ExpanagerPrivacy Policy
This policy explains how the Expanager app for Android (“Expanager”, “the app”, “we”, “us”) handles your information. Expanager is built to keep your financial data on your own device.
- Your entries, accounts, budgets and attachments are stored on your device. We don't run servers that store them.
- If you turn on backup, it goes to a private app folder in your own Google Drive, or to a file you choose.
- Bank SMS and notifications are read on your device only, and only if you turn the feature on. Personal messages and OTPs are skipped, and nothing is used for ads, credit or lending (details).
- We use Google Firebase to see which features are used and to fix crashes. These reports don't include your entries.
- No ads. We don't sell your data or share it for advertising.
Contents
- Data stored on your device
- Permissions and what they are used for
- Google Sign-In and Google Drive backup
- Services that receive data
- Purchases
- What we don't do
- Keeping and deleting your data
- Security
- Your rights
- Children
- Changes to this policy
- Contact us
1. Data stored on your device
Everything you enter into Expanager is saved in the app's private storage on your phone. This includes:
- transactions, amounts, notes, payees, tags, categories and payment modes
- accounts, budgets, recurring entries, goals and loans
- photos and documents you attach to entries, such as receipts
- app settings, such as your currency, theme and app lock
This data is not sent to us. It leaves your device only when you choose to back it up, export it, share a report, or open it in a computer browser with PC Manager (see below).
2. Permissions and what they are used for
Expanager asks for a permission only when you use the feature that needs it. You can turn any permission off in your device settings, and the rest of the app keeps working.
| Permission or access | Why the app uses it | Where the data goes |
|---|---|---|
| SMS (read) | To find transaction alerts from banks and wallets and suggest entries. Off until you turn it on. | Read and processed on your device only. See Bank SMS and notifications. |
| Notification access | Optional. To detect transactions from banking and payment app notifications. | Processed on your device only. See Bank SMS and notifications. |
| Photos, files and camera | To attach receipts and documents to entries, import CSV or Excel files, and save backups and reports. | Stays on your device unless you back it up or share it. |
| Microphone (voice entry) | To add an entry by speaking. Uses your phone's built-in speech recognition. | Handled by your device's speech service, for example Google, under that provider's terms. Expanager only receives the recognised text. |
| Fingerprint or face unlock | To lock the app. | Handled by Android. Expanager never sees your biometric data. |
| Local network and Wi-Fi | For PC Manager, which lets you view and manage your data in a computer's browser on the same Wi-Fi network. | Sent directly from your phone to your computer over your local network, only while you have PC Manager running. |
| Notifications, alarms, run at startup | For reminders, recurring entries and scheduled backups. | On your device. |
| Internet | For Google Drive backup, exchange rates, purchases and the services in section 4. | See sections 3 and 4. |
Expanager does not read your call log or contacts, and does not use your location.
Bank SMS and notifications
Reading SMS and notifications is optional. It's off until you turn it on under Settings → Transaction Helpers and allow the Android permission. Its only purpose is to help you record your own income and expenses.
What is read. When SMS reading is on, Expanager reads the sender, time and text of messages in your SMS inbox that arrived since it last checked, or over the period you choose when you rescan. When notification reading is on, it reads the app name, title and text of notifications from apps on your phone, except apps you exclude.
What is used. Each message is checked on your phone for a transaction alert, such as a card payment, debit, credit or transfer. From those alerts, Expanager takes the amount, date, merchant and account so it can suggest an entry. Anything that isn't a transaction alert, including personal messages, one-time passwords (OTPs) and promotions, is skipped. It isn't stored, shown or used.
What is kept. The text of your SMS messages isn't copied into Expanager. The app keeps only a note of which messages it has already handled, so it doesn't suggest them twice, and the entries you choose to save. For notifications, only those that look like transactions are kept on your phone so they can be shown as suggestions. Everything stays in the app's private storage on your device.
What we never do. SMS and notification contents are never uploaded to us or to anyone else. They are never sent to Firebase or any analytics service, never shared or sold, and never used for advertising, profiling, credit scoring or lending decisions.
Turning it off. Switch the helper off in Settings → Transaction Helpers, or remove the SMS permission or notification access in your Android settings. Expanager then stops reading new messages. Entries you've already saved are kept until you delete them.
3. Google Sign-In and Google Drive backup
Signing in with Google is optional and is only needed for Google Drive backup and restore. When you sign in, the app receives your Google account's email address so it can show which account you're backing up to.
Backups are saved in the hidden application data folder of your own Google Drive. The app asks only for access to that folder, and can't see any other files in your Drive. We (the developers) can't access your Drive or your backups.
Expanager's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
4. Services that receive data
Google Firebase (Analytics, Crashlytics and Performance Monitoring)
We use Firebase to understand which features are used, to find and fix crashes, and to keep the app fast. Firebase may collect:
- feature usage events, such as “opened reports” or “created a budget”
- device and app information, such as device model, Android version, app version, language and country
- an app instance identifier, and an IP address, which Google uses to estimate your general location
- crash reports and performance traces
We don't send your transactions, amounts, notes, SMS contents or attachments to Firebase. Google processes this data as described in Firebase's privacy information and the Google Privacy Policy.
Exchange rates
If you use multiple currencies, the app downloads current exchange rates from the free, open-source currency-api, served through jsDelivr and Cloudflare. These requests contain only the currency codes. As with any web request, those services can see your IP address.
Google Play
The app uses Google Play services for in-app purchases, in-app reviews and app updates. Google handles these under its own privacy policy.
5. Purchases
Expanager Premium is bought through Google Play. Google processes your payment, and we never receive your card or payment details. The app only receives a record of the purchase so it can unlock Premium features.
6. What we don't do
- We don't show ads or use advertising identifiers for ads.
- We don't sell, rent or trade your personal information.
- We don't upload your financial data to our own servers.
We may disclose information if the law requires it, for example in response to a valid request from a court or government authority. Because your financial data stays on your device, we usually have none to disclose.
7. Keeping and deleting your data
- Data on your device is kept until you delete it. You can delete individual entries, clear all data in the app's settings, or uninstall the app.
- Google Drive backups stay in your Drive until you delete them. To remove them, open Google Drive on the web, go to Settings → Manage apps → Expanager, and choose Delete hidden app data.
- Analytics and crash data is kept by Firebase for a limited time and then deleted automatically. You can ask us to delete it by emailing us (see section 12).
8. Security
Your data is kept in the app's private storage, which other apps can't read. You can add a password or fingerprint lock. Backups to Google Drive are sent over encrypted connections. No method of storage or transmission is completely secure, so please keep your device and Google account protected.
9. Your rights
Depending on where you live, data protection laws may give you the right to access, correct or delete your personal data, and to withdraw consent. Most of your data is already under your direct control in the app. For anything else, email us and we'll reply within 30 days.
10. Children
Expanager is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has given us personal data, please contact us and we'll delete it.
11. Changes to this policy
We may update this policy when the app changes. We'll post the new version on this page and change the “Last updated” date. If a change is significant, we'll also let you know in the app.
12. Contact us
If you have questions about this policy or your data, email potwaresolution@gmail.com.