent at any time. You can complain to your data protection authority: in the EEA, see the list of authorities; in the UK, the Information Commissioner's Office; in Switzerland, the FDPIC.
United States (California and other states with privacy laws)
In the past 12 months, the following categories of personal information were collected through the app, all from your device:
- Identifiers: advertising ID, app set ID and IP address. Disclosed to Google for advertising.
- Internet or other electronic network activity: app launches, taps, video views and other interactions with ads, and diagnostic information about app performance. Disclosed to Google for advertising, measurement and fraud prevention.
- Geolocation: approximate location derived from your IP address (disclosed to Google for advertising), and, only if you turn on City/State display, precise coordinates sent to the place-name service.
Making identifiers and ad interactions available to Google for personalised ads may count as "selling" or "sharing" under these laws. To opt out, open Settings → Ad privacy settings and choose "Do not sell or share my personal information". We don't otherwise sell personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.
Precise location is "sensitive personal information" under California law. We use it only to provide the City/State feature you turned on, and not to infer anything about you, so the right to limit its use doesn't apply.
You have the right to know what personal information is collected and how it is used, and to access, correct or delete it. You can use an authorised agent to make a request for you. We won't treat you differently for using any of these rights. If we deny a request, you can appeal by replying to our answer, and Colorado, Connecticut and Virginia residents can then contact their state attorney general. California residents can also contact the California Privacy Protection Agency.
India (Digital Personal Data Protection Act, 2023)
You have the right to access a summary of your personal data and how it is processed, to correct, complete, update or erase it, to withdraw consent, to nominate another person to exercise your rights if you die or become incapable, and to have your grievances addressed. Our grievance contact is Piyush Patel at androidpyus@gmail.com. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Brazil (LGPD)
You have the right to confirmation that your data is processed, access, correction, anonymisation or deletion of unnecessary data, portability, information about who your data is shared with, and withdrawal of consent. You can complain to the ANPD.
Canada, Australia and other countries
You have the right to access and correct your personal information and to complain about how it is handled. If you're not satisfied with our response, you can contact your national privacy regulator, for example the Office of the Privacy Commissioner of Canada or the Office of the Australian Information Commissioner.
How to make a request
Email androidpyus@gmail.com with the subject "Privacy request" and tell us what you'd like us to do. To delete your data, follow the steps on Delete your Hokayantra data. We will respond within 30 days. We may ask for information to confirm the request comes from you. Making a request is free.
Children
The app is a general-purpose toolkit and is not directed at children.
When you first open the app, it asks for your birth year. The year stays on your device. Only an age group is passed to Google with ad requests, and the year is treated as the younger of the two ages it could mean:
- Under 18: you are treated as under the age of consent (18 in India, 13 to 16 in the EEA and UK). The consent form is skipped, ads are never personalised, and only ads suitable for teens are shown.
- Under 13: ads also receive Google's child-directed treatment under the US Children's Online Privacy Protection Act (COPPA) and are limited to content suitable for general audiences.
Children should use the app only with the consent and supervision of a parent or guardian. If you believe a child's information has been collected through the app, contact us and we will help remove it.
Security
App data is kept in the app's private storage, which other apps can't access. MoneyFlow can be protected with a PIN. On Android, its screen is also hidden from screenshots and the recent apps view while the PIN is on. No method of storage is completely secure, so keep your device locked and your backups in a safe place.
Changes to this policy
We review this policy at least once a year. If it changes, we will update this page and the effective date above. Significant changes will also be noted in the app's release notes.
Contact
For questions about this policy, to make a privacy request, or to raise a grievance, email androidpyus@gmail.com.