Privacy Policy

Expenses Pro+ (“we”, “us”, “our”) is a personal money-management app that helps you track expenses, income, transfers, monthly plans, debts, loans, and project budgets. The app is published for Android and iOS and is supported by our servers at expensesproplus.com.

We are the data controller for the personal information described in this policy. If you have any question about how your data is handled, contact us at expensesproplus@gmail.com.

We only collect what the app needs to work. We do not collect your location, contacts, photos, or advertising identifiers, and the app contains no advertising.

Account information

• Name and email address when you create an account or sign in with Google.
• Password, stored only as a one-way hash. We never see or store your plain-text password.
• Google account details if you choose “Sign in with Google”: your Google user ID, name, email, and profile picture URL.
• Email verification and password-reset codes, which are short-lived and deleted after use.

Financial data you enter

Everything you record in the app is stored so it can be shown back to you and synced across your devices. This includes:

• Accounts, balances, currencies, and account ordering.
• Expenses, income, transfers, descriptions, categories, and dates.
• Monthly plan templates and monthly plans.
• Debt profiles and debt transactions.
• Loans, installments, payments, and penalties.
• Projects and project transactions.
• Frequently used entry titles, saved to power auto-suggestions.
• App settings and preferences such as your default currency.

We never connect to your bank. All financial data comes only from what you type into the app.

Device and technical information

• Push notification token (Firebase Cloud Messaging), platform (Android or iOS), device name, app version, and last-seen time, so we can deliver notifications to your devices.
• A device identifier generated for your installation, used to tell your devices apart when syncing offline changes.
• Offline sync logs: when you use the app without a connection, changes are queued on your device and sent later. We keep a record of each queued action and the server’s response so we can resolve conflicts and help you if a sync fails.
• Authentication tokens that keep you signed in, and standard server request data such as IP address and user agent kept in short-lived server logs.

Subscription information

If you purchase a subscription, the purchase is processed by Apple’s App Store or Google Play through RevenueCat. We receive your subscription status, product identifier, store, purchase and expiry dates, and an anonymous RevenueCat user ID. We never receive your payment card details.

Biometric unlock

You may optionally protect the app with fingerprint or face recognition. This check is performed entirely by your device’s operating system. Biometric data never leaves your device and is never sent to us.

We do not sell your personal data, use it for advertising, or build marketing profiles from your financial activity.

Expenses Pro+ can generate smart monthly reports and entry suggestions. To do this, we send the relevant expense data (amounts, descriptions, categories, and dates for the period being analysed) to an AI provider, currently Google Gemini, which returns a written summary.

• We send only the data needed for the report. We do not send your name, email, password, or payment information.
• Generated reports are stored in your account so you can read them again later.
• AI output is informational and is not financial advice.

The AI provider processes this data under its own terms and privacy policy. See the Google Privacy Policy.

We share data only with the service providers below, only for the purposes described, and only to the extent needed.

We may also disclose information if required by law, to protect the rights and safety of our users, or as part of a merger or acquisition, in which case this policy will continue to apply to your data.

On your device

The app keeps a local copy of your data in an on-device database so it works offline. Sign-in tokens are kept in the platform’s secure storage (Android Keystore or iOS Keychain). Preferences are stored in standard app storage. Uninstalling the app removes this local data.

On our servers

Your account and financial data are stored on our servers so they can be synced and restored. We protect them with:

• Encrypted connections (HTTPS/TLS) between the app and our servers.
• Password hashing, so plain-text passwords are never stored.
• Token-based authentication with the ability to sign out and revoke sessions.
• Email verification before financial data can be accessed.
• Restricted, role-based access for our staff. Staff may view account records only to provide support and resolve sync issues.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your data, we will notify you as required by law.

• Account and financial data are kept for as long as your account exists.
• Verification and password-reset codes expire quickly and are deleted once used or expired.
• Push tokens and device records are removed when you sign out of a device or delete your account.
• Offline sync logs are kept while your account exists for troubleshooting and are deleted with the account.
• Server request logs are kept for a short period for security and reliability, then discarded.

When you delete your account, all of the above is permanently removed as described in section 9.

Depending on where you live, you may have rights under laws such as the GDPR (EU/UK) or the CCPA/CPRA (California). Regardless of location, we offer everyone the following:

• Access and portability: you can view all of your data inside the app and request a copy by contacting us.
• Correction: you can edit or delete individual entries directly in the app at any time.
• Deletion: you can delete your entire account from within the app (see section 9).
• Notifications: you can disable push notifications in your device settings at any time.
• Google Sign-In: you can revoke the app’s access from your Google account permissions page.
• Objection and restriction: you may ask us to stop or limit certain processing where the law allows.
• Complaint: you may lodge a complaint with your local data protection authority.

To exercise a right that is not available in the app, email expensesproplus@gmail.com from the address on your account. We respond within 30 days.

You can permanently delete your account and all associated data from inside the app. Open Settings, choose Delete account, and confirm. Deletion happens immediately and removes:

• Your profile, email, password hash, Google link, and avatar.
• All accounts, expenses, income, transfers, plans, debts, loans, projects, and saved titles.
• AI-generated reports and conversation history.
• Device records, push tokens, sync logs, sessions, and access tokens.
• Subscription records held on our servers. Any active subscription must be cancelled separately through the App Store or Google Play.

If you cannot access the app, email expensesproplus@gmail.com from your account email and we will delete the account for you.

Expenses Pro+ is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it promptly.

Our servers and the providers listed in section 5 may process data in countries other than your own, including the United States. Where required, we rely on recognised safeguards such as standard contractual clauses and the providers’ own compliance programmes to protect your information during these transfers.

We may update this policy as the app evolves. When we make material changes we will update the effective date at the top of this page and, where appropriate, notify you in the app or by email. Continued use of the app after a change means you accept the updated policy.