What we collect
If you create an account we collect your name and email address, and a password that we store only as a secure hash. We also store the financial entries you create: accounts, transactions, budgets, categories and recurring rules. If you choose, we store receipt photos and a profile photo.
Our servers keep standard technical logs, such as IP address and request times, to keep the service running and secure.
Using ExpenseTio without an account
You can use the app without creating an account. Everything you add then stays on your phone and is not sent to us. If you create an account later, that data is uploaded to it so it is backed up and available on your other devices. If you delete the app or reset your phone before that, the data cannot be recovered.
How we use your data
Only to provide the app: to show your balances and reports, to sync your data across your devices, to send password reset emails and to keep your account secure. We do not sell your data and we do not show ads.
On your device
ExpenseTio keeps a copy of your data in its own storage on your phone, so it works without a connection. Changes sync to your account when you are back online. Your sign-in token is kept in the device's secure storage.
If you turn on the biometric lock, unlocking uses Face ID, your fingerprint or your device passcode. Your biometric data never leaves your device.
Where files are stored
Receipts and profile photos are stored in private object storage. They are not public: only you, signed in to your account, can open them.
Crash reports
To find and fix bugs, the app can send a report to Google Firebase Crashlytics when it fails. A report contains the error and where it happened, the app version, your phone model and system version, whether you use an account (not which one) and a random installation identifier. It never contains your transactions, amounts, names, emails, receipts or photos.
Reports are on by default and you can turn them off at any time in the app under Settings, Crash reports. Turning them off also discards reports that were not sent yet.
Reminders and alerts
Reminders (a daily nudge to log your spending, budget alerts and upcoming recurring payments) are created and shown by the app on your phone. They work offline, with or without an account, and nothing about them is sent to our servers or to anyone else. A reminder can show the name of a payment or budget and an amount on your lock screen. You choose which ones you get, and when, in the app under Settings, Reminders & alerts, and you can turn them all off there or in your phone's settings.
Usage statistics
To learn which features are used and where people get stuck, the app can send anonymous usage statistics to Google Firebase Analytics: which screens are opened, and that something happened (for example "a transaction was added", never what it was). They also include the app version, your phone model, system version and language, your approximate country, whether you use an account (not which one) and a random installation identifier. They never contain your transactions, amounts, names, emails, titles, notes, receipts or photos, and the app does not use your advertising identifier.
Usage statistics are on by default and you can turn them off at any time in the app under Settings, Usage statistics. Turning them off stops collection and resets the installation identifier.
Website statistics
On this website (not in the app) we use Google Tag Manager to count visits: which pages are opened, the approximate country and the type of device. It is never loaded on pages with a private link (password reset, invitations, payment). A banner lets you accept or decline, and you can change your choice at any time under Cookie settings in the footer. In the EU, EEA, United Kingdom and Switzerland nothing is measured until you accept. It is not used for advertising.
Spam protection
The contact form on this website is protected by Google reCAPTCHA, which looks at how the form is used (for example mouse movement and your IP address) to tell people from robots, and sends that to Google. It is only loaded on the Support page. The Google Privacy Policy and Terms of Service apply.
Sharing
We share data only with the service providers that host and operate ExpenseTio (and, while crash reports or usage statistics are on, Google for crash reporting and analytics), and only as needed to run it, or when the law requires.
Security
Data you back up travels over an encrypted connection, and each account can only reach its own records. No system is perfectly secure, so please use a strong, unique password.
Your choices and rights
You can edit your details, export your transactions as a CSV file, remove your photo or receipts, and delete your account and all of its data from the app at any time. If you are in the EU or UK you also have the usual rights of access, correction, erasure and portability. To use a right that the app does not cover, write to us.
How long we keep data
We keep your data while your account exists. When you delete your account, your records and uploaded files are permanently removed.
Children
ExpenseTio is not directed at children, and we do not knowingly collect their data.
Changes to this policy
If we make a significant change we will tell you in the app or on this page, and update the date above.
Questions about your data?
Write to privacy@expensetio.com.