Skip to main content

Local-first privacy

What Salli stores, what it filters, what can leave the device, and which online services do not exist.

The encrypted local database is Salli's source of truth. There is no Salli account, advertising SDK, automatic analytics upload, or cloud ledger in the current build.

Salli Privacy and data screen explaining the encrypted local ledger

Stored on the device​

  • transactions you confirm or add;
  • budgets and cycle settings;
  • wallet labels, encrypted matching values, and balances;
  • built-in and custom categories;
  • goals, recurring and one-time plans;
  • seettu circles and payments;
  • local merchant, categorization, and ignore rules;
  • preferences; and
  • up to the newest 50 recognized-but-unsupported bank messages.

Money is stored in integer minor units for exact calculation.

Filtered before storage​

  • OTPs and security codes;
  • promotions and offers;
  • declined, failed, and pending alerts;
  • unknown senders;
  • personal or unrelated messages; and
  • malformed or implausible transaction values.

What can leave the device​

Only a user-triggered action or narrowly scoped reference lookup:

  • CSV or JSON copied/exported by the user;
  • a corpus or feedback package the user chooses to share;
  • support text the user chooses to copy/share; or
  • for a foreign-currency reference rate, only the three-letter currency code and transaction calendar date.

The exchange-rate request excludes SMS text, sender, merchant, value, account details, and device identifiers.

Camera, photos, and notifications​

Camera or photo permission is requested only when receipt scanning is chosen. OCR runs on-device and the scan is not retained by default. Notifications are optional, scheduled locally, and hide financial details unless you enable them.

Future services​

Cloud backup, family sharing, billing, and remote AI are not active. Any future version must request separate consent and must not silently replace the local-first defaults documented here.

The product is being designed around Sri Lanka's Personal Data Protection Act, but the final privacy policy, DPIA, store declarations, and legal review remain release gates. This documentation describes current product behavior; it is not legal advice.