๐ Last updated: October 2026 ยท ๐ข Nalkudil Studio ยท ๐ง nalkudilstudio@gmail.com
Our Absolute Sovereign Guarantee: Sahi is architected with a strict Air-Gapped Sovereign Philosophy. The application contains zero network permissions (android.permission.INTERNET is strictly absent from its Android manifest). Sahi cannot connect to the internet, cannot send telemetry, contains no ad networks or third-party trackers, and stores 100% of your data exclusively on your physical device.
Data you enter into Sahi:
Where does this data go?
Every single piece of information you input remains strictly confined to your device's internal SQLite database (Room). Neither Nalkudil Studio, nor any cloud server, nor any external party can ever view, intercept, or retrieve your profile.
Unlike standard fintech and banking apps, Sahi does not ask for or use the android.permission.INTERNET permission. You can verify this independently at any time in Android Settings > Apps > Sahi > Permissions.
| Security Layer | Mechanism | Scope |
|---|---|---|
| Local SQLite Database | Android Room SQLite internal storage | Sandbox app directory; inaccessible to other installed applications. |
| Hardware Biometrics | Android Keystore (BiometricPrompt) | Optional biometric fingerprint / face lock that secures the master financial profile upon backgrounding. |
| Background Masking Scrim | Lifecycle-aware security overlay | Blurs and masks sensitive financial balances in the Android recent apps carousel. |
Sahi integrates zero third-party software development kits (SDKs) that transmit data over networks. The application is completely self-contained. All calculation engines (Salary Planner, Home Budget, Retirement, Gold Price, Gold Loan, DigiGold, FD, RD, Home Loan Prepayment) are written in pure Kotlin algorithms executing directly on your phone's CPU.
When you choose to export or share a financial health summary card or quote via WhatsApp or message apps, the card image is rendered completely on-device using Android's native Canvas engine into your private temporary cache directory. The file is handed over to your chosen app via Android's secure FileProvider. Sahi has no visibility into where or to whom you send the image.
Because we do not store your data on any server, you maintain complete sovereignty over your data at all times:
Sahi is an adult financial planning utility. We do not knowingly collect or solicit data from children under 13 (or under 18 in relevant jurisdictions). The app does not transmit any information externally under any circumstance.
In accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), Sahi embodies the highest standard of Privacy by Design. Because no personal data is transferred off the data principal's hardware, no cross-border processing occurs, and zero profiling or surveillance takes place.
If we update our offline architectural guarantees in a major release, we will provide an in-app changelog notification. The 'Last Updated' timestamp at the top of this document always indicates the operative release version.
For questions or architectural clarifications regarding Sahi's sovereign design, reach out directly to the founders: