Privacy Policy

At Expense Manager ("we," "our," or "us"), protecting your privacy and securing your personal and financial information is our highest priority. This Privacy Policy explains how our application captures, processes, stores, and protects your data in accordance with the Apple App Store Review Guidelines, GDPR, and applicable privacy laws.

1. Information We Collect

We only collect information strictly necessary to provide intelligent expense tracking and automated receipt management:

• Account Information: Your email address, name, optional phone number, profile photo, and password credentials (securely hashed and managed by our authentication provider).
• Receipt & Expense Data: Photographs of receipts you capture or upload, extracted merchant names, line items, transaction dates, tax totals, currencies, and spending categories.
• Device & Telemetry Data: Minimal diagnostic information (such as operating system version and application build) used strictly to diagnose crashes and ensure compatibility.

2. How We Use Your Information

Your data is processed exclusively for the following operational purposes:

• To extract merchant names, line items, and totals from your uploaded receipts using advanced optical character recognition (OCR) and machine learning models.
• To organize, categorize, and present your spending analytics and generate Excel export reports.
• To send transactional authentication codes (one-time passwords / OTP) and instant receipt scan confirmations via email.
• To verify and maintain your active subscription entitlements across your devices.

3. Third-Party Service Providers

To provide our cloud services, we partner with industry-leading infrastructure providers under strict data-protection agreements:

• Amazon Web Services (AWS): Receipts and profile images are stored in private, encrypted S3 buckets with time-limited signed URLs. Automated emails are transmitted securely via AWS Simple Email Service (SES).
• Supabase: Provides authenticated user sessions and encrypted PostgreSQL database hosting with strict Row-Level Security (RLS) enforcement.
• Google Gemini AI: Used to analyze receipt image contents and extract structured expense fields. Receipt buffers are processed ephemerally and are not used to train public machine learning models.
• RevenueCat & Apple StoreKit: Manages in-app subscriptions and purchase receipts securely without exposing credit card details to our servers.

4. Data Protection & Zero Tracking Commitment

All network communications are strictly encrypted in transit using Transport Layer Security (TLS 1.3), and all uploaded files are encrypted at rest using 256-bit AES encryption.

5. User Rights & Data Deletion

In compliance with Apple App Store Review Guideline 5.1.1(v) and global privacy standards, you maintain absolute control over your information:

• Data Export: You can export your full transaction history and itemized lists into Excel (.xlsx) format at any time directly within the application.
• In-App Account Deletion: You can permanently delete your account and all associated receipts, expenses, and profile records directly within the mobile app via Profile → Delete Account.
• Web Deletion Request: If you cannot access the app, you may request complete account erasure via our Account Deletion Portal or by emailing us directly.

6. Children's Privacy

Expense Manager is designed for general audiences and business professionals. We do not knowingly collect or solicit personal information from individuals under the age of 13 (or 16 in certain jurisdictions).

7. Contact Us

If you have questions, feedback, or data privacy requests concerning this Privacy Policy, please contact our Data Protection team:

Email: info@alpha-devs.cloud