Last updated: September 27, 2026
Mero Paisa ("the app") is a personal finance tracker for Android. Your privacy is important to us. This policy explains how the app handles your information.
Nothing in Mero Paisa needs an account except Arthiq and the Group and Business modes, which are part of Mero Paisa Pro. If you create a Mero Paisa account to use them, our server holds the email address, first and last name you give, your password (only as a hash, never in a form we could read back), and the Arthiq usage records described below, and whether the account is on Pro. It is the same account the Mero Paisa web app signs in with. Our server emails that address a link to verify it is yours, and again only if you ask for a new link; the account cannot sign in until it is verified. We send no other email. We do not sell your personal information, and there is no analytics, no crash reporting, no advertising and no third-party tracking code in the app.
The app does send your data in one situation, and only one: when you use Arthiq to ask a question about your finances. That is described in full under Arthiq below. Everything else the app does — including reading SMS and notifications, if you switch those on — happens on your device and stays there.
While you are signed in, the app also asks our server once each time it opens, and again when you choose Group or Business mode, whether your account is on Pro. That request carries your sign-in and nothing from your ledger, and the answer is your name and your plan.
These six, and nothing else. Several permissions that the app's libraries would otherwise add — access to your photos, videos, audio and external storage — are explicitly removed from the released app, because it has no use for them.
| Permission | What it is for |
|---|---|
USE_BIOMETRIC | The optional app lock. |
USE_FINGERPRINT | The same lock on Android 9 and older. Capped at API 28 so newer devices are never asked for it. |
READ_SMS | Reading bank transaction alerts, from the senders
you link to an account yourself. Not RECEIVE_SMS — nothing wakes
the app when a message arrives. |
POST_NOTIFICATIONS | Delivering the two reminders, if you switch them on, and telling you an Arthiq answer has arrived while you were elsewhere. |
RECEIVE_BOOT_COMPLETED | Restoring those two reminder alarms after a restart or an app update, which Android otherwise drops. |
INTERNET | Asking a question with Arthiq, signing in, and checking whether your account is on Pro — nothing else. Earlier versions of the app did not declare it at all. |
The app can read your bank's transaction alerts so you do not have to type them in. This is off until you set it up, and setting it up means picking the sender for each account yourself from the list of senders on your phone — only their names are listed, and no message is read to build that list.
Once set up, the app looks in your inbox only when you open it. It has no background service and does not receive messages as they arrive. The query it runs always names the senders you configured, so messages from anyone else are never returned to it. What it finds is shown to you to approve, edit or ignore — nothing is recorded without you.
Message contents are read on your device and never transmitted. A message is parsed where it is read and the text is not stored, so there is nothing left for anything else to send — including Arthiq, which sends the entry you approved and not the message it came from.
eSewa, Khalti, IME Pay and most mobile-banking apps confirm a payment with a push notification and nothing else — there is no SMS to re-read later. So the app can also read notifications, from the apps you link to an account.
Nothing is read until you grant notification access in your phone's own system settings. The app cannot grant this for you; it can only send you there. Once granted, it reads text only from the packages you have linked and keeps what it finds in a small, bounded buffer on your device. As with SMS, every match waits for you to approve, edit or ignore it.
Unlike the SMS feature, this one does listen in the background: a notification that is not seen as it is posted is gone, so there is nothing to re-read later. It is the only part of the app that runs in the background. Captured text is parsed on your device and is not stored, so it is not among what Arthiq sends; the entry you approve from one is, like any other entry.
The app can post two local reminders: one in the evening, and one on Sunday morning at the start of the budget week. Both are optional and are scheduled by your phone, on your phone. No reminder contains or transmits any of your figures.
All information you enter — transactions, money sources, savings goals, spending limits, debts, and family member tags — is stored locally on your device only, in a single database file in the app's private storage. It is never uploaded for storage, never backed up to us, and we hold no copy of it. The one time it is transmitted at all is when you ask Arthiq a question; see below.
To be precise about what protects it: that file is not separately encrypted by the app. It is protected by Android's app sandbox, which keeps other apps out, and by your device's own encryption. For a lock on top of that, switch on the app lock below.
Any backup you create (for example, a .bak backup or an
.xlsx export) is saved to a location you choose on your own device or
storage, or handed to the app you choose through your phone's share sheet. These files
are entirely under your control; we never receive or access them.
Arthiq answers questions about your own finances — how you are tracking against a savings target, where your spending is going. Answering one needs a server, so this is the only part of the app that is not offline.
What is sent. The question you typed, and a copy of your ledger: your transactions, money sources, savings goals and targets, spending limits, debts, family member tags, and your currency and language. This includes the notes on each transaction, which often contain names, phone numbers and partial card numbers copied in from bank messages. It also includes figures the app has worked out from those entries, such as your monthly totals by category.
When it is sent. Only when you type a question and ask it. There is no background sending, no scheduled upload and no sending while you are elsewhere in the app. The first time you ask, the app shows you a notice saying what will be sent and asks you to accept it; if you decline, nothing is sent and the question is not asked.
After you ask. A question you have asked keeps waiting for its answer if you leave the Arthiq screen or switch to another app, and the app shows a notification when the answer arrives. Nothing new is sent for that — it is the answer to the question you already asked.
What is kept on your phone. Your questions and Arthiq's answers are saved on your phone, under the account you asked with, as separate chats you can go back to from Previous chats. They are not part of the backup file, and you can delete any chat from that list at any time. Having an answer read aloud uses your phone's own text-to-speech voice; nothing is sent anywhere to do it.
How many messages. A free account can send Arthiq 3 messages a month and a Pro account 20. Every message counts, a greeting included. For each message, our server keeps a usage record against your account: when it was sent, which AI model answered it, how much text went in and out (counted in tokens), and what that is estimated to have cost. We use these records to run the allowance and to see what Arthiq costs to provide, and we can see them, with the account's email address, on an admin page. They are all it keeps about your messages — not the messages, the answers or your ledger — and they are deleted with your account.
Where it goes. To the Mero Paisa API, which passes it to Claude, an AI service operated by Anthropic, to produce the answer, and returns that answer to your phone. We do not use your data to train any model, and we do not sell it or share it with anyone else.
What you can do. Not using Arthiq means none of this happens — the rest of the app is unchanged and still works with no connection at all. If you would rather not send your notes, you can clear or edit them before asking; the app sends whatever the entry holds at the time you ask.
If you enable biometric or PIN app lock, authentication is handled entirely by your device's operating system. The app does not store or transmit your biometric data or PIN — it is only told whether the check passed.
The one place a Google service is involved. The app can ask whether a newer version is available and hand you over to the Play Store to install it. That check runs inside the Play Store app's own process, not ours — Mero Paisa opens no connection of its own for it. Nothing about you or your finances is part of it. If you installed the app some other way, you will never be offered an update this way at all.
The app does not knowingly collect data from children. Nothing in it needs an account except Arthiq, and without one no data about you reaches us at all.
This policy covers the Android app. There is also a browser-based Mero Paisa, which stores your records on a server, and therefore gives different guarantees. The same Mero Paisa account signs in to both, but the two do not share records. Its policy is at meropaisa.app/privacy.
If this policy changes, the updated version will be posted on this page with a new "Last updated" date.
If you have any questions about this policy, contact us at nepcoder.me@gmail.com.