Privacy Policy

Last updated: 27 June 2025

1. Data We Collect

  • Local Transaction Data. Expenses you enter (amount, date, category, notes, images) are stored locally on your device in an encrypted SQLite database.
  • Optional Cloud Backup. If you sign in with your e-mail (magic-link), transactions are synced to our Supabase backend. The backend stores a user ID, e-mail (for authentication), and your expense rows.
  • Analytics. We collect anonymous event metrics (screen opens, feature usage) via Google Analytics for Firebase without advertising ID.

2. How We Use Your Data

  • Provide core features: budgeting, analytics, insights. Your data stays on your phone unless you sync.
  • Synchronise data across your devices when you are signed in.
  • When synced to our cloud database, we cannot see your data due to encryption.

3. Data Sharing

We do not sell or share your personal data with third parties for advertising or marketing. Data is strictly stored on your local device (and is removed when the app is deleted). It can be optionally saved on our cloud storage, which is encrypted and we allow users to delete the account. Account is only created using email. Password is never asked or stored.:

ServicePurposeData shared
Supabase Inc.Database, authentication, file storageUser ID, e-mail, encrypted expense rows
OpenAI LLCNatural-language parsing. This is an optional feature and we don't store the chat conversation on the cloud. It stays on phone, and OpenAI only processes the chat conversion throught the AI model. Your data is not used for AI trainingSelected text prompt without personal identifiers
Google (Firebase)Analytics & Crash reportingAnonymous event data and crash stack traces

4. Security

  • Local database encrypted with 256-bit SQLCipher key stored in Android Keystore/Keychain.
  • All network traffic is TLS 1.2+.
  • Supabase tables protected by Row Level Security.

5. Your Choices & Rights

  • Offline Mode. You can use the App without creating an account; nothing leaves your device.
  • Export & Delete. Settings → Export lets you save a CSV/PDF. Delete Account wipes cloud data and local cache.
  • Revoke Consent. You may sign out at any time to stop sync. You can delete everything from cloud database by using Delete acocunt in app Settings.

6. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal data from children.

7. Changes to This Policy

We may update this Privacy Policy. We will notify you via in-app banner or store listing update.

8. Contact Us

If you have questions, email us at privacy@expensezero.com.