NijKosh Privacy Policy

Last updated: 15 August 2026

NijKosh is a local-first personal finance app for Android developed and published by Koshtak. This policy explains how NijKosh accesses, processes, stores, and protects data.

Summary

• NijKosh has no user account, advertising, analytics, telemetry, cloud sync, or developer-operated backend.
• Transaction-alert processing happens on the user's device.
• NijKosh does not sell or share personal or financial data.
• Each installation encrypts its local ledger with its own non-exportable key held by Android Keystore. Application backup is disabled.
• Raw SMS message text is discarded after local processing and is not stored.
• Users can explore the app with synthetic demo data without granting message access.

Message access and processing

On supported Android devices, NijKosh requests only the Android READ_SMS runtime permission. This provides read-only message access; NijKosh cannot send, edit, or delete messages. Access is requested only after an in-app disclosure and the user's explicit Android permission consent.

By default, when access is granted, NijKosh checks the sender, timestamp, and text of up to 5,000 recent messages from the previous 12 months to identify bank and payment transaction alerts. A user can also choose a 1, 2, 3, or 5-year history rescan in Settings. Those rescans check up to 5,000 messages per selected year and never more than 25,000 messages. This processing happens locally on the device. Messages that are not identified as supported financial transaction alerts are discarded. Raw message text is also discarded after local transaction parsing. NijKosh does not upload or transmit SMS messages.

Message access powers automatic transaction pickup when NijKosh opens or returns to the foreground and scans the inbox. If a user denies or later removes this permission, NijKosh cannot pick up future transaction alerts automatically. Manual transaction entry remains available. Permission can be removed at any time through Android settings.

Data stored on the device

For detected transactions, NijKosh stores only the fields needed to present and manage the local ledger, such as amount, currency, direction, date, detected merchant or category, masked account suffix, confidence information, and user edits. Raw SMS message bodies and Android inbox row identifiers are not stored.

The local ledger is encrypted with AES-256-GCM. A separately generated, non-exportable key is created for each NijKosh installation and held by Android Keystore. The key is not included with the encrypted ledger, and Android application backup is disabled. NijKosh production builds do not log message text, amounts, account identifiers, or transaction references.

Network access, sharing, and third parties

The Android release does not request Internet permission. NijKosh does not send transaction data to its developer or to third-party analytics, advertising, or cloud services. Personal or financial data is not sold, rented, shared for advertising, or used to train machine-learning models.

Google Play and the Android operating system operate under their own privacy terms when distributing and running the app.

User controls and deletion

Users can review and correct detected transactions, add manual entries, and delete the locally stored ledger from Settings > Your data > Clear data. Uninstalling NijKosh also removes its app-local data because application backup is disabled. SMS permission can be revoked through Android settings.

NijKosh does not create user accounts, so there is no server-side account or remote account data to delete.

Children

NijKosh is an adult personal finance tool and is not designed for children.

Changes to this policy

This policy will be updated before any future feature materially changes how data is accessed, processed, stored, or shared. The updated date above will identify the latest revision.

Contact

Questions about this policy may be sent to info@koshtak.com.