5Money — Privacy Policy

Android app, package com.reoil.five_money.

Last updated: 26 August 2026

5Money is an offline-first personal finance app. Your books, accounts, categories, transactions, notes and receipt photos are stored in a database on your phone. There is no 5Money account, no login, and no server run by the developer. The developer cannot read your financial data.

Three things leave the phone, and only under the conditions described below: an optional backup to your own Google Drive, requests for currency exchange rates that contain nothing but currency codes, and analytics about how far a new install gets through first-time setup, which carry no ledger data but are tied to a resettable identifier.

1. Data stored on your device

Everything you enter in 5Money is written to a SQLite database file on the phone: books, accounts, categories, transactions, notes, and any receipt photos you attach.

This data is not uploaded anywhere by default. There is no developer-operated server for it to be uploaded to.

Uninstalling the app deletes this data. The app also has a Reset all data action that clears it in place.

2. Google Drive backup (optional)

This feature is off by default. You have to turn it on.

When enabled, the app uploads the whole database file — receipt photos included — to your own Google Drive. The developer has no access to your Drive and no access to the backup.

The app requests these Google OAuth scopes:

drive.file — access limited to files the app itself created. The app cannot see any of your other Drive files.
openid and email — used only to display which Google account is connected.

Once a backup is in your Drive it is governed by Google's terms for your Drive account, and you can delete it yourself.

3. Local network web server (optional, paid)

5Money can serve its own interface to a browser on the same Wi-Fi network, so you can use the app from a computer. This is a paid feature and you start it manually.

Traffic is plain HTTP and stays on the local network. No data is sent to the internet.
Access is protected by a PIN, which is regenerated every time the server starts.
The server stops when the app closes.

4. Exchange rates

To convert between currencies, the app makes outbound requests to:

api.frankfurter.dev (European Central Bank data)
open.er-api.com
api.coingecko.com
api.gold-api.com

These requests carry only currency codes — no user data of any kind. No amounts, no balances, no identifiers from your ledger. Responses are cached on the device for 12 hours.

5. Purchases

Paid features are sold through Google Play Billing: a monthly subscription, a yearly subscription, and a one-time lifetime purchase.

Google processes the payment. The app never sees or stores card or payment details. Only a record that a purchase exists is cached on the device.

6. Analytics

Release builds of the app include Google Analytics for Firebase (GA4). It measures one thing: how far a new install gets towards creating its first account, its first category and its first transaction.

What the app sends with those events

The custom values are exactly these, and nothing else:

attempt — a number, how many tries at a step
account_type — Regular, Saving, Credit or Debt
category_type — Income or Spending
origin — which button started a transaction
has_photo — true or false
has_category — true or false

What is never sent

Transaction amounts, account balances, account or category names, notes, receipt photos, dates, and currency names are never sent. An event records that a field was filled in, never what was typed into it.

What Firebase collects automatically

Independently of the above, the Firebase SDK collects a resettable app-instance identifier, the device model, the operating system version, the app version, the language, and an approximate region derived from the IP address.

What is switched off

Advertising ID collection is switched off.
The SDK's automatic screen tracking is switched off.

7. Permissions

The app asks for camera and photo library access. It is used for one purpose: attaching a receipt image to a transaction.

Those images stay on the device. They leave it only as part of a Google Drive backup, if you have enabled that.

8. Children

5Money is not directed at children.

9. Deleting your data

Uninstall the app — this removes the local database and everything in it.
Reset all data — an in-app action that clears the data in place, keeping the app installed.
Google Drive backup — a backup is a file in your own Google Drive. You can delete it there yourself.

10. Changes to this policy

If the app's handling of data changes, this page is updated and the "Last updated" date at the top changes with it.

11. Contact

Questions about this policy or about 5Money can be sent to:

[email protected]