Privacy Policy

We collect only information you provide in the app or that the app needs to deliver its features:

Technical logs. Like any online service, our hosting provider automatically records limited technical information when the app connects (such as IP address, time of request and error details). These logs are used only for security, abuse prevention and keeping the service running.

What we do not collect. We do not collect your location (only the time zone setting above), contacts, browsing history, advertising identifier, health data or bank and card details. We do not use analytics or crash-reporting code. If you share analytics with app developers in iOS Settings, Apple may provide us with aggregated, anonymous crash and usage statistics under Apple’s own privacy policy.

We use your information solely to provide the app’s functionality:

• creating and securing your account, including confirmation and password reset emails;
• storing and syncing your expenses, categories, recurring payments and receipt photos;
• automatically adding recurring payments as expenses on their due date;
• sending the payment reminders and “added to expenses” notifications you turned on;
• keeping the service secure and fixing problems.

We do not send marketing notifications or marketing emails, and we do not build profiles about you.

Legal bases (EEA/UK users). We process your information because it is necessary to provide the app you asked for (performance of a contract), for our legitimate interest in keeping the service secure, and with your consent where iOS asks for it (camera and notifications). You can withdraw consent at any time in iOS Settings.

When you scan or choose a receipt photo, the app uses Apple’s on-device text recognition to find the total and fill in the amount. This happens entirely on your iPhone. The recognized text is never sent to us or to any third party for analysis. If you save the expense with the photo attached, only the image is uploaded to your private storage so you can view it later.

• Camera is used only when you tap to scan a receipt.
• Photos: you pick individual images with the system photo picker; the app has no access to the rest of your library.
• Notifications are optional and the app works fully without them. They are only about your own payments and are never used for marketing. When you sign out, the app removes this device’s push token from your account.

You can change these permissions at any time in iOS Settings → ExpenseTrack.

We use a small number of providers that process data on our behalf, only to run the app and under data-protection terms:

• Supabase (Supabase, Inc.): database, sign-in, private storage for receipt photos, and the server functions that post recurring payments and send reminders. Our project is hosted in London, United Kingdom.
• Apple Push Notification service (Apple Inc.): delivers notifications to your device. Apple receives your device push token and the notification text (for example “Rent due tomorrow · 300 EUR”).
• Email delivery used by our sign-in provider: sends account emails (confirmation and password reset). It receives only your email address and the message.

We do not share your information with anyone else, except where the law requires it or to protect the rights and safety of our users.

ExpenseTrack does not track you across apps or websites owned by other companies, does not show ads, and contains no third-party advertising or analytics code. We do not sell your personal information and do not share it for advertising.

• All traffic between the app and our servers is encrypted with HTTPS (TLS).
• Database access rules ensure each account can read and change only its own records.
• Receipt photos are kept in private storage and shown only through short-lived signed links.
• Passwords are stored as salted hashes by our authentication provider.

No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires it.

We keep your information for as long as you have an account. You can delete individual expenses, receipt photos, categories and recurring payments in the app at any time.

Delete your account in the app: open Settings → Delete Account and confirm. This immediately and permanently deletes your account, profile, expenses, categories, recurring payments, receipt photos, device push tokens and notification records. It cannot be undone.

Copies may remain in our hosting provider’s encrypted backups for a limited period (no longer than 30 days) until they are overwritten, and technical logs expire on the provider’s standard schedule. If you can no longer sign in, email info@ipropixel.com from the address on your account and we will delete it for you.

Wherever you live, and in particular under the EU/UK GDPR and Albanian data-protection law, you have the right to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate information (most of it you can edit directly in the app);
• delete your information (in the app, or by contacting us);
• receive your data in a structured, machine-readable format (portability);
• restrict or object to certain processing, and withdraw consent at any time;
• complain to your data-protection authority. In Albania this is the Information and Data Protection Commissioner (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale).

To make a request, email info@ipropixel.com. We may need to verify that the request comes from the account owner, and we will respond within 30 days.

Your information is stored with Supabase in London, United Kingdom. The United Kingdom is recognized by the European Commission as providing an adequate level of data protection. Where a provider processes data in another country, we rely on appropriate safeguards such as Standard Contractual Clauses.

ExpenseTrack is not directed to children under 13 (or the minimum age required by law in your country), and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy as the app changes. We will post the new version on this page and update the date above. If a change materially affects how we use your information, we will tell you in the app before it takes effect.

ExpenseTrack is provided by iPropixel, Albania. For questions about this policy or your data, email info@ipropixel.com.