What we collect
If you create an account we collect your name and email address, and a password that we store only as a secure hash. We also store the financial entries you create: accounts, transactions, budgets, categories and recurring rules. If you choose, we store receipt photos and a profile photo.
Our servers keep standard technical logs, such as IP address and request times, to keep the service running and secure.
Using ExpenseTio without an account
You can use the app without creating an account. Everything you add then stays on your phone and is not sent to us. If you create an account later, that data is uploaded to it so it is backed up and available on your other devices. If you delete the app or reset your phone before that, the data cannot be recovered.
How we use your data
Only to provide the app: to show your balances and reports, to sync your data across your devices, to send password reset emails and to keep your account secure. We do not sell your data and we do not show ads.
On your device
ExpenseTio keeps a copy of your data in its own storage on your phone, so it works without a connection. Changes sync to your account when you are back online. Your sign-in token is kept in the device's secure storage.
If you turn on the biometric lock, unlocking uses Face ID, your fingerprint or your device passcode. Your biometric data never leaves your device.
Where files are stored
Receipts and profile photos are stored in private object storage. They are not public: only you, signed in to your account, can open them.
Sharing
We share data only with the service providers that host and operate ExpenseTio, and only as needed to run it, or when the law requires.
Security
Data you back up travels over an encrypted connection, and each account can only reach its own records. No system is perfectly secure, so please use a strong, unique password.
Your choices and rights
You can edit your details, export your transactions as a CSV file, remove your photo or receipts, and delete your account and all of its data from the app at any time. If you are in the EU or UK you also have the usual rights of access, correction, erasure and portability. To use a right that the app does not cover, write to us.
How long we keep data
We keep your data while your account exists. When you delete your account, your records and uploaded files are permanently removed.
Children
ExpenseTio is not directed at children, and we do not knowingly collect their data.
Changes to this policy
If we make a significant change we will tell you in the app or on this page, and update the date above.
Questions about your data?
Write to privacy@expensetio.com.