Privacy Policy

This Privacy Policy explains how the Expense Tracker application (the “App”), operated by Mohit Patel (“we”, “us”), collects, uses, and protects your information when you use the App and its related services. By using the App you agree to this policy.

Information we collect

• Account information. Your name, email address, and a password (stored only as a securely hashed value, never in plain text).
• Expense data. The expenses you create — amounts, descriptions, categories, dates, who paid, and how a group expense is split.
• Group data. Groups you create and the members you add by email, including their names and email addresses, so balances and splits can be calculated.
• Receipt images. If you use the receipt-scan feature, the photo you capture or select is sent to Google’s Gemini API to extract details (vendor, total, date, line items). We store the extracted text, not the image itself.
• Technical data. Basic request data needed to operate and secure the service (e.g. authentication tokens).

How we use your information

• To create and manage your account and authenticate you.
• To store, display, and report on your personal and group expenses.
• To extract expense details from receipt images you scan.
• To send transactional emails (email verification and password reset codes).
• To maintain the security and integrity of the service.

We do not sell your personal information, and we do not use it for advertising.

Third-party services

We rely on the following providers to operate the App:

• Google Gemini API — processes receipt images you choose to scan to extract expense details.
• MongoDB — securely stores your account and expense data.
• Vercel — hosts the backend that the App communicates with.
• Email delivery provider — sends verification and password- reset emails.

These providers process data only as needed to deliver their part of the service.

Data security

All traffic between the App and our servers is encrypted in transit using HTTPS. Passwords are hashed with bcrypt and are never stored or transmitted in plain text. Access to your data requires a valid authentication token tied to your account.

Data retention & deletion

Your data is retained while your account is active. You can delete individual expenses and groups from within the App at any time. To request deletion of your entire account and associated data, email us at pmohit645@gmail.com and we will process the request within 30 days.

Children's privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page.

Contact us

For any questions about this policy or your data, contact us at pmohit645@gmail.com.