Privacy Policy
Last updated: July 4, 2026
This Privacy Policy describes how Expense Tracker ("we", "our", "us") collects, uses, and protects your information.
1. Information We Collect
a. Data You Provide
- Financial Data: Transactions, budgets, accounts, tags, and categories you enter (stored locally on your device)
- Profile Data: Name, email, and avatar photo (if you create an account)
- Bill Images: Photos of receipts/bills (processed locally, optionally stored in cloud backup)
b. Automatically Collected Data
- Usage Analytics: App opens and feature usage via Firebase Analytics (anonymized)
- Device Information: Device model, OS version (for crash reporting and analytics)
c. Permissions
- Camera: To scan bills/receipts and QR codes
- Microphone: For voice input of transactions
2. How We Use Your Data
- To provide and improve the app's functionality
- To sync your data across devices if you enable Cloud Backup
- To send notifications if you enable reminders
- To analyze anonymized usage patterns for app improvement
3. Data Storage & Security
- Local Storage: All financial data is stored on your device using encrypted AsyncStorage (AES-GCM encryption)
- Cloud Backup: If enabled, data is stored in Firebase Firestore with encryption at rest and in transit
- Authentication: Managed via Firebase Authentication (Google's secure infrastructure)
4. Third-Party Services
| Service | Purpose | Data Shared |
| Firebase (Google) | Auth, Analytics, Cloud Backup, Storage | Email, usage data, backup data |
| Frankfurter API | Currency exchange rates | None (public API) |
| Expo | App distribution, OTA updates | Device info, crash logs |
5. Your Rights (GDPR / CCPA)
- Access: Export all your data via Settings → Export Data (CSV/XLSX)
- Deletion: Delete your account from Settings → Delete Account (permanently removes cloud data within 24 hours)
- Rectification: Update profile info in Settings anytime
- Opt-out: Disable analytics via device settings
- Withdraw Consent: Revoke permissions anytime via device settings
6. Data Retention
- Account Deletion: Cloud data permanently removed within 24 hours
- Local Data: Persists until you clear app data or uninstall
- Analytics Data: Retained for 24 months, then anonymized
7. Children's Privacy
This app is not intended for children under 13. We do not knowingly collect data from children.
8. Changes to This Policy
We may update this policy. Changes will be posted here with an updated date.
9. Contact