Privacy Policy

Last updated: June 22, 2026

This Privacy Policy explains how Expense Tracker (the “Service”, “we”, “us”) handles information when you use it at expense-tracker.yjaphzs.xyz. We've tried to keep it short and honest: the Service is a free tool for tracking your own income and expenses, and we collect as little as possible.

1. Using the Service without an account

You can use the entire tracker without signing in. In this guest mode, your transactions, wallets, recurring items, and settings are stored only in your browser's local storage on your device. This data never leaves your device, and we cannot see it. Clearing your browser data removes it.

2. Information we collect

We only collect personal information if you choose to create an account to save and sync your data across devices. In that case we process:

• Account details — your email address, an optional display name, and an optional profile photo you upload.
• Authentication data — managed by Firebase Authentication. If you sign in with Google, we receive your basic Google profile (name, email, and photo) to create your account. We never receive or store your password in readable form.
• Your tracker data — the transactions, amounts, categories, descriptions, dates, wallets, and recurring items you save, so they can sync across your devices.
• Technical metadata — standard sign-in metadata such as account creation and last sign-in time, retained by Firebase Authentication.

We do not connect to your bank, and we never ask for or collect bank credentials, card numbers, or real account balances — only the figures you type in yourself.

3. How we use your information

• To create and maintain your account.
• To save your tracker data and sync it across your devices.
• To display your profile (name and photo) within the app.
• To send essential account emails (verification and password reset).
• To keep the Service secure and prevent abuse.

We do not sell your data, show third-party advertising, or use your data for profiling.

4. Where your data is stored

Accounts and saved data are stored using Google Firebase (Authentication, Cloud Firestore, and Cloud Storage) on Google Cloud infrastructure. Google processes this data on our behalf as a service provider. See Firebase's privacy practices for details.

5. Cookies and local storage

We don't use tracking or advertising cookies. We use your browser's local storage to keep guest data and remember your theme preference, and Firebase Authentication uses local storage to keep you signed in. These are strictly functional.

6. Data retention and deletion

We keep your account data for as long as your account exists. You can delete your account at any time from the Account → Security page. Deleting your account permanently removes your profile, your saved transactions, wallets, and recurring items, your profile photo, and your authentication record. Guest data is removed by clearing your browser storage.

7. Security

Access to your saved data is restricted to your own account by server-side security rules, and data is transmitted over encrypted (HTTPS) connections. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

8. Children's privacy

The Service is intended for a general audience. If you are below the age of digital consent in your jurisdiction, please use the Service only with the involvement of a parent or guardian. We do not knowingly collect data from children where prohibited by law; contact us if you believe a child has provided us personal information and we will delete it.

9. Your rights

You can, at any time:

• Access and edit your profile and saved data within the app.
• Export your data as a JSON backup or a spreadsheet, or transfer it to another device via the in-app QR code feature.
• Delete your account and all associated data.

Any file you export, and any QR code you generate to transfer data, are created on your device, from data already on your device, at the moment you ask for them. The resulting file or code is not uploaded to or stored by us — what you do with it, including saving, printing, or sharing it, is entirely up to you.

Depending on where you live, you may have additional rights under laws such as the Philippine Data Privacy Act or the GDPR. To exercise them, contact us using the details below.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of the Service after changes means you accept the updated policy.

11. Contact

Questions about this policy or your data? Email jan@yjaphzs.xyz.