Privacy policy

In short

• Your transactions, categories, accounts and receipt attachments are stored on your device.
• Receipt text recognition and transaction extraction run on your device.
• There is no Expensed account, and we do not operate a server that holds your financial records.
• Optional backup copies your data to your own iCloud or Google Drive account, only if you turn it on.
• We do not collect product analytics. We do not collect crash reports.
• If you email support, we hold that email in order to reply.

Who we are

Expensed is published by [Legal entity name], at [Business address]. For privacy questions, contact [email protected]. [Requires legal review: confirm the controller entity, and whether a data protection officer or EU/UK representative is required.]

Information stored on your device

The app keeps the following in its own storage on your phone, and sends us none of it:

• Transactions, including amount, date, merchant, category, account, currency and notes.
• Categories and accounts you create.
• Receipt images and documents you capture or attach.
• App settings and preferences.

The operating system's app storage and file encryption protect this data, tied to your passcode while the device is locked. No storage method removes every risk, so a passcode, biometric unlock and current system software still matter.

On-device text recognition and extraction

Your device reads the receipt image, and a model on the device extracts the merchant, amount and date into a reviewable draft. Neither the image nor the text taken from it reaches us or a third-party AI service for processing.

Some features need the on-device model downloaded first. That download fetches a model file and uploads nothing of yours. [Requires legal review: name the model distribution host - for example the app store, your own CDN, or a third-party provider - and describe any request data it receives, such as IP address.]

Optional cloud backup

Enable backup and the app writes a backup file to your own iCloud or Google Drive account, under your terms with Apple or Google. We never receive it and cannot read it.

You choose whether receipt attachments go in. You can turn backup off at any time, and delete the files from your own cloud storage account. [Requires legal review: confirm whether backups are encrypted by the app before upload, and describe that accurately here.]

Purchases

Apple processes purchases through the App Store, Google through Google Play. Your payment details never reach us. The stores tell us whether a purchase is active, so the app can unlock the feature, and they give us aggregate sales figures.

Apple's and Google's own privacy policies govern how they handle your payment information.

Analytics and crash reporting are not used

The app carries no product analytics. We do not track how you use it, and we build no profile of your activity.

The app sends us no crash reports. Your device may still send aggregated crash information to Apple or Google under your own device settings, which we do not control.

Support emails

Emailing [email protected] gives us your address, your message and anything you attach. We use it only to answer you. Please keep bank statements, card numbers, passwords and full exports of your records to yourself; they will not help us.

The app can generate a diagnostic report that you may choose to attach to a support email. It contains technical details about the device and app state. [Requires legal review: describe exactly what the diagnostic report contains and confirm it excludes transaction contents.]

Sharing and selling

We sell no personal or financial information, and share your transactions with no advertiser or data broker. Normal use involves two third parties: Apple and Google, as app stores and - if you enable backup - as your cloud storage provider. [Requires legal review: list any additional processors, such as email hosting or model distribution, with their locations.]

Data retention

Data on your device stays there until you delete it or remove the app. We keep support emails for [retention period], then delete them. Backup files remain in your own cloud account until you delete them.

Deleting your data

Delete individual transactions and attachments in the app, or remove everything by uninstalling it. Uninstalling erases locally stored data for good. We hold no copy, so we cannot restore it: export or back up first if you want to keep it.

Backups are deleted from your own iCloud or Google Drive account, using those services' own tools.

Your rights

Where you live may give you rights to access, correct, delete or export personal data held about you. Your financial records sit on your device rather than with us, so the app itself covers most of those rights. For what we do hold, chiefly support correspondence, contact [email protected]. [Requires legal review: complete this section for the specific regimes that apply, such as GDPR, UK GDPR, CCPA/CPRA, and add the required legal bases and complaint routes.]

Children's privacy

Expensed is not directed at children, and we knowingly collect no personal information from them. [Requires legal review: set the applicable age threshold for each market - for example 13, 16 or the local equivalent - and align it with the app store age rating.]

International users

The app works anywhere the app stores distribute it. Your data stays on your device, so ordinary use involves no international transfer by us. Support email and the optional services above may be processed in other countries. [Requires legal review: identify the countries involved and the transfer mechanism, such as standard contractual clauses.]

Changes to this policy

When this policy changes, we will update this page and the date at the top. Changes that affect how the app handles your information will also appear in the app or the release notes.

Contact

Privacy questions: [email protected]
General support: [email protected]
Postal address: [Business address]