OneBill PH helps you keep track of the bills that arrive in your email, and reminds you before they are due. This policy explains exactly what the app touches and where it goes.
The short version. Your email is read on your phone. Your bills, amounts and inbox credentials never leave the device — we have no copy of them and no server that holds them. There are no ads. We never take payments and never move your money. Uninstall the app and everything it knows is gone. The single exception is the optional Ideas & feedback board: if you choose to send a suggestion, that text is transmitted to us, along with the app version and a random id that is not linked to you. Nothing about your bills or your inbox is.
Gmail (read-only) — using an app password you generate yourself in your Google Account
(Security → 2-Step Verification → App passwords). This is not your Gmail password, it grants read-only mail
access to this phone alone, and you can revoke it at any time from that same page. Used only to find bill
emails and read the amount, due date and account number. The app never sends, deletes or changes any email.
Yahoo Mail (read-only) — using an app password you generate yourself in your Yahoo account. This is not your Yahoo password, and you can revoke it at any time from Yahoo → Security → App passwords.
Attachments — PDF and image statements are opened on your phone so the amount can be read. Passwords you provide for protected PDF statements are used only to open those files.
Camera (optional) — only when you choose "Snap a paper bill". The photo is read on the phone and not kept afterwards.
Notifications — to remind you 3 days before, and on, a due date, and to tell you when a new bill arrives.
Ideas & feedback (optional) — only if you open Profile → Ideas & feedback and send a suggestion. See the section below.
What is stored, and where
Everything below is stored only in the app's private storage on your phone:
The bills the app found: biller, amount, due date, account or reference number, billing period, and the text it read from the email (kept so a wrong amount can be diagnosed).
Your Gmail and Yahoo app passwords, and any statement (PDF) passwords you save — all held in Android's encrypted storage.
Payments you mark as done, and any bills you add by hand.
Android's automatic cloud backup is switched off for this app (allowBackup="false"), so this data is not copied to your Google Drive backup either.
How we protect your data
Security procedures are in place to protect the confidentiality, integrity and availability of all
Google user data and other sensitive data the app handles. Specifically:
Encryption in transit. Every connection the app makes is encrypted. Gmail and Yahoo Mail are
both accessed over IMAP with SSL/TLS on port 993. The app refuses unencrypted connections.
Encryption at rest. Your Gmail and Yahoo app passwords, and
any PDF statement passwords you save, are stored using Android's encrypted storage
(Jetpack Security EncryptedSharedPreferences, AES-256-GCM), with the encryption keys held in the
Android Keystore and, on supported devices, protected by the phone's hardware-backed security module.
Keys never leave the device and are not extractable by the app or by us.
Device sandbox isolation. All bill data is written to the app's private internal storage, which
Android isolates from every other app on the phone. It is further protected by the device's own screen lock,
PIN, pattern or biometric.
No server holds your mail or your bills. Because that data is never transmitted off your
device, there is no server that could be breached, no administrator account that could be compromised,
and no copy of your email anywhere outside your own phone. The optional Ideas board stores only the
suggestions people choose to send, and is transmitted over HTTPS.
No cloud backup. Android's automatic backup is disabled for this app
(allowBackup="false"), so this data is never copied to Google Drive or any other backup service.
Least privilege. The app connects to your mailbox read-only over IMAP and never requests
permission to send, modify, label or delete mail. It uses no Google OAuth scopes at all, and holds no
token that could grant access to anything beyond reading mail on this device.
No human access. No employee, contractor or third party can read your email or bill data,
because that data never reaches any system we control.
No AI/ML training. Google user data is never used to develop, improve or train any generalised
or non-personalised artificial intelligence or machine learning model.
Data retention and deletion
Bill data is retained on your device only for as long as you keep the app installed, so that the
dashboard and reminders keep working.
Disconnecting an inbox (Profile → Connected inboxes → Remove) immediately deletes the stored
app password for that inbox from this device.
Deleting a bill from the dashboard removes it and the scanned text kept with it.
Uninstalling the app permanently erases all stored data — bills and saved app passwords.
Nothing survives elsewhere, because nothing was ever stored elsewhere.
You can additionally revoke access at any time from your provider: Google at
myaccount.google.com/apppasswords, Yahoo at
Account security → App passwords. Deleting the app password there cuts off access immediately and
independently of the app.
To ask a question about your data, or to request confirmation of deletion, email
onebillph@gmail.com.
Ideas & feedback (optional)
Profile → Ideas & feedback lets you send a suggestion and vote on suggestions other
people have sent, so the most-wanted features get built first. This is the only feature that
transmits anything off your device, and it only runs when you choose to use it.
What is sent: the text you type, the app version, and a random identifier generated
on your device (for example d-k3f9x2…) so a vote can be counted once. That is all.
What is never sent: your name, your email address, your inbox credentials, and
anything at all about your bills — no biller, no amount, no due date, no account number.
The random identifier is not linked to you, your Google or Yahoo account, or your device's
advertising ID, and it is discarded if you uninstall the app.
Suggestions are visible to other users of the board, so please don't type anything personal
into it. The app warns you of this on the screen itself.
Suggestions are used only to decide what to build next. They are not sold, shared or used
for advertising, and we may delete or edit off-topic submissions.
You do not create an account with us, and we hold no server-side copy of your bills.
We do not upload, collect, receive or store your email, your bills, or your passwords —
the only thing we ever receive is a suggestion you deliberately send from the Ideas board.
We do not sell or share your data with anyone. There are no advertisers.
We do not track your behaviour in the app.
We do not process payments. When you choose to pay, the app simply opens GCash, Maya or your bank app — you complete the payment there, as you normally would.
Who else is involved
The app talks directly to the mail providers you connect — Google (Gmail) and Yahoo, both over IMAP — using the app password you generated. Their handling of your data is governed by their own privacy policies. The only other service involved is Google Apps Script, which hosts the Ideas & feedback board described above; it receives nothing unless you send a suggestion.
Your control
Disconnect an inbox: Profile → Connected inboxes → Remove.
Delete everything: uninstall the app. All stored data is removed with it.
Limited Use disclosure
OneBill PH does not use Google OAuth or the Gmail API; mail is read over IMAP with a user-generated app password. Where Google user data is handled, its use adheres to the
Google API Services User Data Policy, including the Limited Use requirements.
Gmail data is used solely to provide the bill-tracking features described above, is processed on the user's device, is not transferred to any server, is not used for advertising, and is not sold or shared. No human reads your email data.
Children
OneBill PH is intended for adults managing household bills and is not directed at children under 13.
Changes to this policy
If this policy changes, the date at the top will be updated and the new version will appear at this address. Material changes will also be noted in the app's release notes.
Questions or complaints
Email onebillph@gmail.com. Under the Philippine Data Privacy Act of 2012 (RA 10173) you may also raise concerns with the National Privacy Commission.