Expense & Save ("we", "us", "our") is committed to protecting your privacy. This policy explains what we collect, why we collect it, how it is stored, and the rights you have over your data. It applies to the Expense & Save web application, the Progressive Web App, and any future Android or iOS clients that connect to the same service.

1. Information We Collect

We only collect information that is necessary to deliver the service. This is grouped into the categories below.

1.1 Account Information

Full name (optional; used only for personalisation).
Email address (used as the login identifier and for essential account communication).
Password (stored only as a salted bcrypt hash — the plain-text password never touches our database).
Preferred currency, language and notification settings.

1.2 Transaction Data

Income and expense entries you create: amount, category, source, payment method, notes, timestamp.
Recurring plans, budgets, goals, debts and investments you configure.
Optional attachments (e.g. receipt images) that you upload voluntarily.

This information is used solely to power your dashboard, insights and reports. It is scoped to your account (and any workspaces you explicitly choose to share with).

1.3 Device Information

User-agent string, screen size and language (for responsive rendering and analytics).
IP address (used for basic abuse prevention and coarse geolocation of the request).
PWA install status and push-notification subscription endpoint, if you opt in.

1.4 Cookies & Local Storage

A first-party JWT session token stored in localStorage to keep you logged in.
UI preferences (theme, locale, dashboard month) stored locally on your device.
Service-worker cache used to power offline access to the app shell and recent data.

We do not use third-party advertising cookies or cross-site trackers.

2. How We Use Your Information

Provide the core features: dashboard, transactions, budgets, recurring plans, insights.
Authenticate your requests and keep your account secure.
Send transactional emails only (e.g. password reset, security alerts).
Improve the product using aggregated, non-identifiable usage patterns.
Meet legal obligations such as fraud investigation or lawful requests from authorities.

3. AI Features

Some features — voice entry, receipt OCR and the AI Advisor — send the specific input you provide (a short audio clip, an image, or a summary of your recent finances) to a large-language-model provider so it can return a structured response. Only the minimal data required for that request is sent, it is transmitted over HTTPS, and it is used solely to compute your answer. We do not use your data to train third-party models, and we do not enable model providers to retain your prompts for training.

4. Data Security

All traffic is served exclusively over HTTPS with modern TLS.
Passwords are hashed with bcrypt before storage; plain text is never persisted.
Access to production databases is restricted to a small set of maintainers and logged.
Sessions expire and can be revoked at any time from Profile & Settings.

5. Data Retention

We retain your account and transaction data for as long as your account remains active. If you delete your account (Profile & Settings → Security → Delete Account), we permanently remove your personal data and transactions within 30 days, except where minimal retention is required by law (e.g. tax or fraud records).

6. Third-Party Services

We rely on a small number of vendors, each contractually bound to protect your data:

Cloud hosting and MongoDB-compatible database providers (application + data storage).
Email delivery provider (transactional emails only).
AI providers used strictly for the AI features described in section 3.
Currency exchange-rate providers (only country/currency codes are transmitted).

7. Google Services

If you enable Google sign-in in the future, we receive your Google email address and basic profile fields (name, avatar) solely to create or match your Expense & Save account. We do not request access to Gmail, Drive, Contacts or any other Google API beyond basic profile.

8. Analytics

We use only privacy-friendly, aggregate analytics to measure feature adoption. No individual user is profiled and no third-party trackers are loaded on the client.

9. Advertising

Expense & Save contains no advertising today. If we ever introduce advertising in the future, this policy will be updated in advance and you will be given the opportunity to opt out.

10. Your Rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you.
Correct or update your account information at any time from Profile & Settings.
Export your transaction history in a portable format (CSV / JSON).
Delete your account and all associated personal data.
Withdraw consent for optional features (voice, OCR, AI Advisor) at any time.
Lodge a complaint with the data-protection authority of your jurisdiction.

11. Data Deletion

You can permanently delete your account and all associated data from Profile & Settings → Security → Delete Account. The deletion is irreversible; a confirmation dialog is shown before the request is processed. If you cannot access your account, email us at info@dailyexpense.online and we will action the request within 30 days.

12. Children's Privacy

Expense & Save is a financial product intended for users who are at least 18 years old or the legal age of majority in their jurisdiction. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

13. International Transfers

Your data may be processed in a country other than your own. Wherever it is processed, it is protected by the same security measures described in this policy.

14. Policy Updates

We may update this policy from time to time to reflect changes in the product, the law or our practices. Material changes will be highlighted in-app and the "Last updated" date at the top of this page will be revised. Continued use of Expense & Save after such changes constitutes acceptance of the updated policy.

15. Contact

Questions, requests or complaints about this policy? Reach us at info@dailyexpense.online. We aim to respond within 5 business days.

Privacy Policy