Legal

Privacy Policy — Baaki

Effective date: 22 August 2026
Last updated: 22 August 2026
App: Baaki
Platform: Android
Developer: Nainnie Labs
Contact: hello@nainnielabs.com

Baaki is a personal finance app made by Nainnie Labs. This policy explains what Baaki does with your information, in plain terms.

The short version: your financial data stays on your phone. There is no account, no sign-up, no server, and no sync. Nainnie Labs cannot see your transactions, balances, budgets, goals, or the people you lend to — not because we promise not to look, but because that data is never sent anywhere for us to look at.

Baaki is not a fully offline app, and it would be wrong to say so. Two things do reach the internet, and both are described below.

1. Information Baaki stores on your device

Everything you enter into Baaki is stored locally on your phone, in a database encrypted with SQLCipher. This includes:

Accounts, balances and transactions
Budgets, savings goals and recurring bills
People you lend to or borrow from, and the amounts
Categories, tags, notes and merchant names
Your app settings, including theme, text size and contrast

None of this is transmitted to Nainnie Labs or to anyone else. There is no server to transmit it to.

We have no access to it. If you lose your phone or uninstall the app, we cannot recover your data for you, because we never had it.

2. Information Baaki does not collect

Baaki contains no analytics, no crash reporting, and no tracking of how you use the app. The app's own code contains no network client of any kind.

Baaki does not collect your name, email address, phone number, contacts, location, or device identifiers for its own purposes.

3. Advertising (free tier only)

Baaki's free tier shows ads, supplied by Google AdMob. This is the main way information leaves your device, so it is worth being precise about.

What is shared: to request an ad, Google's advertising service receives standard information from your device, which may include your device's advertising ID, IP address, device type and coarse location derived from the IP address. This is how ad networks work generally, and Baaki does not change it.

What is never shared: Baaki does not send your financial data to the ad network. No transaction, balance, budget, goal, merchant, person or note is used to target ads, and none is transmitted to Google for advertising purposes.

Your choice about personalised ads. Where the law requires it (including the EEA and the UK), Baaki shows Google's consent form before any ad is requested.

If you consent, ads may be personalised.
If you decline, ads still appear but are non-personalised — Google is instructed not to use your data to select them.
If you have not yet been asked, or the form cannot be shown, no ads are requested at all.

You can change this choice at any time from the consent form. Declining does not restrict any feature of Baaki. No part of the app is locked behind advertising.

Removing ads. Buying Baaki Pro removes all ads, and with them these ad requests. Baaki also offers an optional rewarded ad which removes ads for 24 hours — that is entirely your choice, and it unlocks no feature.

Google's handling of this data is governed by their own policy: policies.google.com/privacy

4. Purchases

If you buy Baaki Pro or restore a previous purchase, the app asks Google Play what your Google account owns. Google Play processes the payment; Nainnie Labs never sees or stores your payment details.

Your financial data is not involved in this and is not sent to Google Play.

5. Auto-capture (optional, off by default)

Baaki can read bank notifications to pre-fill a transaction for you, saving you from typing it. This feature is off unless you turn it on, and it requires you to grant notification access in your phone's system settings. You can revoke that access at any time.

This runs entirely on your device. Notification text is never uploaded anywhere.

What Baaki keeps is deliberately limited. The message itself is not stored. Baaki keeps:

the amount it found,
the merchant name it found,
and a structural fingerprint — a pattern of where the amount and merchant sit in that bank's message format, which contains none of the message's words, numbers or card digits.

The fingerprint lets Baaki read the next message from the same bank, and the merchant name lets the same shop land in the same category. Nothing is added to your records until you review it and tap Add.

Baaki does not request SMS permission and cannot read your text messages.

6. Backups and exports

Backups and CSV exports are files you create. Baaki writes them to its own storage on your device and then hands them to you through Android's share or save dialog, where you choose what happens to them.

Baaki never uploads a backup anywhere. If you save one to a cloud drive or send it to someone, that is your action, and that copy is then governed by whichever service you sent it to. A CSV export is not encrypted, and the app tells you so before you create one.

Note that if your phone has Android's own automatic backup enabled, Android may include the app's settings in your device backup. This is a system feature, controlled by your Google account settings, not by Baaki.

7. Notifications

Baaki can send you reminders — an upcoming bill, a budget threshold, a debt reminder. These are generated on your device; there is no push server, and nothing is sent to us to trigger them.

If you have an app lock enabled, reminders deliberately withhold amounts and names while the app is locked.

8. Security

Your data is stored in a database encrypted with SQLCipher.
You can set an app lock (PIN or biometric). Baaki never sees your PIN, and there is no way for us to recover or reset it — there is no server that could.
You can enable a decoy PIN, which opens a separate, separately-encrypted profile. The real profile cannot be opened from a decoy session.
You can enable hide amounts and block screenshots.

No system is perfectly secure, but because your data never leaves your device, there is no Nainnie Labs database of your finances that could be breached.

9. Children

Baaki is not directed at children under 13 and does not knowingly collect information from them.

10. Your rights and choices

Because your data lives on your device and we hold no copy of it, you control it directly:

Access and export it — use Export data (CSV) or create a backup, at any time. Getting your data out is never restricted or paid-for.
Delete it — use Delete everything in Data & backup, or uninstall the app. This is permanent, and we cannot undo it because we hold no copy.
Change your ads choice — through the consent form, at any time.
Turn off auto-capture — in the app, or by revoking notification access in your system settings.

We cannot fulfil a data access or deletion request on your behalf, because we have nothing to access or delete.

11. Changes to this policy

If this policy changes in a way that affects what leaves your device, the updated policy will be published here with a new date, and material changes will be noted in the app.

12. Contact

Questions about this policy or about Baaki:

Nainnie Labs
Email: hello@nainnielabs.com
Website: https://nainnielabs.com