JK
Javed Khan Labs
Back to pennyBook LedgerLast Updated: January 2026 • Version 1.0.1
Zero Tracking • 100% On-Device

Privacy Policy & Security Architecture

pennyBook Ledger was engineered from the first line of code with a fundamental philosophy: Your financial data belongs exclusively to you.

01.Zero Internet Access (The No-Permission Guarantee)

Unlike traditional personal finance and budgeting applications, pennyBook Ledger does not request or declare the android.permission.INTERNET permission in its Android Manifest.

By design, the Android operating system enforces this restriction at the kernel level. The app has no technical capability to establish socket connections, transmit background telemetry, upload accounting records, or query third-party servers.

02.Data Storage & Encryption

All records—including incomes, expenses, categories, payment modes, Udhaar debts, borrower notes, and budgets—are stored locally in an embedded SQLite database managed via Android Jetpack Room.

  • Database Protection: Database records can be protected with SQLCipher 256-bit AES encryption with keys derived securely via Android Keystore.
  • Backup Derivation: Encrypted .pennybook backup files use Argon2id key derivation combined with AES-256-GCM authenticated encryption.
  • Cloud Backup Exclusion: The app explicitly opts out of automated Google Drive cloud backup rules to prevent silent upload of your database.

03.Third-Party SDKs & Telemetry

pennyBook Ledger contains zero third-party advertising networks, zero analytics SDKs (such as Google Analytics or Firebase Analytics), and zero crash-reporting trackers (such as Crashlytics).

Your device ID, advertising ID, IP address, browsing activity, and financial interactions are never collected, profiled, or sold.

04.Device Permissions Requested

pennyBook Ledger requests minimal device permissions, strictly required for on-device utility:

Storage Access FrameworkAllows you to select a folder on your device to save exported CSV reports, PDF statements, or .pennybook encrypted backups.
Biometric Authentication (Optional)Used solely via Android BiometricPrompt API to verify fingerprint or face unlock before opening the ledger. Biometric data never leaves hardware secure enclaves.

05.Terms of Service

License: pennyBook Ledger is provided by Javed Khan Labs for personal, non-commercial financial record keeping.

Local Data Responsibility: Because pennyBook Ledger operates completely offline and maintains no remote servers, you are solely responsible for creating regular encrypted backups of your ledger using the in-app Backup & Restore utility. If you uninstall the app or factory reset your device without maintaining an external backup file, your local records cannot be retrieved by Javed Khan Labs.

No Financial Advice: pennyBook Ledger is a recording and computational utility. It does not provide certified tax, legal, or financial advisory services.

Questions or Feedback?

Reach out directly to Javed Khan Labs regarding pennyBook Ledger.

javed.apps.support@gmail.com