Privacy and data storage

1. Who we are and where this notice applies

Finance by Lio is an offline-first Android personal finance application developed by Cecilio B. Soliven Jr. under the Lio's POV brand in the Philippines. This notice covers the Android app and the separately hosted Finance by Lio marketing website, including its interactive demo and APK download page. The app and website handle different kinds of information, as explained below.

The developer is the contact point for questions about the product and processing under the developer's control. Official support and privacy email: support@finance.liospov.com.

2. Financial information you choose to enter

In the app you may record a display name; Cash, Savings Account and custom-wallet names and balances; opening balances; income, expenses, categories, notes and dates; debts and creditors; amounts due and repayments; budgets; Pay Cycle receivables; jewelry details and photographs; pawnshop terms and obligations; and app settings. Which fields contain personal information depends on what you enter.

The app does not require online banking passwords, card PINs, recovery phrases, or credentials for external AI services. Enter information about another person only when you have a lawful reason to record or share it.

3. Local storage and device protection

The reviewed Android Build 68 stores working finance records in a database on your device, with device-local preferences. Core tracking does not require a Finance by Lio online account, and the marketing website cannot read your Android finance database. The Android app can use the phone's system credential authentication where supported; the app does not collect a copy of your biometric templates.

Offline-first does not mean that every local database field is encrypted. Anyone with access to your unlocked or compromised device or to copies you export may be able to see financial information. The app is configured to disable standard Android app-data backups, but that does not control user-created external copies.

4. Why information is processed

Information is used on your device to provide the features you choose, including finance tracking, calculations, budget and Pay Cycle comparisons, reminders, local reports, backups, restore, preferences and access controls. Product update checks and APK downloads use the internet for version information and file delivery; they are not designed to upload your financial ledger.

The website and its hosting providers may process network/request metadata to deliver pages and downloads, maintain security, diagnose failures and prevent abuse. Appropriate lawful grounds are assessed according to the purpose and applicable Philippine law; agreeing to product Terms is not blanket consent to unrelated personal-data processing.

5. Password-encrypted backup and restore

The app provides user-initiated password-encrypted JSON backup export and restore. You choose a destination using Android's document picker, which may include local storage or an external provider such as your own Google Drive. The backup needs the password for restore. Restoring an older backup can replace newer local records; keep independent copies and safeguard the password.

Encrypted backup files are distinct from shared financial reports. The reviewed Build 68 does not provide automatic cloud synchronization of finance records. Files you save to external storage remain subject to that storage provider's practices and may persist after app uninstall. The existence of non-user-facing backup helper code does not establish an enabled automatic backup feature.

6. Financial reports and sharing with external AI or other apps

Build 68 offers a financial report preview with configurable reporting period and inclusion choices. It can include income and expenses; debt and installment details; exact wallet/opening balances; and individual transaction dates, wallet names or notes. The reviewed defaults leave debt details, exact wallet balances and individual transaction details off; always check the actual preview before sharing.

The exported JSON report contains the selected information. The PDF is a limited summary and does not include the same level of transaction detail. These JSON and PDF reports are NOT encrypted backups. If you tap Share, Android opens its chooser for a recipient app. You may have to attach the file yourself in some services. The app does not automatically send records to an AI provider or give a provider ongoing access to the device database.

A recipient AI assistant, messaging app, cloud storage provider or other application handles received files under its own privacy notice, settings and retention rules. Do not share secrets, financial records about others without authority, or information you are not comfortable disclosing to that recipient.

7. Connections, service providers and recipients

Version checks and APK download requests use a Cloudflare-hosted update distribution service. Network operators may process ordinary request metadata such as IP address, timestamp, device/browser information, requested path and security indicators. The website may also be hosted through Cloudflare. The developer does not operate cloud transaction synchronization for the reviewed Build 68.

Where you choose to export or share a file, the destination provider receives it under that provider's conditions. The reviewed website does not collect finance ledgers or provide payment checkout. Financial-record selling, targeted-advertising data transfers and mandatory online accounts are not features of the reviewed website and Build 68. Any later license activation, analytics or payment processing requires disclosure updates before launch.

8. Android permissions, notifications and updates

Depending on Android version and enabled features, the app may request notifications for financial reminders, use system file/photo pickers for exports or pictures, and request installation permission through Android when installing an APK update. Reminders depend on your device settings and may arrive late or not at all. System authentication is performed by Android, not by collecting your fingerprint or face template into the finance database.

9. Retention, deletion and external copies

Local finance records remain on the device until you edit or delete them, restore over them, clear app data, or uninstall the app, subject to device behavior. Uninstalling does not delete reports or backups already saved elsewhere. You should delete those copies directly from the destination you chose when no longer required.

For website or APK request metadata, actual retention depends on the configured hosting and security service and any applicable legal obligations. A precise storage period must not be claimed without verifying the live Cloudflare settings. Contact the developer for questions about metadata held under the developer's control.

10. Your rights and choices

You choose whether to enter records, make backups, enable notifications or share reports. Under the Philippine Data Privacy Act of 2012, individuals may have rights to information, access, correction, objection, erasure or blocking, portability, damages and complaints, as applicable. For data that exists only on your phone and is not accessible to the developer, use the available device/app controls.

For privacy questions or requests involving information handled by the website or developer, contact support@finance.liospov.com. National Privacy Commission guidance: https://privacy.gov.ph/data-subject-rights/.

This notice explains relevant processing practices; reading it or accepting the Terms of Use does not automatically mean you consent to optional processing unrelated to your requested app features.

11. Security and children

The developer aims to apply reasonable safeguards to systems under the developer's control, including distribution and website infrastructure, but no system is risk-free. Qualifying incidents will be evaluated and handled under applicable law. Protect your device lock, backup password and unencrypted report exports.

Finance by Lio is not designed specifically for children. If a minor uses the service, a parent or guardian should supervise its use as appropriate.

12. Updates to this notice

This notice must be reviewed when material processing changes occur, including online licensing, payments, analytics, remote account features or new forms of sharing. Material changes should be communicated through an accessible notice and any additional consent or notification required by law. A revised app notice does not retroactively replace the copy supplied with an older installed APK.

Website: hosting, downloads and request metadata

The website and update service are separate from the Android database. Requests to the site or APK endpoints can be processed by Cloudflare for delivery, reliability and security. The precise log retention, any security cookies and administrator access depend on production configuration and must be verified before launch. The reviewed website source contains no finance-record upload, account sign-in, payment form or added advertising analytics.

Ordinary caching or browser history may retain public website resources. The website's dynamic download status depends on the official release manifest; it does not verify APK signatures on every page visit.

Website: interactive phone demonstration

The phone demonstration uses fictional wallets, transactions, debts and reports. Its public demo PIN 1234 is only an illustration, not authentication protecting personal data. Sample changes are kept in the browser page session memory and reset when you reload or choose Reset Demo; they are not synchronized with your Android app.

Do not enter real financial information into a public demo. The demo is not a place to upload personal records or create a financial account.