Privacy Policy

Overview

Expenses ("we", "us", or "our") is a personal finance app built for iOS and macOS. We are committed to protecting your privacy. This policy explains what data the app handles, how it is stored, and your rights over it.

Data We Collect

All financial data you enter — sheets, entries, categories, and notes — is stored exclusively on your device and, if you enable iCloud Sync, in your personal iCloud account (CloudKit). We never have access to your iCloud data.

The app uses the following third-party services that may collect data automatically:

• Firebase Crashlytics – collects anonymised crash reports and stack traces to help us fix bugs. No financial data or personally identifiable information is included.
• Firebase Analytics – collects anonymised usage events (e.g. screen views, feature usage) to help us understand how the app is used. Data is aggregated and not linked to your identity.
• Google AdMob – displays ads to free-tier users. AdMob may collect device identifiers (IDFA), IP address, and ad interaction data to serve personalised or contextual ads. Requires your explicit permission via Apple's App Tracking Transparency (ATT) prompt. See Google's Privacy Policy for details.
• RevenueCat – manages in-app subscription state. RevenueCat receives your App Store purchase receipts and transaction history to verify active subscriptions. No financial card details are ever shared. See RevenueCat's Privacy Policy.
• Exchange Rate API – when you use the currency conversion feature, the app contacts exchangerate-api.com to fetch current exchange rates. Only your device's IP address is transmitted; no personal or financial data is shared.
• App Store rating – triggered only when you tap "Rate the App"; handled entirely by Apple's StoreKit.
• Push Notifications – if you grant notification permission, the app schedules local reminders on-device to prompt you to log expenses. No data is sent to external servers for notification delivery.
• Feedback emails – if you choose to send feedback, your email client composes a message to us. We store only the feedback content you write and your email address to reply.

iCloud Sync

When iCloud Sync is enabled, your data is synced via Apple's CloudKit framework directly between your devices. We do not operate or have access to any server that stores your financial data. Apple's iCloud privacy policy governs this data.

Local Storage

All data is stored locally using SwiftData on your device. No data is sent to any third-party server by the app itself. Exported files (ZIP, CSV, PDF) are created on-device and shared only when you explicitly initiate a share action.

Third-Party Services

Expenses integrates the following third-party services. Each has its own privacy policy governing its data practices:

• Firebase Crashlytics (Google) – crash reporting. Firebase Privacy
• Firebase Analytics (Google) – anonymised usage analytics. Firebase Privacy
• Google AdMob – in-app advertising for free-tier users. Google Privacy Policy
• RevenueCat – subscription management. RevenueCat Privacy Policy
• ExchangeRate-API – currency conversion rates. ExchangeRate-API Privacy
• Apple CloudKit – optional iCloud sync. Apple Privacy Policy
• Apple StoreKit – in-app purchases and ratings.
• Apple LocalAuthentication – Face ID / Touch ID lock.

We do not sell your data to any third party.

App Tracking Transparency (ATT)

In accordance with Apple's App Tracking Transparency framework, Expenses will ask for your permission before allowing any cross-app or cross-site tracking. This permission request will appear when you first launch the app.

If you allow tracking: Google AdMob may use your device's advertising identifier (IDFA) to show you personalised ads relevant to your interests, and to measure ad effectiveness. This constitutes "tracking" as defined by Apple — linking data from our app with data from other companies' apps or websites for advertising purposes.

If you deny tracking: Only contextual (non-personalised) ads are shown. No data from this app is linked with third-party data for advertising. All other app features work identically — tracking permission does not affect any core functionality.

You can change your choice at any time via Settings → Privacy & Security → Tracking → Expenses on your device. Purchasing the premium upgrade removes all ads entirely.

Advertising (Google AdMob)

Free-tier users see ads served by Google AdMob. AdMob may use your device's advertising identifier (IDFA on iOS) and other signals to show personalised ads, only if you grant ATT permission (see section above). You can limit ad tracking at any time via Settings → Privacy & Security → Tracking on your device. Purchasing the premium upgrade removes all ads.

Before AdMob is initialised, users in the EEA, UK, and other applicable regions are shown a GDPR/UMP consent form as required by Google. AdMob is only started after consent is obtained or confirmed not required.

Crash Reporting & Analytics (Firebase)

We use Firebase Crashlytics to automatically collect crash reports when the app unexpectedly closes. Reports contain device model, OS version, app version, and a stack trace. No financial data, entry content, or identifiable user data is ever included.

We use Firebase Analytics to collect anonymised event data (e.g. which screens are visited, which features are used). This helps us prioritise improvements. All data is aggregated and cannot be linked back to you as an individual. You can opt out of analytics collection by disabling "Share Analytics" in the app settings (if available) or via your device's system settings.

Face ID / Passcode

If you enable the app lock feature, your passcode is stored as a SHA-256 hash in your device's Keychain — never in plain text, and never transmitted off the device. Face ID / Touch ID authentication is handled entirely by Apple's LocalAuthentication framework. Biometric data never leaves your device.

Subscriptions & RevenueCat

Subscription management is handled by RevenueCat. When you purchase or restore a subscription, RevenueCat receives a copy of your App Store receipt to verify entitlement status. RevenueCat assigns an anonymous customer identifier. No payment card details, bank information, or personally identifiable information are transmitted to RevenueCat.

See RevenueCat's Privacy Policy for full details.

Your Rights

Depending on where you live, you may have the following rights regarding your data:

• Access & Portability – You can export all your data at any time from within the app (Export feature) as CSV or PDF.
• Deletion – Deleting the app removes all locally stored data from your device. To delete iCloud data, go to Settings → [Your Name] → iCloud → Manage Storage → Expenses and delete the app's data.
• Opt-out of tracking – Deny or revoke ATT permission via Settings → Privacy & Security → Tracking.
• Opt-out of analytics – You can disable Firebase Analytics by opting out in your device's system privacy settings or by contacting us.
• GDPR (EEA/UK users) – You have the right to access, rectify, erase, restrict, or object to processing of your personal data. Contact us at the email below to make a request. You also have the right to lodge a complaint with your local data protection authority.
• CCPA (California residents) – We do not sell your personal information. You have the right to know what data is collected and to request deletion.

To exercise any of these rights, contact us at expenses.feedback@gmail.com.

Children's Privacy

Expenses is not directed at children under 13. We do not knowingly collect any personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the new policy.

Contact Us