Privacy Policy
Last updated: 16 May 2026
The short version
We only collect what we need to run the app. We never sell your data. Your expense records stay private to your account.
What we collect
- Account info: your name, email address, and (if you sign in with Google) profile picture.
- Financial data you enter: expenses, budgets, categories, loans, and notes. This is private to your account.
- Usage data: when you last logged in, when you last opened the app. Used for security and to keep your account active.
- Payment data: processed by Razorpay. We see your order ID and amount, but never your card number.
How we use your data
- To provide and maintain Expendora's features.
- To send essential service emails (password reset, subscription, account notifications).
- To improve the app and respond to your support questions.
- To prevent fraud and abuse.
We do not use your financial data for advertising, sell it to third parties, or share it with anyone other than as described below.
AI features (when enabled)
We offer two AI-powered features that send data to OpenAI when you have AI features enabled in Settings:
AI insights — anonymized spending summaries (aggregated numbers and category labels) are sent to OpenAI to generate personalized observations. Never includes your name, email, transaction notes, or identifying details.
Smart Scan (receipt scanning) — when you upload a receipt image, that image is sent to OpenAI Vision to extract amount, merchant, date, and category. Note that the image content (your purchase details, store name, etc.) is therefore shared with OpenAI for processing.
OpenAI does not use this data to train their models per their API usage policy. You can disable both features at any time from Settings → AI features — once disabled, neither feature makes any external API calls.
AI insights — anonymized spending summaries (aggregated numbers and category labels) are sent to OpenAI to generate personalized observations. Never includes your name, email, transaction notes, or identifying details.
Smart Scan (receipt scanning) — when you upload a receipt image, that image is sent to OpenAI Vision to extract amount, merchant, date, and category. Note that the image content (your purchase details, store name, etc.) is therefore shared with OpenAI for processing.
OpenAI does not use this data to train their models per their API usage policy. You can disable both features at any time from Settings → AI features — once disabled, neither feature makes any external API calls.
Who we share data with
- Razorpay — to process payments. Their privacy policy applies to payment data.
- Google — only if you choose to sign in with Google. We receive your email + name from them.
- OpenAI — only if AI features are enabled. We send anonymized spending data (for AI insights) and receipt images (for Smart Scan) as described above.
- Our hosting provider — the servers that store your data.
- Advertising partners (future, free tier only) — if and when we introduce ads to the free tier, we'll update this list with specifics about which providers and what data is shared. Pro subscribers never see ads.
- Law enforcement — only when required by law (e.g. a valid court order).
Your rights
You can at any time:
- View and edit your account information from Settings.
- Export your data as PDF or Excel (Pro feature).
- Request deletion of your account by emailing support@expendora.app. We'll delete everything within 30 days.
- Cancel your subscription at any time from Settings.
Data security
Passwords are hashed with bcrypt (we never see them). Connections use HTTPS. Your data sits on servers protected by firewalls and access controls. We can't promise zero risk, but we take the standard precautions seriously.
Data retention
We keep your data as long as your account is active. After you delete your account, your data is removed from our active systems within 30 days. Backups may retain data for up to 90 days.
Cookies & tracking
We use a single authentication cookie to keep you signed in. We don't use third-party tracking, advertising cookies, or analytics scripts on your account pages.
Children
Expendora is not intended for children under 13. We don't knowingly collect data from minors.
Changes to this policy
If we make material changes, we'll notify you by email. The "last updated" date at the top of this page always reflects the latest version.
Contact
Questions or concerns? Email support@expendora.app or use our contact form.