Lacak Privacy Policy
Last updated: 17 October 2026
Lacak ("the app") is a personal finance tracker for iOS, developed by Sigit Hardianto ("we"). This policy explains what data the app uses, why, and the choices you have.
1. Data you enter
Transactions, wallets, budgets and reminders are stored in your Lacak account on Google Firebase (Cloud Firestore). Savings goals and their contribution history are stored locally on your device, separated by account; they do not currently synchronize automatically between devices. A manual JSON backup includes these goals as well as wallets, transactions, budgets, debts and reminder metadata. Keep backup files private: they contain financial data. Sign-in is handled by Firebase Authentication (email/password or Sign in with Apple). Public profile photos are stored in Supabase Storage. RevenueCat processes subscription status and your app account identifier to provide PRO access.
2. Gmail data (optional)
If you choose Menu lainnya → Gmail → Hubungkan, Lacak asks for the Google scope https://www.googleapis.com/auth/gmail.readonly. With your permission, the app:
- searches your mailbox, from your iPhone, for transaction notification emails from the last 7 days (for example emails containing "berhasil", "transaksi", "pembayaran" or "transfer", excluding Promotions and Social);
- reads the subject, sender and text of those emails on your device to extract the amount, date, recipient and reference number;
- keeps the email text in a local, encrypted queue on your iPhone so you can review it;
- saves a transaction to your Lacak account only when you tap Catat Transaksi. The saved transaction contains the amount, date, category, wallet, recipient name and bank reference number. The full email is not uploaded.
Emails that look like one-time passwords (OTP), login verification or password resets are ignored. Lacak never sends, deletes, labels or modifies your emails. There is no Lacak server that reads your mailbox; the access token is stored in the iOS Keychain on your device.
Limited Use. Lacak's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the transaction-suggestion feature you turned on. It is not sold, not used for advertising, not shared with third parties, not used to train AI or machine-learning models, and not read by humans except with your explicit consent for support or where required by law.
3. Receipts you share
Images or text you share to Lacak from other apps (Share → Lacak, or the "Kirim bukti ke Lacak" Shortcuts action) are kept in the same local queue on your iPhone and are deleted after you record or delete them. Images are read on-device to extract text and are never uploaded.
4. Analytics and crash reports
The app includes Firebase Analytics for app-usage measurement. Automatic Firebase Crashlytics collection is disabled in this build. Crash reports may still be available through Apple's TestFlight reporting according to your Apple settings. We do not intentionally attach Gmail data, receipt contents or financial documents to analytics or crash reports.
Optional AI processing
Financial insights on the dashboard use local calculations in this build; opening that page does not automatically send a financial summary to OpenRouter or another AI provider.
If you explicitly agree to the separate PDF-import consent screen, statement pages are sent over HTTPS to the Lacak import backend and OpenAI API to extract transaction suggestions. PDF passwords are used only on your device to unlock the file. OpenAI does not use API data for model training by default unless the API account explicitly opts in. Retention can include abuse-monitoring logs and endpoint-specific application state; this feature does not promise zero retention. See OpenAI's API data controls. You may decline and use manual transaction entry instead. This is separate from the on-device Gmail and shared-receipt features described above.
5. Retention and deletion
- Disconnecting Gmail in the app deletes the stored access token and the list of processed email IDs from your device.
- You can also revoke access at any time at myaccount.google.com/permissions.
- Pending receipts are removed from your device when you record or delete them, and when you sign out.
- You can request permanent deletion from Profil → Edit Profil → Hapus Akun after confirmation and fresh sign-in. When deletion succeeds, the account identity, owned financial data and reminders are removed. Your profile photo in Supabase Storage is not removed automatically; email us to have it deleted. Sign in with Apple authorization is revoked for Apple accounts. Local goals belonging to other accounts on the same device are not deleted.
- Deleting your Lacak account does not automatically cancel an Apple subscription or remove backup files you saved outside the app. Manage subscriptions in your Apple account settings and delete exported backup files separately.
6. Security
Data in transit uses HTTPS. Local receipts are stored with iOS file protection. Access to your Lacak data in Firestore is limited to your signed-in account.
7. Children
Lacak is not directed to children under 13.
8. Changes
We will update this page and its date when the policy changes.
9. Contact
Ringkasan (Bahasa Indonesia)
Fitur Gmail bersifat opsional dan hanya-baca. Lacak mencari email notifikasi transaksi 7 hari terakhir langsung dari iPhone-mu, membaca nominal, tanggal, penerima, dan nomor referensi, lalu menampilkannya untuk kamu tinjau. Transaksi baru disimpan ke akun Lacak setelah kamu menekan Catat Transaksi; isi email lengkap tidak diunggah. Data Gmail tidak dijual, tidak dibagikan, dan tidak dipakai untuk iklan atau melatih AI. Kamu bisa memutus akses kapan saja di aplikasi atau di myaccount.google.com/permissions.