Legal

Privacy Policy — Baaki

Effective date: 22 August 2026
Last updated: 2 September 2026
App: Baaki
Platform: iOS & Android
Developer: Nainnie Labs
Contact: hello@nainnielabs.com

Baaki is a personal finance app made by Nainnie Labs. This policy covers the Baaki app on both Google Play and the Apple App Store, and explains what Baaki does with your information, in plain terms. Where the two platforms genuinely differ, this page says so rather than glossing over it.

The short version: your financial data stays on your phone. There is no account, no sign-up, no server, and no sync. Nainnie Labs cannot see your transactions, balances, budgets, goals, or the people you lend to — not because we promise not to look, but because that data is never sent anywhere for us to look at.

Baaki is not a fully offline app, and it would be wrong to say so. Two things do reach the internet, and both are described below.

1. Information Baaki stores on your device

Everything you enter into Baaki is stored locally on your phone, in a database encrypted with SQLCipher. This includes:

Accounts, balances and transactions
Budgets, savings goals and recurring bills
People you lend to or borrow from, and the amounts
Categories, tags, notes and merchant names
Your app settings, including theme, text size and contrast

None of this is transmitted to Nainnie Labs or to anyone else. There is no server to transmit it to.

No server, no account. The ledger is a single encrypted file on your device. There is nothing to sign up for and nothing to sign in to, and nothing is uploaded, backed up to us, or synced between your devices.

We have no access to it. If you lose your phone or uninstall the app, we cannot recover your data for you, because we never had it.

2. Information Baaki does not collect

Baaki itself contains no analytics, no crash reporting, and no tracking of how you use the app. The app's own code contains no network client of any kind.

That statement is about Baaki. It does not extend to the Google AdMob SDK, which is Google's software running inside the app and behaves as Google's own privacy policy describes — we cannot speak on its behalf. What it receives is set out in section 3, and the rest is governed by policies.google.com/privacy.

Baaki does not collect your name, email address, phone number, contacts, location, or device identifiers for its own purposes.

3. Advertising (free tier only)

Baaki's free tier shows ads, supplied by Google AdMob. This is the main way information leaves your device, so it is worth being precise about.

What is shared on both platforms: to request an ad, Google's advertising service receives standard request information — your IP address, device type, and the coarse location that can be derived from that IP address. This is how ad networks work generally, and Baaki does not change it.

The advertising identifier is where the platforms differ, and it is worth being exact rather than averaging the two. On Android, Google's ad service may also receive the device's advertising ID. On iOS, it does not: Baaki never asks for App Tracking Transparency permission and never calls ATTrackingManager, so the ad SDK cannot reach the IDFA. The app's privacy manifest declares NSPrivacyTracking = false and lists no tracking domains.

Attribution on iOS. The iOS app includes SKAdNetwork identifiers. These let an advertiser know that an install happened, without identifying the person who installed it.

What is never shared: Baaki does not send your financial data to the ad network. No transaction, balance, budget, goal, merchant, person or note is used to target ads, and none is transmitted to Google for advertising purposes.

Your choice about personalised ads. In the UK and the EEA, Google's User Messaging Platform shows the consent form and stores your answer. No ad is requested before you have responded.

If you consent, ads may be personalised.
If you decline, ads still appear but are non-personalised — Google is instructed not to use your data to select them.
If you have not yet been asked, or the form cannot be shown, no ads are requested at all.

You can change this choice at any time from the consent form. Declining ads personalisation never removes any feature of Baaki — no part of the app is locked behind advertising.

Removing ads. Buying Baaki Pro removes all ads, and with them these ad requests. Baaki also offers an optional rewarded ad which removes ads for 24 hours — that is entirely your choice, and it unlocks no feature.

Google's handling of this data is governed by their own policy: policies.google.com/privacy

4. Purchases

Baaki Pro is sold by Apple on iOS and by Google Play on Android. The purchase and its verification are handled entirely by that store — Baaki has no server, and never sees a payment method. Restoring a previous purchase asks the same store what your account already owns.

Your financial data is not involved in this and is not sent to either store.

5. Auto-capture (optional, off by default)

Baaki can read bank notifications to pre-fill a transaction for you, saving you from typing it. This feature is off unless you turn it on, and it requires you to grant notification access in your phone's system settings. You can revoke that access at any time.

This runs entirely on your device. Notification text is never uploaded anywhere.

What Baaki keeps is deliberately limited. The message itself is not stored. Baaki keeps:

the amount it found,
the merchant name it found,
and a structural fingerprint — a pattern of where the amount and merchant sit in that bank's message format, which contains none of the message's words, numbers or card digits.

The fingerprint lets Baaki read the next message from the same bank, and the merchant name lets the same shop land in the same category. Nothing is added to your records until you review it and tap Add.

Baaki does not request SMS permission and cannot read your text messages.

6. Receipt scanning

Reading a receipt happens entirely on the device — Apple Vision on iOS, and the on-device recogniser on Android. The photo and the text pulled out of it never leave your phone and are never uploaded.

7. Backups and exports

Backups and CSV exports are files you create. Baaki writes them to its own storage on your device and then hands them to you through Android's share or save dialog, where you choose what happens to them.

Baaki never uploads a backup anywhere. If you save one to a cloud drive or send it to someone, that is your action, and that copy is then governed by whichever service you sent it to. A CSV export is not encrypted, and the app tells you so before you create one.

Note that if your phone has Android's own automatic backup enabled, Android may include the app's settings in your device backup. This is a system feature, controlled by your Google account settings, not by Baaki.

8. Notifications

Baaki can send you reminders — an upcoming bill, a budget threshold, a debt reminder. These are generated on your device; there is no push server, and nothing is sent to us to trigger them.

If you have an app lock enabled, reminders deliberately withhold amounts and names while the app is locked.

9. Security

Your data is stored in a database encrypted with SQLCipher.
You can set an app lock (PIN or biometric). Baaki never sees your PIN, and there is no way for us to recover or reset it — there is no server that could.
You can enable a decoy PIN, which opens a separate, separately-encrypted profile. The real profile cannot be opened from a decoy session.
You can enable hide amounts and block screenshots.

No system is perfectly secure, but because your data never leaves your device, there is no Nainnie Labs database of your finances that could be breached.

10. Children

Baaki is not directed at children under 13 and does not knowingly collect information from them.

11. Your rights and choices

Because your data lives on your device and we hold no copy of it, you control it directly:

Access and export it — use Export data (CSV) or create a backup, at any time. Getting your data out is never restricted or paid-for.
Delete it — use Delete everything in Data & backup, or uninstall the app. This is permanent, and we cannot undo it because we hold no copy.
Change your ads choice — through the consent form, at any time.
Turn off auto-capture — in the app, or by revoking notification access in your system settings.

We cannot fulfil a data access or deletion request on your behalf, because we have nothing to access or delete.

12. Changes to this policy

If this policy changes in a way that affects what leaves your device, the updated policy will be published here with a new date, and material changes will be noted in the app.

13. Contact

Questions about this policy or about Baaki:

Nainnie Labs
Email: hello@nainnielabs.com
Website: https://nainnielabs.com