Privacy Policy

Effective November 13, 2026

This policy explains what data My Expense (the “app”) handles, why, and what choices you have. The app is provided by the developer of My Expense (“we”).

In short

• Your expenses, budgets, categories and wallets stay on your phone. We run no server and cannot see them.
• If you sign in with Google to back up, a copy is stored in a hidden folder of your own Google Drive that only this app can open.
• If you turn on notification access, the app reads notifications from a fixed list of banking and e-wallet apps, and ignores every other app.
• The app downloads public exchange rates and sends crash reports, performance data and usage statistics to Google through Firebase.
• No ads. We do not sell your data.

Data the app handles

Expense data you enter or that is captured

Amounts, merchants, dates, categories, wallets, budgets, recurring items, income and transfers. This data is stored in the app's private storage on your device. It leaves the device only when you create a backup or export, as described below.

Notification content

When you grant Notification access in Android settings, the app checks the package name of each notification. Only notifications from the supported banking and e-wallet apps of the five supported countries are read, and only for the sources you leave switched on (the list follows the country you pick):

• Indonesia: BCA, Mandiri, BRI, BNI, CIMB Niaga, PermataBank, BSI, Jago, Neo Commerce, GoPay, DANA, OVO, ShopeePay
• Singapore: DBS, OCBC, UOB, DBS PayLah!, GrabPay
• Malaysia: Maybank, Touch 'n Go, Boost, GrabPay
• China: ICBC, China Construction Bank, China Merchants Bank, Alipay
• Japan: MUFG, SMBC, Mizuho, Japan Post Bank, Rakuten Bank, PayPay, Rakuten Pay, d払い, au PAY

Notifications from every other app are discarded without reading their content.

For a supported app, the title and text are read on your device to find an amount and a merchant. The original title and text are saved with the entry so you can review it (“Original notification”). Notifications that look like incoming money, promotions or duplicates are kept as ignored entries and deleted automatically after 30 days. Notification text may include details your bank puts in its messages, such as part of an account number or a balance. This text never leaves your device unless you create a backup, because a backup is a copy of the app database. You can switch notification access off at any time in Android settings, or turn off individual sources in the app.

Google account and Google Drive (optional)

Signing in with Google is only used for backup and is optional. The app asks for two permissions:

• Your email address (userinfo.email), only to show which account is connected. It is stored on your device.
• The app's own hidden folder in Google Drive (drive.appdata). The app can read and write only files it created there. It cannot see any of your other Drive files, and other apps cannot see this folder. The app keeps your 3 most recent backups.

Backups travel directly between your phone and Google over an encrypted connection. They are not sent to us. We cannot read them.

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the backup and restore feature. It is not used for advertising, not sold, and not shared with anyone.

Firebase (diagnostics and usage)

The app uses Firebase Crashlytics, Firebase Performance Monitoring and Google Analytics for Firebase, provided by Google. They collect crash reports and stack traces, performance traces, device model, Android version, app version, an app instance identifier and general usage events. This data is used to find bugs and make the app faster. It is not linked to your name or email address, and we do not send your expense data to Firebase. Google processes this data under the Firebase privacy information.

Region, language and exchange rates

The country, currency, number format and language you choose are stored on your device only. To show today's exchange rates, the app downloads one public document of European Central Bank reference rates from Firebase Cloud Firestore, provided by Google, and keeps a copy on the device for offline use. This request sends nothing about you or your expenses; like any network request, Google sees technical data such as your IP address. The rates are for information only and the app never converts the amounts you record.

Files you export

CSV exports and backup files are saved where you choose. Once saved, they are under your control and the control of whichever app or service you share them with.

App lock

If you turn on app lock, Android shows its own fingerprint or face prompt. The app only receives a yes or no result and never sees your biometric data.

What we do not do

• We do not have user accounts or a server that stores your data.
• We do not show ads or use advertising identifiers.
• We do not sell or rent personal data.
• We do not read notifications from apps outside the list above.

Sharing

We do not share your data with third parties, other than Google acting as a service provider for Firebase (including the exchange rate download) and, when you choose to use it, for Drive. We may disclose information if the law requires it, although we hold very little to disclose.

Retention and deletion

• On your device: data stays until you delete entries or uninstall the app. Uninstalling removes all app data from the device.
• In Google Drive: backups stay in your hidden app folder until the app replaces old ones or you delete them. To remove them yourself, open Google Drive on the web, go to Settings, Manage apps, find My Expense and choose “Delete hidden app data”. You can also revoke the app's access at myaccount.google.com/permissions.
• Firebase data: kept by Google for the periods in its documentation. To ask about it, contact us at the address below.

Security

Data is stored in the app's private storage, which other apps cannot read on an unmodified Android device. Network traffic uses HTTPS. No method of storage is perfectly secure, so keep your phone locked and your Google account protected.

Children

The app is not directed to children under 13, and we do not knowingly collect personal data from them.

Changes to this policy

If we change this policy, we will post the new version on this page and update the date at the top. If a change affects how your data is used, we will also tell you in the app.

Contact

Questions or requests about this policy: privacy@example.com