Privacy Policy

Last updated: 16 August 2026

ExpenseTracker ("the app", "we", "our") is a personal expense-tracking application. This policy explains what information the app collects, how it is used, and the choices you have. We built ExpenseTracker to help you track your own spending — not to collect more about you than that requires.

On this page

Information we collect
Device permissions we ask for
How we use your information
Where your data is stored
Sharing of information
UPI payments (Quick Pay)
Security
Data retention & deletion
Your rights and choices
Children's privacy
Changes to this policy
Contact us

1. Information we collect

ExpenseTracker collects only what's needed for the features you choose to use:

Category	What's collected
Account	Email address and password (or Google sign-in), used only to log you into your own account.
Profile	Name, phone number, city, and profile photo — all optional, entered by you.
Financial entries	Expenses, income, budgets, categories, recurring expenses, and milk-tracking entries you add. Amounts and categories are entered by you; we do not connect to your bank or read your transactions automatically.
Saved payees	UPI IDs and names you save while using Quick Pay, so you don't have to re-enter them.
Security settings	A PIN (stored as a one-way hash, never in plain text) and whether biometric unlock is enabled. Your actual fingerprint/face data never leaves your device — it's handled entirely by your phone's operating system.
Reminders	Category names and times you set for reminders/alarms.
Usage data	Basic app diagnostics (e.g. crash logs) via Firebase, to help us fix bugs.

2. Device permissions we ask for

Camera — only when you tap "Scan QR" in Quick Pay, to read a UPI QR code. The camera is not used at any other time, and no photos are stored from this.
Microphone — only when you tap the voice-input (mic) button, to convert your spoken words into an expense entry. Audio is processed for that single request and is not stored or sent to any AI service.
Notifications — to show you reminders, budget alerts, and category alarms you've set up.
Biometric hardware — only if you turn on fingerprint/face unlock in Security settings.
Photo library — only if you choose to set a profile picture.

You can deny or revoke any of these permissions from your phone's Settings at any time; the related feature simply won't work until re-granted.

3. How we use your information

To show your expenses, income, budgets, and insights back to you inside the app.
To send reminders, budget-limit alerts, and alarms you've configured.
To let you sign in securely and keep your data private to your account.
To pre-fill your Quick Pay screen with a saved payee, so you don't retype a UPI ID each time.

We do not use your financial data for advertising, and we do not sell your information to anyone.

4. Where your data is stored

Your account data (expenses, income, budgets, profile, reminders, saved payees) is stored in Google Firebase (Cloud Firestore and Firebase Authentication), under your own account, protected by access rules that only let your signed-in account read or write your own data.

Your PIN hash, biometric preference, and "trusted device" status are stored locally on your device only, and are not uploaded to our servers.

We do not sell, rent, or trade your personal or financial information. Data is only shared with:

Google Firebase — our cloud database and authentication provider, which processes data on our behalf under Google's own security and privacy commitments.
Law enforcement or legal requests — only if we are legally required to disclose information.

6. UPI payments (Quick Pay)

The "Quick Pay" feature opens your own UPI app (e.g. Google Pay, PhonePe, Paytm) to complete a payment. ExpenseTracker does not process payments itself, does not see your bank account or card details, and does not have access to your UPI PIN. We only pass along the amount, payee UPI ID, and a note you provide — the transaction itself happens entirely inside your chosen UPI app.

7. Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS) between the app and our servers, one-way hashing for your PIN, and Firebase's access-control rules that restrict every account's data to that account alone. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

8. Data retention & deletion

We retain your data for as long as your account is active. If you'd like your account and all associated data deleted, contact us using the details below and we'll process the deletion within a reasonable time.

9. Your rights and choices

You can edit or delete individual expense, income, or reminder entries at any time within the app.
You can turn off notifications, biometric unlock, or the daily reminder at any time in Settings.
You can request a copy of your data or its deletion by contacting us.

10. Children's privacy

ExpenseTracker is not directed at children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above. Continued use of the app after changes means you accept the updated policy.

12. Contact us

If you have questions about this Privacy Policy or your data, reach out to:

hello.spendwiselabs@gmail.com