Privacy Policy

Last updated: 14 September 2026

MG Cyber Solutions Limited ("we", "our", "us") operates the SmartStatement mobile application ("the App").

1. Information We Collect

Account Information

  • Apple ID (via Sign in with Apple): name and email address.
  • Google Account (via Google Sign-In): email and basic profile to access your Google Drive/Sheets.

Financial Data

  • Bank Statements: CSV/PDF files you import. Processed locally, optionally synced to your Google Sheets.
  • Invoices: Scanned via camera. Processed locally, optionally synced to your Google Sheets.

We do not collect device identifiers, analytics or usage data ourselves, and we use no third-party analytics SDKs. The free plan shows ads served by Google AdMob, which may use your device's advertising identifier subject to your App Tracking Transparency choice; Pro and Business plans show no ads.

Website Advertising

This website uses Google AdSense. Google and its partners may use cookies to serve and measure ads, including personalised ads where permitted. You can manage ad personalisation at adssettings.google.com, and read how Google uses data from partner sites at policies.google.com/technologies/partner-sites. In the EEA, the United Kingdom and Switzerland, ads are shown according to the choices you make in the consent message.

2. How We Use Your Information

Solely for app functionality: organizing transactions, scanning invoices, syncing to your Google Sheets.

3. Data Storage and Security

  • No server-side storage, except feedback you choose to send us (see section 4). Data is on your device or your Google Drive.
  • OAuth tokens stored in iOS Keychain.

4. Feedback You Choose to Send Us

The App has a "Send feedback" screen. Nothing on it is sent until you tap Send. When you do, we receive:

  • The title and description you wrote, and the type you picked (bug, idea or question).
  • Your email address, only if you fill in the optional email field so we can reply.
  • Any screenshots you attach yourself (up to three).
  • Your device model, iOS version, app version and language.
  • A random id the App creates for this install, used only to limit how many reports one device can send per hour. It is not your device's advertising or vendor identifier.
  • If you leave the "Include diagnostic log" switch on, the last 30 minutes of the App's own diagnostic log. Email addresses, account and card numbers, amounts and access tokens are redacted before sending, and you can tap Preview to read the exact text first.

We never send this in the background and never collect it automatically. Feedback is stored on our support service, RefHub, hosted by Supabase in Sydney, Australia, and is used only to answer you and to fix the problem you reported. Attachments and diagnostic logs are deleted after 12 months. To have your feedback deleted sooner, email support@smartstatement.app with the feedback id shown in "My feedback".

5. Third-Party Services

Google Drive API and Sheets API using only the drive.file scope, which limits access to files SmartStatement itself creates, plus the openid and email identity scopes so the App knows which Google account is connected. Sign in with Apple for authentication.

6. Data Sharing

We do not sell your data and do not share it for third-party marketing. Two providers process data on our behalf: Google AdMob serves ads on the free plan (section 1), and Supabase hosts feedback you choose to send us through RefHub, our support service (section 4). Neither receives your bank statements or transactions, unless you choose to include them in a screenshot or the diagnostic log you send with feedback.

7. Data Retention and Deletion

8. Children's Privacy

Not intended for children under 13.

9. Contact Us

Email us at support@smartstatement.app, or visit smartstatement.app.