Legal

Privacy Policy

Effective date: [EFFECTIVE_DATE]

Contents

01Who we are

Expenso is operated by Code X Pvt.Ltd, Pokhara, Nepal. This policy explains what information we collect when you use the Expenso app, how we use it, and the choices you have..

02Information you give us

  • Account details. Your full name, email address and password. Your password is stored in hashed form, which means we cannot read it.
  • Financial records you enter yourself. Accounts (name, icon, description and opening balance), transactions (amount, type, date, description, notes, category and account), categories, monthly budgets, and your app preferences (currency, theme and notification choices).
  • Receipt photos that you choose to attach to a transaction.

03Information collected automatically

  • Device information. A random installation ID created by the app, which is not linked to your phone's hardware identifiers, your platform (iOS or Android) and your device model (for example, "Pixel 8"). We do not collect your device's personal name.
  • Push notification token, only if you allow notifications.
  • Basic technical logs needed to keep the service secure and working, such as sign-in times.

04What we do not collect

We do not connect to your bank or ask for your bank credentials. We do not read your SMS messages, contacts, location or microphone. We do not use advertising IDs, ad networks, or third-party tracking or analytics SDKs.

05Device permissions

  • Camera and photo library. Used only when you choose to attach a receipt.
  • Face ID and fingerprint. Handled entirely by your phone's operating system. Your biometric data never leaves your device and is never sent to us. Your quick-login PIN is also stored only on your device.
  • Notifications. Optional. You can turn them off at any time in the app or in your phone's system settings.

06How we use information

We use your information to:

  • provide your account and keep it in sync across your devices;
  • calculate your balances, analytics, budgets and statements;
  • send verification codes, password-reset codes and security alerts, such as a sign-in from a new device;
  • send optional notifications, such as your monthly summary and monthly budget reminder;
  • keep the service secure and prevent abuse;
  • respond to your support requests.

We do not use your financial data for advertising, and we never sell your data.

07Sharing

We share information only with service providers who help us run Expenso, and only under confidentiality obligations. These are:

  • cloud hosting;
  • email delivery, for verification and security emails;
  • push delivery, through Apple Push Notification service and Google Firebase Cloud Messaging, via Expo's push service.

We may also disclose information if we are required to by law. Statements you export are saved or shared only by you, to wherever you choose.

08Security

  • All data in transit uses encrypted connections (HTTPS).
  • Sign-in tokens are kept in your device's secure storage (iOS Keychain or Android Keystore).
  • Signing out ends your session.
  • On Android, app data is excluded from device cloud backups.

No system is perfectly secure, but we work continually to protect your information.

09Data storage and transfers

Your data is stored on servers located in [SERVER_REGION]. If it is processed outside your country, we take steps to protect it.

10Retention

We keep your data while your account is active. When you delete your account, we delete your personal and financial data within 30 days, except where the law requires us to keep it.

11Your rights and choices

You can:

  • access and correct your information in the app;
  • export statements as PDF;
  • turn notifications on or off by type;
  • withdraw camera, photo or notification permission in your phone's system settings;
  • request a copy of your data by contacting us;
  • delete your account at any time from within the app.

12Delete your account

You can delete your Expenso account and all of its data yourself, at any time.

  1. Open Expenso and go to Profile.
  2. Tap Security.
  3. Tap Delete account and confirm.

Your account, transactions, accounts, budgets, categories, receipts and device records are permanently deleted. This cannot be undone.

If you can no longer access the app, email from the address registered to your account with the subject "Delete my Expenso account" and we will delete it for you.

14Applicable law

We handle personal data in line with Nepal's Individual Privacy Act, 2075 (2018), and other privacy laws where they apply to you.

15Changes to this policy

We will post any updates on this page and change the effective date at the top. For significant changes, we will also notify you in the app.

Back to Expenso