Privacy Policy
Last Updated: September 2026 • Published by DNC Software Lab
1. Account & Authentication Data
To maintain your application profile and track your allocated AI scan quotas, we collect:
- Email Address: Used solely as your account identifier and for account recovery.
- Password: Stored strictly in cryptographically hashed and salted format.
- Subscription & Scan Quota: Stored to manage free scan tiers and active premium memberships.
2. SMS & Notification Processing
DNC Flow uses Android notification access to detect transaction alerts from banking institutions, UPI services, and other supported financial applications. This allows the app to automatically create transactions without requiring manual entry. Notifications from non banking apps(eg-Whatsapp,Gmail,Facebook etc) are ignored/blocked.
- Notification Filtering: Incoming notifications are first processed locally using filtering and pattern-matching rules. Notifications that can be confidently identified as irrelevant, such as promotional or non-transaction alerts, are filtered out before AI processing.
- AI Processing for Ambiguous Notifications: Because banks and payment services use many different notification formats and languages, some notifications cannot be reliably classified using local rules alone. When a notification may contain a transaction but cannot be confidently parsed locally, the relevant notification text is sent through a secure AI API to extract transaction details such as amount, merchant, transaction type, and other required fields.
- Not Your SMS Inbox: DNC Flow does not upload or synchronize your complete SMS inbox or notification history to our servers. Notifications are processed only as part of the automatic transaction-detection system.
- Irrelevant Notifications: The filtering system is designed to exclude OTPs, promotional messages, personal messages, and other non-transaction notifications. However, because notification formats vary, an irrelevant notification may occasionally pass the local filter and be evaluated by the AI parser before being discarded.
- AI Service Provider: When AI processing is required, notification content is transmitted to our AI service provider through an encrypted API connection. OpenAI states that data sent through its API is not used to train or improve its models by default. OpenAI's standard API configuration may retain certain API content in abuse-monitoring logs for up to 30 days.
3. Local Storage Architecture
Your actual financial ledger—including individual expense entries, monthly totals, custom categories, and assigned bank ledgers—is stored directly within your device's isolated local storage partition. We do not sync your expense database to an external cloud server.
4. Payments & Billing
When purchasing premium scan plans or memberships, transactions are processed securely through certified payment handlers (such as Google Play In-App Billing or verified payment gateways). DNC Flow does not view, collect, or store your debit/credit card numbers or UPI PINs.
5. Advertising & Third-Party Trackers
DNC Flow does not run third-party display ad networks, nor do we sell, rent, or trade your personal or financial data to data brokers, lending institutions, or marketers.
6. Contact & Data Inquiries
For any privacy questions, account deletion requests, or support inquiries, contact the development team at:
Email: dncsoftwarehelp@gmail.com