Privacy Policy
Effective 24 July 2026 · Applies to the ExpenseTracker Android app (com.dragon.expensetracker) and this website. See also the Terms of Use.
ExpenseTracker is an expense-splitting app for exactly two people. It is built and operated by Ninad ("we"). This policy says precisely what data the app stores, why, for how long, and how you delete it. It is written to match how the app actually behaves.
Data we collect and why
- Account: your email address, sign-in provider (email/password or Google), and for Google accounts your display name and profile photo URL — to authenticate you and show your partner who you are.
- Profile: the display name (and optional photo) you share with your partner.
- Shared financial ledger: the expenses, splits, settlements, reactions, groups, categories, and budgets you and your partner record — amounts, currencies, descriptions, dates, and who paid. This is the product; it is shared between exactly the two of you.
- Gifts: gift records you create (amount, description, recipient, reveal state) — stored separately so a surprise stays hidden from your partner until you reveal it.
- Preferences: appearance settings, add-on switches, reminder configuration.
- Device and notification identifiers: a Firebase installation ID and a push notification token per device, so budget alerts and payday reminders reach your phone.
- Diagnostics: crash reports and performance measurements (Firebase Crashlytics and Performance Monitoring) and app-interaction analytics (Google Analytics for Firebase) — to keep the app reliable.
- AI notes: the insight card on Home is written by Google's Gemini model. To write it, we send a small, bounded summary of your recent spending: category names, aggregate amounts for the period being compared, and up to 12 short expense descriptions that you typed, grouped and shortened. We do not send names, payer or split details, exact dates, event identifiers, gifts, reactions, or your full history. Descriptions are your own text, so whatever you typed into them is what gets sent — that is why the Terms of Use ask you to keep descriptions free of sensitive information. Every number shown in the note is computed on your device from your own ledger; Gemini only supplies wording. Reports you file about an AI note or about something your partner wrote (including the exact text) are stored for review and are not visible to anyone else, including your partner.
Who processes it, and where
Data is stored and processed by Google Firebase services (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging, Remote Config, App Check, Crashlytics, Performance Monitoring, Analytics, and Firebase AI Logic/Gemini) acting as our service providers. Data is encrypted in transit and encrypted at rest by Google's infrastructure. We do not sell your data and we do not share it with third parties for their own purposes.
Locations differ by service, and we state them separately rather than making one blanket claim:
- Your shared ledger (Cloud Firestore) is stored in the United States, in the
multi-region
nam5. - Server-side functions (Cloud Functions) run in the United States, in
us-central1. - Other Google services we use — Authentication, Cloud Messaging, Remote Config, App Check, Crashlytics, Performance Monitoring, Analytics, and the Gemini model that phrases the AI note — are operated by Google on its global infrastructure, and processing for those services may take place outside the United States.
Retention — read this part
ExpenseTracker keeps a couple's ledger consistent for both partners. That has one important consequence, and we state it plainly, in the same words the app uses:
Deleting your account permanently deletes your sign-in, profile photo and name, your phones' notification registrations, your preferences, surprises you set up, your AI-note feedback and reports, and your invite records.
Shared expenses, settlements, and reactions stay with your partner so their history still adds up. The account identifiers inside that shared history are kept indefinitely — they are what keeps every balance replayable — and your name is shown as “Former partner”.
Your partner keeps the shared space but cannot pair with anyone else in this version of ExpenseTracker.
Deleted data can persist in disaster-recovery backups for up to 30 days before those backups expire. Deletion cannot be undone.
How long each kind of data is kept
Retention is set per service rather than by one blanket period:
- Account and profile (Firebase Authentication, your display name and photo URL): until you delete your account.
- Shared ledger: indefinitely, for the reason given above — both partners must be able to replay the same history.
- Notification token and installation ID (Cloud Messaging, Firebase Installations): until you delete your account or uninstall the app.
- Crash reports (Crashlytics): 90 days.
- Performance measurements (Performance Monitoring): 30 days.
- App-interaction analytics (Google Analytics for Firebase): 2 months.
- Website request logs (Firebase Hosting): 30 days. Hosting request logs are written to Cloud Logging's default bucket, which retains them for 30 days.
- Operational server logs (Cloud Logging): 30 days. They contain no raw account identifiers and no financial content.
- AI note processing (Gemini): Google retains prompts and responses only as needed to detect policy violations and keep the service secure, and — on the paid service we use — does not use them to improve Google's products. We have not been granted zero data retention for this service, and we do not claim it.
- Disaster-recovery backups: up to 30 days after deletion, as stated above.
Deleting your account
Two routes, both fully self-service, both applying the exact contract above:
- In the app: Settings → Delete account (you'll re-verify your identity first).
- On the web: expensetracker-prod-7bf2e.web.app/delete-account — sign in with the same account and confirm.
Your choices
- Notifications are optional; deny or revoke the permission at any time.
- Every add-on (budgets, AI insights, payday reminders, gifts) can be switched off in Settings. Switching off AI insights stops any expense description being sent to Google.
- You can report an AI note, or something your partner wrote, from inside the app. Reports are private to us — see the Terms of Use.
- You can request a copy or correction of your data, or ask us anything about this policy, at the contact below. We verify requests against your signed-in account.
Age
ExpenseTracker is for adults managing shared finances. You must be 18 or older to use it, and the app is neither directed at nor intended to be accessed by anyone under 18. We do not knowingly collect data from children.
Changes
If this policy changes materially, the effective date above changes, the in-app disclosure is updated to match before the change applies, and the app asks you to accept the new version of the Terms of Use before you can continue.
Contact
Ninad — ninadmmulay@gmail.com