Privacy Policy
This policy explains what Personal Expense Tracker (the “Service”) collects,
why, and how it is protected. The short version: your data is yours — it is used only to
run the Service for you, it is never sold, and backups live only in your own Google
Drive.
1. Data we collect
- Sign-in details (from Google): your email address, name and avatar,
used to identify and authenticate you.
- Records you enter: transactions (description, amount, currency,
category, date, payment method, card details — bank name and last 4 digits,
credit/debit flag, notes), recurring transactions, repayments, budgets and
monthly budget settings.
- Receipts: receipt images you attach are stored on the service's
server so they can be shown with the matching transaction.
- Cloud account connection: your Google Drive OAuth tokens (stored
encrypted on the server), Drive folder id and account email, so automated
backups work.
- Feedback: messages and ratings you send through the Feedback form.
2. How your data is used
- To provide the dashboard: summaries, reports, budgets, card outstanding
balances, and reminders.
- To create and restore your encrypted backups in your Google Drive.
- To improve the Service based on your feedback.
Your data is not sold, rented, used for advertising, or shared with third
parties except as described below.
3. Third-party services
- Google Sign-In — authenticates you. Google's own privacy policy
applies to the sign-in flow.
- Google Drive — when you connect cloud backup (automatically on
first sign-in consent, or manually from the Cloud Account tab), backups are
written to a private folder in your Drive using the limited
drive.file scope, which only allows access to files the Service
created. No other user's data ever goes to your Drive.
- Google Gemini API — only when you use “Scan receipt”, the
receipt image you submit is sent to Gemini to extract transaction details.
Receipts are never processed without your action.
4. Security
- Access to the dashboard requires Google sign-in and approval by the service
owner; every user sees only their own data.
- OAuth refresh tokens and your backup passphrase are stored encrypted on the
server.
- Backup files are encrypted with your personal passphrase before being uploaded
to your Drive.
- No method of storage or transmission is completely secure; keep your passphrase
and Google account safe.
5. Retention and deletion
- Your records are kept while your account is active.
- You can delete individual transactions or clear your records from the dashboard
at any time.
- To delete your account and all associated data (including server-stored
receipts), contact the owner via the Feedback form.
6. Your backup passphrase
Your backup passphrase is generated for you and shown on the Cloud Account tab. It is
the only key that can decrypt your backup files — store a copy somewhere safe. Without
it, backups cannot be restored.
7. Changes to this policy
If this policy changes materially, the updated version will be published on this page
with a new “Last updated” date.
8. Contact
Questions about your data can be sent to the owner through the Feedback
form inside the dashboard.