This Privacy Policy explains how SilkWallet by Silky Apple Technologies handles information when you use the app. SilkWallet is a personal and family finance app, so the data you enter can include personal and sensitive financial information.
1. Privacy Contact
For privacy, security, account deletion, or data deletion requests, contact us at techsupport@silkyapple.com. You can also use the support link shown in the app.
2. Data You Choose To Add
SilkWallet may handle the information you enter or attach in the app, including transactions, income, expenses, transfers, notes, dates, categories, tags, budgets, budget history, goals, loans, accounts, payment methods, recurring entries, reminders, and reports.
This can also include group/workspace names, member names, member email addresses, roles, invitations, sharing status, workspace settings, receipt images, profile images, exported files, backup files, and spreadsheet reports you choose to create or attach.
Contact names or contact identifiers are used only when you choose a contact from your device while filling a transaction or workspace-related field.
3. Account And Authentication Data
When you sign in with Google, SilkWallet uses your Google account to identify you, create or open your workspaces, and access the Google services needed for sync and backup. This can include your name, email address, profile photo, Google authentication tokens, and Firebase authentication identifier.
4. Where Your Data Is Stored
SilkWallet is designed as a local-first app. Your app data may be stored in these places:
- On your device: app data is stored in the app sandbox. The local database uses SQLCipher encryption, and encryption keys are stored through secure platform storage.
- In your Google Drive: backups, workspace files, and attachments are stored in app-created files or folders in the Google account you authorize.
- In your Google Sheets: spreadsheet reports and workspace sheets are created only for app features you use.
- In Firebase Realtime Database: shared/group workspaces can use Firebase to sync transactions, budgets, members, goals, loans, settings, and related workspace data between authorized members.
- In Cloudflare Workers and Durable Objects: if Cloudflare live sync is enabled for a workspace, shared workspace records and sync metadata may be processed by Cloudflare instead of Google Sheets or Firebase for faster live updates. Invoice and attachment files remain in each user's Google Drive.
- In Google Calendar: if you enable calendar sync, SilkWallet creates or updates calendar entries for due dates and reminders.
5. Google API Services And OAuth Scopes
SilkWallet uses Google Sign-In and Google APIs only to provide the app features you choose to use,
such as secure sign-in, cloud sync, backups, spreadsheet workspaces, shared family workspaces,
attachments, and optional calendar reminders. SilkWallet requests the following OAuth scopes:
email, profile,
https://www.googleapis.com/auth/drive.file,
https://www.googleapis.com/auth/spreadsheets, and
https://www.googleapis.com/auth/calendar.events.
Data Accessed
Google account profile: SilkWallet accesses your Google name, email address, profile photo, Google authentication tokens, and Firebase authentication identifier so you can sign in, identify your profile, and join or manage shared workspaces.
Google Drive: With the drive.file scope, SilkWallet creates, reads,
updates, shares, downloads, and deletes only files and folders that you create with SilkWallet or
open with SilkWallet. This can include SilkWallet folders, backup JSON files, receipt or attachment
files, profile images, Google Sheets files created for SilkWallet workspaces, file names, file IDs,
parent folder IDs, file metadata, app properties, and sharing permissions for invited workspace
members. SilkWallet does not request permission to browse all files in your Drive.
Google Sheets: With the spreadsheets scope, SilkWallet creates, reads,
updates, and deletes SilkWallet spreadsheet tabs and cell values used for app workspaces.
Spreadsheet data can include transactions, income, expenses, transfers, notes, accounts,
categories, budgets, goals, loans, payment methods, reports, member names, member email addresses,
roles, workspace settings, and sync metadata.
Google Calendar: With the calendar.events scope, SilkWallet creates,
updates, and deletes user-visible calendar events for optional due-date and recurring transaction
reminders. Calendar event data can include the transaction title, amount, note, due date, recurrence
rule, and event ID generated by SilkWallet.
Data Usage
Google account profile data is used to authenticate you, display your profile, protect workspace access, match invited member email addresses, and connect your account to Firebase Authentication when shared sync is enabled. Google Drive data is used to create and manage SilkWallet folders, attachments, backups, and workspace files. Google Sheets data is used as a user-controlled workspace store for finance records, family or personal budget data, reports, and app settings. Google Calendar data is used only when you enable reminders, so SilkWallet can create, update, or remove the reminder events you requested.
SilkWallet does not use Google user data for advertising, cross-app tracking, sale of data, or unrelated analytics. SilkWallet does not use Google user data to develop, improve, or train generalized AI or machine learning models.
Data Sharing
We do not sell Google user data, financial data, Drive files, Sheets data, Calendar data, contacts, or attachments. We do not share Google user data with advertising networks or data brokers.
Google user data may be processed by Google services that the app uses, including Google Sign-In, Google Drive, Google Sheets, Google Calendar, Firebase Authentication, and Firebase Realtime Database. If Cloudflare live sync is enabled, workspace data and sync metadata may also be processed by Cloudflare Workers and Durable Objects. When you create or join a shared workspace, workspace data and invited member email addresses may be visible to other authorized workspace members according to their role. When you invite members, SilkWallet may create or update Google Drive permissions for those member email addresses so the workspace can be shared. If you contact support, we use the information you provide only to respond to your request.
Data Storage And Protection
Local app data is stored in the app sandbox. The local database uses SQLCipher encryption, and encryption keys are kept in platform secure storage. Google authentication tokens are handled through Google Sign-In, Firebase Authentication, and platform security mechanisms. Network communication with Google, Firebase, and Cloudflare uses HTTPS/TLS.
SilkWallet files and spreadsheets are stored in your Google Drive and Google Sheets under your Google account. Optional calendar reminders are stored in your Google Calendar. Shared workspace sync data may be stored in Firebase Realtime Database or Cloudflare Workers/Durable Objects and is protected by authenticated workspace access checks and service-side rules. Silky Apple does not operate a separate server that stores your Google Drive files or Google Sheets contents.
Data Retention And Deletion
Google user data is retained only as long as needed to provide the SilkWallet features you use, unless you delete it sooner. Local profile data remains on your device until you delete the profile, uninstall the app, or clear app data. SilkWallet files, spreadsheets, backups, attachments, and calendar events remain in your Google account until you delete them in SilkWallet or from Google Drive, Google Sheets, or Google Calendar.
You can revoke SilkWallet's Google access at any time from your Google Account security settings. To delete your SilkWallet profile and associated local or personal cloud data, open Profile > Account actions > Delete profile in the app. This attempts to remove local data, personal SilkWallet Drive files, SilkWallet Sheets data, optional SilkWallet Calendar reminders, owned Firebase or Cloudflare workspace data where supported, and connected access tokens. You can also request deletion help through our Account and Data Deletion page or by emailing techsupport@silkyapple.com from the Google account used with SilkWallet.
Limited Use Compliance: Silky Apple's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. How We Use Data
We use your data only to provide app functionality, including offline finance tracking, profile switching, backup and restore, family/group sync, invitations, reminders, charts, analysis, exports, calendar entries, and support.
SilkWallet does not sell your personal data, financial data, contacts, or attachments. SilkWallet does not use your financial data for advertising.
7. Sharing And Service Providers
Data is shared only where needed to provide the features you choose:
- Google Drive, Google Sheets, Google Sign-In, and Google Calendar process data for authentication, storage, backup, export, and calendar features.
- Firebase Authentication and Firebase Realtime Database process data for shared workspace authentication and live sync when that backend is enabled.
- Cloudflare Workers and Durable Objects process shared workspace data and sync metadata when Cloudflare live sync is enabled for a workspace.
- Workspace members can see the shared workspace data that their role allows.
- Support requests you send to us may include your email address and message content so we can respond.
8. Device Permissions
SilkWallet requests permissions only for user-facing features. Notifications are used for due dates, reminders, and workspace activity notifications. Contacts access is used only when you grant permission to show contact suggestions or choose a contact while filling transaction or workspace-related fields. Files or photos selected by you are used for receipt and profile attachments, imports, exports, and profile images through user-driven file workflows.
9. Security
SilkWallet uses HTTPS/TLS for network communication with Google, Firebase, and Cloudflare services. Local data is protected by the app sandbox and encrypted database storage. Shared Firebase data is protected by Firebase Authentication and database rules for authorized workspace members. Cloudflare live sync data is protected by workspace identifiers, family access codes, member role checks, HTTPS/WSS transport, and service-side controls. Firebase and Cloudflare workspace data is not separately end-to-end encrypted by SilkWallet at the application field level, so those providers act as service providers for that sync data.
10. Retention And Deletion
Your data remains until you delete it, remove a workspace, delete your profile, remove app files from your Google account, or uninstall the app. To delete profile data inside the app, open Profile > Account actions > Delete profile. This removes local profile data, attempts to delete personal SilkWallet Drive files, SilkWallet Sheets data, optional SilkWallet Calendar reminders, and owned Firebase or Cloudflare workspace data where supported, removes shared workspace access from this device, signs you out, and disconnects Google access where supported.
For shared workspaces, deleting your profile may remove your membership and local copies, but it may not delete a group owned by another member. The group owner or an admin must delete shared group data for everyone. You can also request help with account or data deletion at techsupport@silkyapple.com.
11. Children
SilkWallet is intended for general personal finance use and is not directed to children. Do not use the app to submit information about a child unless you have the legal right to do so.
12. Changes
We may update this Privacy Policy when features, providers, or legal requirements change. The latest version will be shown in the app and on the official SilkWallet or Silky Apple website.