Privacy Policy
This Privacy Policy describes how Expen AI ("we", "our", "us") collects, uses, and shares information when you use our mobile application (the "App").
Information We Collect
Information You Provide
- Email address and display name — collected via Google Sign-In for authentication
- Financial/transaction data — expense records, receipts, and budget information you manually enter or scan into the App
- Family group data — if you join or create a family group, your shared expense data is visible to group members
Information Collected Automatically
- Device and app information — device model, OS version, app version, and crash logs for stability monitoring
- App interaction data — usage patterns and analytics to improve the App
- Advertising ID — used to serve ads via Google AdMob
- Notification content (optional, off by default) — if you enable Notification Sync, we read notifications from bank and payment apps to automatically detect transactions. This data is processed on-device and only transaction-relevant information is stored.
Permissions Used
- Camera — to scan receipts and capture photos for expense tracking
- Photo Picker — to select receipt images (no broad photo/media access required)
- Microphone — for voice input in the AI chat assistant (speech-to-text)
- Internet — to sync data with our servers
- Biometric — for optional app lock via fingerprint or face recognition
- Notification Listener (optional, off by default) — to automatically detect transactions from bank and payment app notifications
How We Use Your Information
- To provide and maintain the App's core features (expense tracking, receipt scanning, AI-powered analysis)
- To authenticate you via sign-in
- To process and manage subscriptions
- To serve ads within the App
- To send push notifications about your account activity
- To monitor app stability and performance (crash reporting)
- To improve the App through analytics
- To process voice input when you use the AI chat assistant's speech-to-text feature
- To optionally sync transaction notifications from your banking and payment apps (only if you enable this feature)
Data We Do NOT Collect
We do not collect:
- Phone number
- Precise physical location
- Broad access to your photos or media files
- Contacts or address book information
- SMS or call logs
- Health or fitness data
- Financial account numbers or credit card numbers (we only store expense records you enter)
Third-Party Services
Our app integrates with third-party services that may independently collect information. These services are governed by their own privacy policies:
- Advertising — advertising ID is used to serve relevant ads within the App
- Analytics and crash reporting — device info and crash logs are collected to monitor app stability
- Push notifications — device tokens are collected to deliver account-related notifications
- Subscription management — purchase history and subscription status are processed to manage your Pro access
We do not sell your personal data to any third party.
Data Security
- All data transmitted between the App and our servers is encrypted in transit using HTTPS/SSL (TLS 1.2+)
- We enforce SSL certificate pinning to protect against man-in-the-middle attacks
- Authentication tokens are stored securely in encrypted device storage
- Our backend enforces strict access controls so each user can only access their own data
Data Storage Location
Your data is stored on our servers located in the European Economic Area (EEA). We do not transfer your personal data outside of the EEA unless required for specific third-party services (see Third-Party Services above).
Data Retention & Deletion
- Your data is retained as long as your account is active
- Transaction data and receipts are retained indefinitely unless you delete them or request account deletion
- Upon account deletion, your personal data and transaction records are permanently removed from our servers
- Crash logs and analytics data are retained for up to 90 days, depending on our analytics provider's retention policy
Account & Data Deletion
You can request account and data deletion in the following ways:
- In-app: Go to Profile → Settings → Delete Account. This will permanently delete your account and all associated data.
- By email: Send a deletion request to [email protected] from the email address associated with your Expen AI account.
What gets deleted: Your email address, transaction records, receipts, budgets, family group data, and all other personal data.
What is retained: Anonymized analytics data (not linked to your identity) may be retained for up to 90 days. Crash logs are retained for up to 90 days.
Children's Privacy
The App is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn we have collected data from a child under 13, we will delete it promptly.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict data processing
- Data portability
To exercise any of these rights, contact us at the email below.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or your data, please contact us at [email protected].