Privacy policy

Effective 7 August 2026 · Last updated 8 August 2026

Expensed processes your financial records on your device. It does not send them to Xianthus Software PLT. You do not need an Expensed account. The app has no ads, analytics or crash reporting.

This policy explains what stays on your device, what information we may receive, when Expensed uses the internet, and which permissions it may ask for.

Xianthus Software PLT publishes the app. It is a limited liability partnership registered in Malaysia under registration number 202604001652 (LLP0046891-LGN). We are the data controller for the personal data we receive when you contact us. This may include your email address, support message, and any diagnostic file you choose to send. We do not receive the financial records stored on your device. Our terms of service cover everything else.

Data processed on your device

Expensed stores everything you record in a local database and files on your device. This includes transactions, accounts, categories, tags, budgets, splits, groups, settings, and receipts. It may also include receipt text, merchant names, amounts, and transaction dates. Expensed calculates and stores budget limits, periods, and progress on your device.

Splits and groups may include information about other people. Expensed stores their names, what they paid, and what they owe on your device. It does not read your contacts or notify anyone in a split. Only enter the details you need.

The share button creates a split summary. It may include names, amounts, and other details shown in the preview. You choose whether to send it and which app to use, such as email or messaging. Expensed does not send the summary to Xianthus Software PLT. The receiving app handles it under its own terms and privacy policy.

Expensed does not send your financial records to Xianthus Software PLT. The records may leave the app when you use cloud backup or export. Your phone may also include them in a device backup.

On-device text recognition and AI

When you scan or import a receipt, Expensed can fill in the merchant, amount, date, and category. This happens on your device. Expensed does not send receipt images, text, or details to Xianthus Software PLT or a cloud AI service.

You can choose one of two AI options in the app's settings:

Your device's built-in AI. When your device supports it, Expensed can use Gemini Nano on Android or Apple's on-device Foundation Model on iOS. Expensed only gives the model the text needed for the task. Google or Apple provides this AI, so its privacy terms apply. Your operating system downloads and updates the model. Availability depends on your device, operating system version, and system settings.
A model downloaded in Expensed. You can download an optional model through Expensed. It runs in the app on your device.

Ask Emma, receipt scanning, and insights use the AI option you choose and the information stored in Expensed on your device.

Expensed asks to use your camera when you scan a receipt. When you import one, Expensed can only access the file you select. The app copies attached receipts to its storage on your device.

Google Wallet capture on Android

On Android, Expensed can log Google Wallet purchases. This feature stays off until you turn it on and allow notification access.

Android's notification access permission covers all notification events, but Expensed only uses Google Wallet notifications. It filters them on your device. Expensed ignores notifications from other apps and does not save them as transactions. It reads Wallet notifications on your device and creates a transaction or draft there. It does not send them anywhere. You can stop this by removing notification access in Android settings.

Notifications Expensed shows you

Expensed may ask for permission to show notifications. This is separate from the Android permission used to read Google Wallet notifications. Expensed creates its notifications on your device. They can tell you when a budget is near, at, or over its limit. They also cover finished or failed AI model downloads and cloud backup problems. Backup problems include a signed-out account, full storage, or late backups. Expensed does not notify you after a successful backup.

Expensed does not use remote push notifications or register your device with a push service. It creates notification text on your device and does not send the text to Xianthus Software PLT.

A budget notification shows the budget name and how much of its limit you have used. This information may appear on your lock screen. You can turn off budget notifications or hide their content in your device settings. AI model and cloud backup notifications do not include financial details. Notifications never include receipt text, merchant names, or individual transaction details.

You can refuse notification permission or turn notifications off later. The app will still work, but it cannot show these updates while closed.

Network requests the app makes

Tracking and receipt scanning work offline. AI also works offline after the selected model is ready on your device.

Expensed only uses the internet for these services:

AI model downloads. Expensed checks expensedapp.com for models and downloads them from Cloudflare R2. If Cloudflare R2 is unavailable, it may use a backup copy on huggingface.co. These requests do not include transactions, receipts, or other financial records. When you use built-in AI, your operating system gets the model from Apple or Google. Expensed does not download it.
Exchange rates. Expensed gets exchange rates from frankfurter.dev at most once a week. The request does not include your accounts, transactions, or balances.
Cloud backup. When you turn on cloud backup, Expensed sends the backup to your Apple or Google storage account. It does not send the backup to Xianthus Software PLT.
Purchases. Expensed uses the App Store or Google Play to check, restore, and process premium purchases. Apple or Google handles the payment. Xianthus Software PLT does not.

These services receive the basic information needed to handle a request. This includes your IP address, request time, and standard request headers.

Text recognition, receipt scanning, and Ask Emma run on your device without using the internet.

No ads, no analytics, no tracking

The app has no ads, analytics, or tracking tools. We do not collect usage statistics, device IDs, or information about how you use the app.

Expensed does not use a crash reporting service. It keeps a diagnostic log on your device with the app version, operating system version, times, feature status, and errors. The app removes old entries when the log reaches its size limit.

We only receive the diagnostic log when you send it through Settings → About → Share diagnostics. It does not include amounts, merchant names, receipt text, or other financial records.

Optional cloud backups

You can make a manual backup at any time. Premium can also save one backup each day to your iCloud Drive on iOS or Google Drive app data folder on Android.

Xianthus Software PLT does not run a backup server or receive your backups. Expensed only uses your cloud storage to create or restore a backup. We cannot access, read, or recover it ourselves. Apple's or Google's terms and privacy policy apply.

Cloud backup is off by default. When you turn it on, Expensed may back up your data once a day. Manual backups, exports, and diagnostic files only leave the app when you save or share them.

Device backups are separate from Expensed cloud backup. Expensed does not use Android Auto Backup. Your phone maker may still move app data directly from an old phone to a new one. On iOS, your iCloud or computer backup may include the Expensed database and receipt files. This depends on your device settings. Downloaded AI models are not included because you can download them again.

On Android, Expensed asks you to sign in to Google and allow access to its hidden app data folder. Expensed cannot access the rest of your Drive and only uses the sign-in for backup. On iOS, there is no separate sign-in. Expensed uses its own iCloud Drive folder under the Apple account already on your device.

Disconnecting cloud backup stops new backups but does not delete an existing one. On iOS, delete it in your iCloud storage settings. On Android, the backup is in a hidden app data folder. To delete it, open Google Drive settings, go to Manage apps, and choose the option to delete hidden app data.

Purchases

Apple processes premium purchases through the App Store, and Google processes them through Google Play. Expensed checks the purchase status on your device to unlock or restore premium. Xianthus Software PLT does not have a purchase database or receive your full payment card details.

Apple or Google may give us sales, transaction, or order information through its developer system. The information stays in the store's system and follows its privacy policy.

Support emails

If you email [email protected], we receive your email address and message. We only use them to help you. Do not send financial records or other sensitive information unless we need it to solve the problem.

Zoho Mail hosts our support email. Zoho stores support messages in the data centre linked to our account, which is currently in the United States. Zoho handles these messages for us under its privacy and security terms. We delete support messages within 24 months after the last message about a request. You can ask us to delete yours sooner.

Data retention and deletion

Your records are stored on your device, so you control them. Deleting data in Expensed removes it from the app's database. Uninstalling the app normally removes its local data. Exports stay in the location you chose, and cloud backups stay in iCloud Drive or Google Drive until you delete them.

Your rights over your data

You can view, correct, export, and delete your data in the app. You do not need to ask us to change financial records because Xianthus Software PLT does not have them. There is no Expensed account or profile to delete.

We may hold support messages, diagnostics you send, and purchase details from Apple or Google. You can ask for a copy or ask us to correct or delete this data. Email [email protected]. We may need to keep some records for legal or accounting reasons, fraud prevention, or a transaction dispute. You can also complain to your local data protection authority.

Children's privacy

Expensed is not made or marketed for children. We do not knowingly collect children's personal information through the app. Information entered in Expensed stays under the control of the person using the device. The app does not send it to Xianthus Software PLT. If a child sends us personal information in a support email, a parent or guardian can ask us to delete it. Our terms of service set the minimum age for using the app.

Location and privacy laws

Your financial records stay on your device. Xianthus Software PLT does not transfer them to its systems. When you turn on cloud backup, Apple or Google may process the backup in any country in which it operates. Support emails, app store information, and basic network data may also be processed outside Malaysia.

As a Malaysian partnership, we are subject to the Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024. We are the data controller for the personal data Xianthus Software PLT receives and uses under this policy.

When the EU or UK GDPR applies, we use these legal bases: legitimate interests for support, problem diagnosis, and app security; our contract with you to provide and restore premium; legal duties to keep accounting, tax, or regulatory records; and consent when we clearly ask for it for an optional feature. Xianthus Software PLT does not receive records processed in the app or backups stored in your Apple or Google account.

We do not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising. This is true even if a US state privacy law does not apply to us.

Changes to this policy

We will post policy changes on this page with a new effective date. We will list major changes in the app's release notes.

Contact

Xianthus Software PLT, registration number 202604001652 (LLP0046891-LGN).
Level 23-1, Premier Suite One Mont Kiara, No 1, Jalan Kiara, Mont Kiara, 50480 Kuala Lumpur, Malaysia.
Questions about this policy: [email protected].