Privacy Policy
ExpenseCub ("we", "us") is an expense and income tracker. This policy explains what information the app handles, where it's kept, who can see it, and how to delete it. The short version: your receipt photos stay on your device, your entries are visible only to you, and we don't sell or advertise with your data.
Information you give us
If you create an account
- Sign-in details: your email address and the sign-in method you used. If you continue with Google, Google shares your name, email address and profile photo with us. If you use an email and password, your password is handled by Google Firebase Authentication; we never see or store it.
- Account records: when the account was created and last signed in, kept by Firebase Authentication.
Your ledger
What you enter or confirm from a receipt: amounts, dates, store or title, notes, categories, businesses, tags, payment-method names and the last 4 digits of a card (never full card numbers), and the details read from a receipt (store name, date, total and card last 4) so the app can match future receipts.
Receipt photos
Photos you scan or choose are stored only on the device where you captured or picked them: in the Android app's private storage, or in your browser's storage on the web. They are not uploaded to ExpenseCub's servers. On Android, the camera scanner is Google's document scanner provided through Google Play services, and the text on a receipt is read on your phone with Google ML Kit. If you open an entry on another device, you'll see the entry without its photo.
How your information is stored
Without an account, everything stays on your device. If you've turned on Android device backup, the app's data may be included in your Google backup.
With an account, your ledger is stored in Google Cloud Firestore in the United States, under your account. It's encrypted in transit and at rest, and security rules allow only your signed-in account to read or change it. Each device also keeps an offline copy so the app works without a connection.
How we use it
- To run the app: show and sync your entries, and suggest the business, category, card, tags and date for new receipts based on your own past entries.
- To keep your account secure and to answer you when you contact support.
We don't use your information for advertising, we don't build profiles about you, and we don't sell or rent your personal information to anyone.
Who we share it with
Only the service providers that run ExpenseCub for us, under their own privacy and security terms:
| Provider | What for |
|---|---|
| Google (Firebase Authentication, Cloud Firestore) | Sign-in and storing your synced ledger |
| Google (Play services, ML Kit) | The camera scanner and on-device text reading on Android. ML Kit sends Google basic diagnostics, such as the device model, app version and how long reading took, with a per-install ID. It doesn't send your receipts or their text. |
| Cloudflare | Hosting the expensecub.com website |
We may also disclose information if the law requires it, for example to answer a valid legal order. ExpenseCub contains no advertising or analytics SDKs.
Android permissions
- Internet: for signing in and syncing your entries.
- Camera: used inside Google's document scanner only while you're scanning.
- Photos: the app sees only the photos you choose in the system photo picker.
Keeping and deleting your information
Your ledger is kept until you delete entries or your account. To delete your account and all synced data, open ExpenseCub and go to Lists › Account › Delete account, or follow the steps on our account deletion page. Deletion from our database happens right away; copies in Google's systems are erased on Google's normal deletion schedule. Receipt photos on your phone are removed when you delete those entries or uninstall the app.
Your choices and rights
- Access and export: export everything to CSV from Lists › Your data.
- Correct: edit any entry, category, tag or card in the app.
- Delete: delete single entries, or your whole account, at any time.
- Use it without an account: keep everything on one device and share nothing with us.
Depending on where you live, you may have additional rights. Email us and we'll help.
Children
ExpenseCub isn't directed to children under 13, and we don't knowingly collect information from them.
Security
We rely on Google's and Cloudflare's security, encrypted connections, and per-account access rules. No system is perfectly secure, so keep your sign-in details private and tell us right away if you suspect a problem.
Changes to this policy
If we change this policy, we'll update the date at the top, and for significant changes we'll tell you in the app.
Contact
Questions or requests: support@expensecub.com