Privacy policy

How Expense Tracker handles your data, in line with the Nigeria Data Protection Act 2023.

What we collect

• Your email, name and, if you use it, your Google account ID.
• The statements and screenshots you upload, and the transactions read from them: dates, descriptions, amounts, balances, channels and references.
• What you teach the app (categories you choose, labels like “Landlord”), your budgets, payday and minimum balance.
• Messages you send through the contact page: your name, email and message.
• Emails you forward to your import address. Only emails from supported banks are read; we keep the transactions or statement in them and a short record (sender, subject, what we did with it), never the email itself.

How we use it

• To categorize your spending, show your dashboard and insights, and warn you before you overspend.
• Transactions our own rules can't categorize are sent to an AI model (through OpenRouter) as a short cleaned description (usually the payee's name), the channel, an amount range and whether money came in or went out. Your name, account numbers and balances are not sent.
• Screenshots you import are sent to the AI model to read the transactions on them, so anything visible on the screenshot is processed. So are bank alert emails our own readers don't recognise.
• When the AI confidently names a business, that business name and category are shared with other users so they don't need an AI call. Names of people are never shared.

How long we keep it

• Uploaded statement files are encrypted and deleted as soon as they are read. Screenshots are deleted once you confirm or discard them.
• PDF passwords are used once to open the file and are never stored.
• Your transactions and settings are kept until you delete them or your account.
• Contact messages are kept so we can follow up. Ask us through the contact page to delete them.
• Records of forwarded emails are deleted after 30 days. Statement files attached to them are deleted as soon as they are read.

Your rights

• Download everything we hold about you from Settings → Download my data.
• Delete your account and all its data from Settings → Delete my account. This is immediate and permanent.
• Remove a single import (and its transactions) from its import page.

Security

Connections use TLS. Uploaded files are encrypted at rest (AES-256-GCM). Sessions use signed, HTTP-only cookies.

A small number of administrators can see account emails and names, counts of imports and transactions, and import error messages, to support users and fix bank formats. The admin dashboard does not show anyone's transactions.