Privacy Policy

Account information. When you create an Expenso account we collect your email address and, if you use Sign in with Apple, the identifier and the name and email Apple chooses to share (which may be a private relay address).

Financial information you enter. Income, expenses, categories, budgets, income sources, currencies, notes and any attachments you add. Expenso does not connect to your bank and does not read your bank credentials or card numbers.

Technical information. Basic device, app version and diagnostic information needed to keep the service reliable and secure.

We use your information to provide the service: to authenticate you, store and sync your records, calculate budgets and analytics, generate AI insights and briefings, send the notifications and exports you request, and to fix problems and prevent abuse.

Expenso supports Sign in with Apple and email magic-link sign-in. We do not store passwords. Magic links are single-use and time-limited.

Supabase hosts our database, authentication and file storage and acts as our data processor. Your records are stored there under access rules that restrict each record to its owning account.

Resend delivers transactional email such as magic links, exported reports and alerts. Resend receives your email address and the message content.

Apple processes App Store purchases and subscriptions. We do not receive your payment card details.

Expenso's AI Copilot, daily briefing and insight features send the relevant subset of your financial records to a third-party AI model provider so that a response can be generated. This data is sent only to produce the output you requested. We do not permit these providers to use your data to train their models, and we do not sell your data or use it for advertising. If you prefer not to have your data processed this way, do not use the AI features.

We keep your account data for as long as your account is active. If you delete your account, your records are removed from our production database, with residual copies in encrypted backups purged on our normal backup cycle (within 30 days). Minimal transaction records may be retained where the law requires it.

You can delete individual records at any time inside the app. To delete your entire account and all associated data, use the delete-account option in the app settings or email amira.elbana@gmail.com. We action verified deletion requests within 30 days. You may also request a copy of your data or ask us to correct it.

Expenso is not intended for children under 13, and we do not knowingly collect their data.

We may update this policy as the product evolves. The date at the top of this page always reflects the current version.

AM for Computer Systems and Software Design, Dubai, United Arab Emirates. amira.elbana@gmail.com