Privacy Policy

Effective date: October 8, 2026

1. Who we are

Expense Tracker is a mobile personal finance app. Questions about this policy can be sent to rishabhjain@expensetracker.date.

2. Information we collect

Account: your email address, your password (handled by Firebase Authentication, never stored by us in readable form), and a Firebase user ID. Sign-in is by email and password.
Data you enter: transactions (amount, date, item name or merchant, category, and status), your categories, and your monthly budgets.

3. SMS permission (Android)

On Android, Expense Tracker can ask for permission to read your SMS messages (READ_SMS / RECEIVE_SMS) so it can detect bank and payment transaction messages and save them as expenses for you.

SMS access is optional and opt-in. The app asks for permission first, and you can use the app fully without it.
Messages are read and parsed on your device only, to detect bank and payment transactions.
Raw SMS text never leaves your device. It is not transmitted, logged, or stored on our servers.
Only the extracted amount, transaction date, and merchant name are sent to our servers, along with a client reference ID used to prevent duplicates. The reference ID is a one-way hash (fingerprint) that cannot be reversed into the message. These are the same fields you would enter manually.
SMS data is never sold, shared, or used for advertising.
You can revoke the permission at any time in Android system settings.

4. How we use information

We use your information only to provide the app's features: syncing your data, the dashboard, and budgets. We do not show ads, build advertising profiles, or sell data.

5. Where data is stored and who processes it

Firebase Authentication (Google): manages sign-in.
Amazon Web Services: our backend runs on AWS Lambda behind API Gateway.
TiDB Cloud: our database, which stores your account record and the data you enter.

Data is sent between the app and our servers over HTTPS.

6. Sharing

We do not share your information with third parties, except the infrastructure processors listed above or when required by law.

7. Retention and deletion

We keep your data while your account exists. To request deletion of your account and all associated data, email rishabhjain@expensetracker.date from your account email address. We will process requests within 30 days.

8. Children

The app is not directed at children under 13, and we do not knowingly collect their data.

9. This website

This website uses no cookies, analytics, or tracking, and makes no third-party requests.

10. Changes and contact

If we change this policy, we will update the effective date above. Contact: rishabhjain@expensetracker.date.