Privacy Policy

Back On Track – personal finance app
Effective date: October 24, 2026 · Last updated: October 28, 2026

This Privacy Policy explains how the Back On Track mobile app (the "App") handles your information. The App is provided by Deserve & Associates Ltd (DASL) ("DASL", "we", "us"), a company located in Trinidad and Tobago.

1. Information stored on your device

To help you track your finances, the App stores the information you enter, such as:

• income sources (name, type, amount, how often you're paid, next pay date);
• expenses (amount, currency and exchange rate, category, optional name, shop or payee, tags, date and notes);
• recurring bills and debts (amounts, due dates, balances, interest rates and reminder settings);
• savings and investment accounts, deposits, withdrawals, values and savings goals;
• your accounts (bank accounts, cash and credit cards), their balances, overdraft or credit limits, pay received and money moved between them;
• payroll deductions (for example pension contributions) and standing orders you set up;
• if you use Net worth: the names and your own estimated values of property, vehicles and other things you own, and other money you owe, used only to work out your net worth on your device;
• if you choose to fill in My profile: your year of birth, your main work situation (for example full-time, self-employed or retired), whether you own your home and your number of dependents. Every question is optional and can be cleared at any time. These details are used only on your device to tailor budgeting tips;
• your App settings (for example your exchange rate and reminder preferences).

This information is kept in an encrypted database on your device. The encryption key is created on your device and stored in your device's secure storage (Android Keystore or Apple Keychain). DASL has no servers that receive this information and cannot see, access or recover it.

Importing bank statements. If you choose to import a statement file (for example a PDF or CSV downloaded from your online banking), the App reads it on your device. If a PDF statement is protected by a password, you type the password to open it; it is used only for that and is never stored. The file is never uploaded, is read straight into memory and is not stored. You review every transaction before anything is saved; only the transactions you approve are saved, in the same encrypted database as the ones you enter yourself, together with a fingerprint of each statement line so it isn't imported twice. Account numbers are not stored (at most the last 4 digits, to recognise the account next time). The App also remembers, on your device only, the column layout of your bank's file and the categories you choose for payees, so your next import is quicker.

Scanning receipts. If you choose to scan a receipt, you take or pick a photo and the App reads the shop, total and date from it on your device, using your device's own text recognition (Google ML Kit on Android, Apple Vision on iPhone and iPad). The photo and the text read from it are never uploaded. You check and can change everything before the expense is saved. The photo is not kept unless you turn on Keep receipt photos in Settings (off by default); then each photo is encrypted (AES-256-GCM, with a key in your device's secure storage) and kept in the App's private storage with its expense. Kept photos are not included in backups. On Android, Google's ML Kit component may send Google anonymous technical diagnostics about how it runs (such as device model, operating system and app version, and how long recognition took); it never sends your photos or the text read from them, and Google says it does not share this data with third parties.

On Android, the App excludes its data from automatic Google cloud backups and blocks screenshots and the recent-apps preview, so that your financial details are not copied elsewhere without your knowledge.

2. Biometric and device unlock

The App can be unlocked with your fingerprint, face or device PIN. This check is performed entirely by your device's operating system. The App only receives a "success" or "failure" result. We never collect, store or have access to your biometric data.

3. Optional shop name suggestions (Google Maps)

When you add an expense, the App suggests shop names from businesses you've used before. That works offline. If you choose to turn on "Suggest shop names" in Settings, the App can also suggest business names from Google Maps (Google Places API). This feature is off by default, and you can turn it off at any time.

When it is on, the App sends the following directly from your device to Google:

• The text you type in the shop or payee field (3 characters or more), with a country code (Trinidad and Tobago by default, or your phone's region) and your language setting.
• Your approximate location, only if you have given the App location permission, so that nearby businesses can be suggested when you open the expense form. If you don't grant location permission, suggestions still work from what you type.
• Technical information that Google receives with any internet request (such as your IP address) and identifiers of the App itself (its package name and signing certificate) that are used to secure our API key.

No financial information is sent to Google. Amounts, categories, names, tags and balances are never sent. When you pick a suggestion, only the business name and Google's place identifier are saved with your expense, on your device.

Google processes these requests under its own terms and privacy policy: Google Privacy Policy and Google Maps Terms of Service. DASL does not receive this information.

4. Device permissions

5. Backups

Because your data never leaves your device, it would be lost if your phone were lost, damaged or reset. The App therefore lets you create a backup file when you choose to.

• Backups are encrypted with a password you choose (AES-256-GCM; the key is derived from your password with PBKDF2-SHA256). Without the password, the file cannot be read, including by us.
• You decide where the file goes (for example Google Drive, iCloud Drive, email or your computer) using your device's share options. The App never uploads backups anywhere by itself. Any service you save to handles the file under its own privacy policy.
• If you choose to let the App remember your backup password, it is stored in your device's secure storage and is never included in a backup.
• If you forget your backup password, DASL cannot recover the backup.

6. What we do not do

• We do not collect, store or have access to your personal or financial information.
• We do not require an account, email address or phone number to use the App, and the App never asks for personally identifiable information such as your name, address or ID numbers.
• We do not use advertising, analytics, crash-reporting or tracking tools.
• We do not sell, rent or share your information with anyone.
• We do not connect to your bank or read your bank messages.

The app stores (Google Play and the Apple App Store) may collect information about your download and use of apps under their own privacy policies. That collection is outside the App and our control.

7. Subscriptions and payments

On Android, Back On Track is offered as a monthly or yearly subscription, with a free trial for new subscribers. Subscriptions are sold, charged, renewed and cancelled entirely by Google Play:

• Your payment details are handled by Google. DASL never receives your card, bank or billing information.
• To know whether you're subscribed, the App asks the Google Play app on your phone. Google Play tells the App only whether there is an active subscription (with a purchase token and Google's digital signature). The App keeps just the date it last confirmed your subscription on your device, so it can work offline for a few days.
• No financial information from the App (income, expenses, balances, savings or profile) is ever sent to Google Play or to us as part of this.
• You can manage or cancel your subscription at any time in Google Play › Payments & subscriptions. If you cancel during a free trial, you won't be charged.
• Even without an active subscription, you can still back up your data from the App.

Google processes purchases under the Google Privacy Policy and the Google Play Terms of Service.

8. Exchange rates

You enter exchange rates (for example US dollar to TT dollar) yourself. The App does not download exchange rates, so this feature does not use the internet.

9. Keeping and deleting your data

Your data stays on your device until you delete it. You can edit or delete individual entries in the App at any time. To delete all App data, use either of these:

• In the App: go to Settings → Delete my data → Everything. After you confirm, the App erases its encrypted database and encryption key, your settings, any remembered backup password, scheduled reminders, any kept receipt photos and their key, and any backup files still held in the App's own storage. The App then starts fresh, as if newly installed.
• Uninstall: on Android, uninstall the App or go to Settings → Apps → Back On Track → Storage → Clear storage. On iPhone or iPad, delete the App.

To delete only your transactions (expenses, money in and out, transfers, imported statements and kept receipt photos) while keeping your accounts, bills, income and settings, choose Settings → Delete my data → Just my transactions.

Deleted data cannot be recovered unless you kept a backup file. Backup files you saved elsewhere must be deleted from wherever you stored them. As we hold none of your data, there is nothing for us to delete on our side.

10. Security

We protect your information with an encrypted on-device database, device-bound encryption keys, biometric or PIN unlock, automatic re-locking when the App is in the background, and password-encrypted backups. No method of storage is completely secure. Please keep your device protected with a screen lock and keep your operating system up to date.

11. Children

The App is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect information from anyone, including children.

12. Your rights

Because your information is held only on your device, you have direct control over it. You can view, correct, export (by backup) and delete it at any time from within the App or as described above. We respect applicable data-protection laws, including the Data Protection Act, 2011 of Trinidad and Tobago to the extent it is in force. If you have questions or concerns about your privacy, please contact us.

13. Changes to this policy

We may update this Privacy Policy, for example when we add new features. We will post the updated policy at this address and change the "Last updated" date above. If a change affects how your information is handled (for example a new online feature), we will also tell you in the App before the change takes effect, and any new feature that sends data off your device will be optional.

14. Contact us

Deserve & Associates Ltd (DASL)
Avidan Estate, Cunupia, Ragoonanan Road
Trinidad and Tobago
Email: dasl.systems.tt@gmail.com
Website: backontrackfinancial.com