Privacy policy

From Google, when you sign in: your name, email address and the link to your Google profile picture, plus the sign-in tokens Google gives us to confirm it's you. We ask Google for nothing else: no contacts, no files, no Gmail.

What you enter: your expenses and refunds (amount, merchant, date, category and any note), your own categories, your monthly budget and category limits, and your currency.

Events you organize: each event's name, dates and budget, what was spent on it, the money collected for it, and the names of the people you add to it. Those names are only labels for your own record: we never contact them, and they don't get an account.

Family, if you join one: the family's name, who's in it, your privacy choice for it, invite links the owner makes, and the names you give the others (which only you see).

Behind the scenes: when you signed up, when you last used the app, and your sign-in sessions (which browser, IP address and when), so you stay signed in and we can spot misuse.

We never ask for your bank login or card details. Xpensefy doesn't connect to your bank.

• To sign you in and keep your account yours.
• To show your spending, budgets and charts back to you.
• To keep the service safe, for example by limiting how often requests can be made.

Inside a family you're in, members see your spending only as far as you choose: nothing, your monthly totals by category, or your expenses as well, from any month (never your notes). If you're in more than one family, you choose for each. They can look, never change anything, and it stops the moment you leave or are removed. The owner can see open invites and remove members.

That's all. We don't sell your data, share it with advertisers, or use it to show you ads. We don't use analytics or tracking tools.

You. A small Xpensefy team can see account details (name, email, when you joined and last used the app, and how many expenses you logged this month) to run the service and deal with misuse. They can suspend an account that breaks the rules, and every such action is recorded.

Your data is stored and processed by these services, which work on our behalf:

• Neon: the database holding your account and expenses, in Singapore.
• Vercel: runs the app. Like any web host, it keeps short-lived request logs, including IP addresses.
• Upstash: counts requests to stop abuse. It briefly holds your IP address or a scrambled form of your session, deleted within an hour.
• Google: handles sign-in.

We use only the cookies the app needs: one that keeps you signed in, and one that remembers the theme you picked. No advertising or tracking cookies.

• Get a copy: download every expense as a CSV file from Profile → Your data.
• Correct it: change your name, currency, categories, expenses and events in the app at any time.
• Delete it: email us from the address you sign in with and we'll delete your account and everything in it within 30 days.

As long as you have an account. When it's deleted, your expenses, categories, budgets, events and family membership go with it (a family you own is deleted too). Deleting an event deletes everything in it. Sign-in sessions expire on their own.

The live demo is a shared sample account that needs no sign-in. Nothing you change in it is saved. Opening it creates a short-lived session (with your IP address, as above) that ends when you close the browser.

If this policy changes, we'll update this page and the date at the top. Questions, or a request about your data? Email peyyala.dev@gmail.com.