Privacy Policy

The short version

Expenssly stores the financial data you enter so it can show it back to you. We do not sell it, we do not share it with advertisers, and we do not use it to build a profile of you for anyone else. Diagnostic logging is deliberately built so that amounts, merchants and descriptions never leave our own database.

What we collect

• Account details. Your name and email address, handled by our authentication provider so that we never store a password ourselves.
• Financial data you enter. Expenses, income, receipts and receipt images, budgets, recurring bills, merchants, categories and categorization rules.
• Preferences. Your display currency, theme and feature settings.
• Operational telemetry. Which actions occurred and how long external calls took, so we can tell when something is broken.

What we never log

Our diagnostic logging records that an action happened, never its contents. Amounts, merchant names, descriptions, categories and uploaded filenames are excluded by design rather than by convention, and the only identifier attached to a log line is an opaque internal account number that means nothing outside our own database. Error messages are scrubbed before they are sent, so that a parsing failure cannot leak a fragment of your receipt into a log.

Third parties that process data

• Authentication provider. Holds your login credentials, name and email address.
• AI provider. Receives receipt images you choose to scan, and - for accounts with AI insights enabled - the spending figures needed to generate a digest or answer a question. It is not used to train models on your data.
• Exchange rate providers. Receive currency codes only. They never receive your amounts or any account identifier.
• Email provider. Delivers transactional email such as alerts and digests.
• Hosting and monitoring. Runs the application and receives the scrubbed operational telemetry described above.

Data stored on your device

Because Expenssly works offline, expenses and receipt images you create without a connection are stored in your browser on your own device until they sync. Clearing your browser storage before they sync will discard them.

Your choices

You can edit or delete any individual entry at any time from within the app. You can request a copy of your data or the deletion of your account and everything in it by contacting us; deletion removes your expenses, income, receipts, budgets and rules from our database.

Changes and contact

If this policy changes materially we will update the date at the top of this page. Questions about privacy, data access or deletion can be sent to us through the contact route listed on our terms of service.