Micham doesn't collect your data

Draft, November 2026. This policy takes effect when the apps are released.

Micham has no account, no server of ours and no analytics. The app doesn't ask Android for network access, so it can't send your records anywhere. We never receive, store or sell anything about you or your money.

What stays on your phone

• Your entries, accounts, transfers and budget are stored in an encrypted database on the device. They're encrypted with AES-256-GCM, and the key is held in the Android Keystore.
• Android's automatic cloud backup is turned off for Micham.
• Uninstalling the app removes the records from the phone. We can't restore them, because we never had them.

Permissions

• Microphone is requested the first time you hold the talk button. Micham uses Android's on-device speech recognizer. If your phone doesn't have one, voice entry is unavailable and everything else still works.
• Biometrics is used only if you turn on App lock. Your fingerprint or face is checked by Android. Micham never sees it.
• Micham declares no internet, SMS, contacts, location or storage permissions. Inside the app, Settings, then On this phone, lists the permissions the installed build declares.

Receipts, photos and bank messages

• To scan a receipt, Micham opens your phone's camera app. It has no camera permission of its own. Text is read from the picture on the device.
• To use a photo you already have, you pick it with Android's photo picker. Micham sees only the image you choose.
• Micham never reads your SMS inbox. It uses only the message text you paste or share into it.

Backups

You can export an encrypted backup file. It's protected by a password you choose, and you decide where the file is saved. We don't hold a copy of the file or the password. If you lose both your phone and your backup, the records can't be recovered.

App lock and screenshots

With App lock on, Micham hides its contents in the recent-apps view and asks for your biometric or screen lock when you return to it.

This website

This site is static. It sets no cookies, runs no analytics and loads nothing from other sites, including fonts. Your host or network may keep ordinary server logs of visits.

Questions

Contact details will be added here before the apps launch.