Tohobil privacy policy
Last updated: 8 October 2026
Tohobil (তহবিল) is a personal money app for Android, made by Sabuj Biswas in Bangladesh. This policy explains what happens to your information when you use it.
In short
- Your entries stay on your phone. There is no Tohobil account and no Tohobil server, and the developer cannot see your data.
- No ads, no analytics or tracking, and no selling of data.
- Your data leaves your phone only when you choose to back it up or share something, and backups are locked with a password that only you know.
What the app stores
The app keeps your accounts, entries (amounts, dates, categories and notes), budgets, savings goals, debts, recurring bills and settings in its private storage on your phone. Other apps cannot read this storage.
Android's automatic cloud backup and phone-to-phone transfer are turned off for Tohobil, so Android does not copy this data to Google or to another phone.
When data leaves your phone
This happens only when you do one of the following.
- Backup to a file. You choose where to save the file. It is encrypted with your backup password (AES-256-GCM, with the key made from your password using PBKDF2). Nobody can open it without the password, including the developer. If you forget the password, the backup cannot be recovered.
- Google Drive backup (optional). If you sign in with Google and turn it on, Tohobil saves the same encrypted file once a day in its own hidden folder in your Google Drive. Tohobil can only see that folder, not your other Drive files. Google handles the sign-in and stores the file under Google's privacy policy. Your backup password is kept on your phone, encrypted by Android's secure key store, so that the daily backup can run.
- Sharing. When you share a monthly report picture or send a debt reminder on WhatsApp, you choose the app and the people. Tohobil only passes the picture or text to the app you pick.
Features that use your phone
- Receipt scanning. You take or choose a photo, and Google ML Kit reads the text on your phone. The photo is deleted from the app after it has been read. ML Kit may contact Google to get updates and to send anonymous statistics about how the feature performs. It does not send your photo.
- Paste SMS. Tohobil reads your clipboard only when you tap "Paste bKash / Nagad SMS". It has no permission to read your text messages.
- Fingerprint lock. Android checks your fingerprint or face. Tohobil never receives that data; it only learns whether the check passed.
- Home-screen widget. If you add it, the widget shows this month's spending and your balance on your home screen. When the fingerprint lock is on, it hides the amounts.
- Fonts. The app may download its fonts from Google Fonts through Google Play services.
Permissions
| Permission | Why |
|---|---|
| Internet, network state | Google Drive backup and fonts |
| Fingerprint / biometric | The optional app lock |
| Run at start-up, background work, keep awake | Adding recurring bills on time and the daily Drive backup |
Tohobil does not ask for access to your SMS, contacts, location, microphone or files. To scan a receipt it opens your phone's camera app, and only when you ask.
Deleting your data
- On the phone: uninstall Tohobil, or go to Settings → Apps → Tohobil → Storage → Clear storage.
- Google Drive backup: in Google Drive on the web, open Settings → Manage apps, find Tohobil and choose "Delete hidden app data".
- Backup files you saved: delete them like any other file.
Children
Tohobil is a general money app and is not directed at children under 13.
Changes
If this policy changes, the new version will be posted at the same address with a new date.
Contact
Sabuj Biswas, Bangladesh. Email: sabujbiswas2015@gmail.com
সংক্ষেপে (বাংলা)
- আপনার সব হিসাব আপনার ফোনেই থাকে। তহবিলের কোনো অ্যাকাউন্ট বা সার্ভার নেই, ডেভেলপারও আপনার তথ্য দেখতে পান না।
- কোনো বিজ্ঞাপন নেই, ট্র্যাকিং নেই, তথ্য বিক্রি নেই।
- আপনি নিজে ব্যাকআপ নিলে বা কিছু শেয়ার করলেই কেবল তথ্য ফোনের বাইরে যায়। ব্যাকআপ আপনার নিজের পাসওয়ার্ডে লক করা থাকে; পাসওয়ার্ড ছাড়া কেউ, এমনকি ডেভেলপারও, তা খুলতে পারেন না।
- গুগল ড্রাইভ ব্যাকআপ (চাইলে) যায় আপনার নিজের ড্রাইভে তহবিলের আলাদা গোপন ফোল্ডারে। তহবিল আপনার ড্রাইভের অন্য কোনো ফাইল দেখতে পায় না।
- "বিকাশ / নগদ এসএমএস পেস্ট করুন" চাপলেই কেবল ক্লিপবোর্ড পড়া হয়। তহবিল আপনার এসএমএস পড়ার অনুমতি চায় না।
- রসিদের ছবি ফোনেই পড়া হয়, তারপর অ্যাপ থেকে মুছে ফেলা হয়।
- ফিঙ্গারপ্রিন্ট যাচাই করে অ্যান্ড্রয়েড; তহবিল আপনার ফিঙ্গারপ্রিন্ট পায় না।
- সব তথ্য মুছতে অ্যাপটি আনইনস্টল করুন, বা ফোনের সেটিংস → অ্যাপ → তহবিল → স্টোরেজ → স্টোরেজ মুছুন।