Privacy Policy

The short version

• Your financial data — transactions, amounts, accounts, categories, budgets, notes and photos — is stored only on your device. We never receive it.
• There is no sign-up or account. We don’t ask for your name, email or phone number.
• The app sends anonymous usage statistics and crash reports to Google Firebase so we can see which features are used and fix bugs.
• There are no ads. We don’t sell your data or share it for advertising.

Data that stays on your device

Everything you enter in the app is saved in a database on your phone. This includes transactions and their amounts, notes and dates, accounts and balances, categories, budgets, recurring transactions, receipt photos you attach, and your settings. This data is not uploaded to us or to anyone else.

• Backups and exports: when you create a backup or export a CSV or PDF file, the file is saved to the location you choose. If you pick a cloud folder (for example Google Drive), that service stores the file under its own privacy policy. Backups can be encrypted with a passphrase that only you know — we can’t recover it.
• Sharing: if you share an export or a summary image, it goes only to the app you choose in Android’s share menu.
• Deleting it: you can delete individual entries in the app, or remove everything by clearing the app’s data or uninstalling it. Backup and export files you saved elsewhere are not deleted automatically.

Data the app collects automatically

The app uses Google Firebase services, which collect limited technical data. None of it includes your amounts, notes, account or category names, or photos.

• Google Analytics for Firebase (usage statistics): which screens are opened and which actions are used (for example “transaction created”, “backup completed”, “reminder shown”), with simple details such as the transaction type, a count, or the currency code you selected. It also collects an app-instance identifier, device model and brand, Android version, app version, and approximate location (country or region) derived from your IP address. Collection of the Android Advertising ID is turned off.
• Firebase Crashlytics (crash reports): when the app crashes, the error details, the state of the app at that moment, device model, Android version, and a random installation identifier used to count affected users.
• Firebase Remote Config: lets us change some app settings (such as links to this policy) without an app update. It uses a Firebase installation identifier plus your country, language, time zone and Android version.

These identifiers are random and are not linked to your name, email or Google account. Data is encrypted in transit (HTTPS/TLS).

How we use this data

• To understand which features are used, so we know what to improve.
• To find and fix crashes and bugs.
• To adjust app settings remotely.

We don’t use it for advertising, profiling or marketing, and we don’t sell it.

Who processes the data

Google processes the Firebase data on our behalf as a service provider. See Privacy and Security in Firebase and the Google Privacy Policy. Google may process data on servers outside your country.

Downloads, updates and in-app review prompts are handled by Google Play under Google’s own privacy policy. We don’t share data with anyone else.

How long we keep it

Usage statistics and crash reports are kept only as long as needed to analyse usage and fix problems, within the retention limits set in Firebase (event-level analytics data for 2 months and crash reports for 90 days), and are then deleted automatically. Data on your device stays until you delete it.

App permissions

• Camera: only when you choose to take a photo for a transaction, category or account. The photo is saved on your device.
• Notifications: for the daily reminder, budget alerts and summaries you turn on.
• Fingerprint / biometric unlock: handled entirely by Android. The app never receives your fingerprint or face data.
• Internet and network state: used only by the Firebase services above.
• Storage (older Android versions only): to save exports and backups.

Your choices and rights

Because we don’t know who you are, we can’t link the analytics or crash data to you. Clearing the app’s data or uninstalling it resets the identifiers, so new data can’t be connected to old data. Depending on where you live (for example under the GDPR in the EU/UK or India’s DPDP Act), you may have rights to access, correct or delete personal data — contact us and we’ll help as far as we can identify your data.

This website

This website doesn’t use analytics, advertising or tracking cookies. It stores a few preferences only in your own browser: your light/dark theme and language choice, and, for the current session, whether you closed the “Install” bar. Our hosting provider (Netlify) keeps standard server logs, such as IP addresses, for security and reliability.

Children

Expense Manager is a general-audience app and is not directed at children. We don’t knowingly collect personal information from children.

Changes to this policy

If we change how the app handles data, we’ll update this page and the date at the top before the change is released.