Your data

Peace keeps your records on your phone. There is no Peace account and no Peace server, so we hold nothing about you — not your spending, not your email, not a device ID. The app contains no analytics, advertising or crash-reporting code, and neither does this website.

What can leave your phone

Four connections exist, and all four are off until you do something to start them.

Goes to	What is sent	When
Google Gemini `generativelanguage.googleapis.com`	A receipt photo you ask to have read; the text of a bank message from a sender you listed; a question to Penny, with the parts of your ledger it looks up to answer.	Only after you add your own Gemini API key. Penny has its own switch on top of that.
Your Google Drive `googleapis.com/drive`	A backup of your ledger and receipt photos, into a private app folder only Peace can read — encrypted first if you set a passphrase.	Only after you connect Drive in Settings.
Frankfurter `api.frankfurter.dev`	Two currency codes, to fetch one exchange rate.	Only when you tap to fetch a rate for a foreign-currency record.
GitHub `api.github.com`	Nothing about you — a check for a newer version.	Only in the version downloaded from GitHub. The Play Store version is updated by Play.

What stays on your phone

Every record, account, category, tag, budget and recurring payment.
Receipt photos and invoices you attach.
Your Gemini API key and backup passphrase, in Android’s encrypted storage — and never inside a backup, so a backup you share does not carry them.
Bank messages from senders you did not list. Peace discards them on the phone; they are never sent anywhere.

What Peace asks Android for

Camera — to photograph a receipt, only when you tap the camera button.
Notifications — for the optional daily reminder, scheduled on the phone. No push service is involved.
Notification access — for the optional bank-message reading. You grant it in Android’s settings and can withdraw it there at any time.
Internet — for the four connections above.

No microphone, no contacts, no location, no SMS inbox, no storage access.

Deleting your data

Uninstalling Peace, or clearing its storage, deletes everything on the phone.
Drive backups are deleted from Google Drive: Settings › Manage apps › Peace › Delete hidden app data.
We hold nothing on our side, so there is nothing for us to delete — and no account to close.
Before you go, Settings › Export gives you everything as CSV or as a full backup.

The full detail is in the privacy policy, and the app is free software — every line of the above can be checked in the source.