Your data, our boundaries.
Privacy is not one sentence. It is a set of technical limits: what the app collects, which service processes it, what is optional, and where you keep control.
What each service does.
Niqdah uses Firebase as the app backend. Resend is limited to forwarded email import. OpenAI is limited to explicit AI Chat requests. The Android flavor determines whether new-SMS capture is even present.
Android app
Finance planning, account state, local parsing, review, and private-build SMS capture.
Public builds contain no SMS permission or receiver. Private SMS capture is opt-in.
Firebase
Authentication, synced finance data, notifications, pending imports, and protected server workflows.
Firestore rules isolate user data; backend-only mappings and secrets are not client-readable.
Resend
Receives messages forwarded to a private Niqdah address and exposes content to the verified backend.
Signed events, revocable routing, sender policy, rate limits, and provider retention boundaries apply.
OpenAI
Answers an AI Chat request using the minimum context submitted for that request.
The API key stays in Firebase Secret Manager. Raw bank-message text is not sent by default and AI cannot autonomously save finance data.
What Niqdah does not do.
These boundaries are architectural commitments, not toggle defaults.
The public APK contains no SMS permission, receiver, notification listener, or accessibility capture.
Email automation uses a forwarding rule and private address, not Gmail or Outlook OAuth.
AI can propose guidance; reviewed Android actions remain the write gate.
OpenAI and provider credentials stay in protected server secret stores.
The inbound processor stores only sanitized structured evidence needed for review.
SMS, email, and manual imports prepare pending drafts for the user.