Privacy Policy

📋 1. Information We Collect

A. Information You Provide Directly

When you use Expense Tracker, you voluntarily enter the following financial data:

• Expense amounts, categories, notes and dates
• Income amounts, sources, descriptions and dates
• Monthly budget amounts
• Custom expense categories you create
• Currency preference

B. Account Information (Optional)

If you choose to sign in with Google, we receive:

• Your Google account name
• Your Google email address
• Your Google User ID (a unique identifier)
• Your profile picture (display purposes only)

C. Automatically Collected Information

We do not automatically collect device information, location data, IP addresses or usage analytics. The app works with minimal data collection.

⚙️ 2. How We Use Your Information

We use the information you provide solely to operate the app and deliver its features:

• Display your expense and income records in the app
• Calculate budget totals, savings and financial summaries
• Generate spending insights and charts
• Sync your data across devices when you sign in with Google
• Restore your data if you reinstall the app
• Associate your data with your account (Google User ID)

🚫 3. What We NEVER Do

We want to be crystal clear about what we do not do with your data:

Your financial data is private and personal. We treat it with the highest level of respect and confidentiality. We will never sell, rent, lease or share your personal or financial information with any third party for commercial purposes.

🔒 4. Data Storage & Security

Local Storage

All your financial data is stored locally on your device using an encrypted SQLite database (Room Database). This data is accessible only by the Expense Tracker app on your device.

Cloud Storage (Google Sign-In Only)

If you choose to sign in with Google, your data is backed up to Google Firebase Firestore — a secure, encrypted, enterprise-grade cloud database operated by Google LLC.

• All data transmitted to Firebase is encrypted in transit (TLS/SSL)
• Data stored in Firebase is encrypted at rest
• Firebase complies with ISO 27001, SOC 1, SOC 2, and SOC 3 standards
• Only your User ID is used to identify your data in the cloud
• No other user can access your data

Guest Mode Storage

In Guest Mode, all data stays exclusively on your device. Nothing is uploaded to any server. Your data is stored only in your phone's local storage.

🔑 5. Google Sign-In & Firebase

Expense Tracker uses Google Sign-In (via Firebase Authentication) as the only account sign-in method. When you sign in with Google:

• We receive your name, email and Google User ID from Google
• We store your User ID in Firebase to link your financial data to your account
• We display your name and photo inside the app for personalisation
• We do NOT store your Google password — Google manages authentication entirely
• You can sign out of the app at any time from the side menu

Google's privacy policy governs how Google handles your account data. You can review it at: https://policies.google.com/privacy

Firebase's privacy and data processing terms are available at: https://firebase.google.com/support/privacy

🗂️ 6. Data Retention

Your data is retained as long as you use the app or maintain your account.

• Local data: Stored on your device until you uninstall the app or clear the app's data from your phone settings
• Cloud data (Google Sign-In): Retained in Firebase as long as your account is active. If you request deletion, we will permanently delete all your data from our servers within 30 days
• Guest data: Stored only on your device. Deleted automatically when you uninstall the app

✅ 7. Your Rights & Choices

You have full control over your data at all times:

How to Delete Your Data

• Delete all local data: Go to your phone Settings → Apps → Expense Tracker → Clear Data
• Delete cloud data: Email us at maha199728@gmail.com with subject "Delete My Data" and we will permanently delete all your Firebase data within 30 days
• Export your data: Use the Export feature inside the app (Expenses screen → Share icon) to download your data as Excel or TXT at any time

👶 8. Children's Privacy

Expense Tracker is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 years of age.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at maha199728@gmail.com and we will delete that information promptly.

🔗 9. Third-Party Services

Expense Tracker uses the following trusted third-party services:

• Google Firebase Authentication — Secure sign-in. Privacy policy: https://firebase.google.com/support/privacy
• Google Firebase Firestore — Cloud data storage. Privacy policy: https://firebase.google.com/support/privacy
• Google Sign-In — Account authentication. Privacy policy: https://policies.google.com/privacy

We do not use any advertising SDKs, analytics platforms (such as Google Analytics or Firebase Analytics), crash reporters, or any other third-party tracking tools.

📱 10. App Permissions

Expense Tracker requests only the minimum permissions required:

• INTERNET — Required for Google Sign-In and Firebase cloud sync. Not used for any other purpose.
• No access to Camera — We never access your camera
• No access to Contacts — We never read your contacts
• No access to Location — We never track your location
• No access to SMS or Calls — We never read messages
• No access to Microphone — We never use your microphone

📝 11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our app features, legal requirements, or business practices.

When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify users through an in-app notification for significant changes
• Post the updated policy at the same URL

Your continued use of Expense Tracker after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

⚖️ 12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes relating to this policy shall be subject to the exclusive jurisdiction of the courts of India.

For users in the European Union: We comply with the General Data Protection Regulation (GDPR) to the extent applicable. You have the right to access, rectify, erase, and port your personal data. Contact us to exercise these rights.

For users in California, USA: We comply with the California Consumer Privacy Act (CCPA) to the extent applicable.