Leftover
Leftover is an expense tracker that runs entirely on the phone it is installed on. It has no account system, no server, and no sync. This page describes what it stores, where, and the one case in which anything leaves the device.
What is stored, and where
Expenses, categories, budgets and settings are written to a database file inside the app's own private storage on the device. Android keeps that area private to the app. Nothing is uploaded, and there is nowhere for it to be uploaded to.
- Amounts, dates, categories, payment methods and any remarks typed in
- Monthly budgets, both the current ones and the record of past months
- Preferences: currency, theme, reminder time, and whether the app lock is on
What is not collected
- No name, email address, phone number or password — there is no account to hold one
- No SMS access. Leftover does not request the SMS permission and cannot read messages, so bank alerts are never scanned for transactions
- No contacts, no photos, no location
- No analytics or crash-reporting service, and no usage tracking of any kind
Advertising
Leftover is free and supported by ads. They are served by Google AdMob, which is the only part of the app that makes a network request. Google may collect device and advertising identifiers in order to serve and measure those ads, as described in Google's own policy for partner sites and apps.
The advertising request contains no expense data. Amounts, categories and remarks are never sent to an ad network or anywhere else. Android's own settings offer controls over the advertising identifier, including resetting it or opting out of personalisation.
The app lock
Turning on the app lock asks Android to confirm the device credential — a fingerprint, face, PIN or pattern — before Leftover will open. It hides the app behind the phone's own lock. It does not encrypt the stored data, and it is not a substitute for the device's own screen lock and storage protection.
Notifications
The optional daily reminder is scheduled on the device by Android itself. No push service is involved, nothing is sent to a server to trigger it, and turning the setting off cancels every reminder already queued.
Exporting data
The CSV export writes a file and hands it to Android's share sheet. Where that file goes next is entirely the choice made in that sheet — an email, a cloud drive, a messaging app. Once it leaves Leftover it is covered by whatever policy applies to the destination chosen.
Deleting data
Settings has a Clear data option that removes expenses and budgets from the device permanently. Uninstalling the app removes everything with it. Because no copy is held anywhere else, deletion is final in both cases and there is nothing to request from anyone.
Children
Leftover is not directed at children and collects nothing that could identify anyone, whatever their age.
Changes to this policy
If the app starts doing something this page does not describe, this page changes first. The date at the top is the date of the most recent revision.
Contact
Questions about any of the above: asbinaries@gmail.com