Privacy Policy

Last updated: 19 October 2026

This policy covers the Expensely Pro app and website. For access, correction, deletion or privacy questions, contact support@expenselypro.com.

Data we process

• Account: account and sign-in identifiers, name, email and profile details you supply, including through Google sign-in. Guest mode may also create an identifier; it does not mean all data is anonymous or stays on the device.
• Financial records: accounts, transactions, categories, debts, budgets, goals, notes and attachments you enter. The app stores local data and sends records to Expensely Pro backend servers when synchronization is used. Some backup and attachment features use Firebase services; Firebase is not the primary store for all financial records.
• Usage and diagnostics: feature events, errors, device and app information, and account or installation identifiers. Analytics may be linked to a user identifier and is not necessarily anonymous. Servers also keep operational and security logs.
• Purchases: subscription status and purchase verification identifiers used to validate paid features through Google Play.

Purposes and providers

We process data to authenticate accounts, synchronize and back up records, run features, validate subscriptions, diagnose faults, protect the service and answer support requests. Firebase supports authentication and some storage, analytics and diagnostic features; Google Play handles purchases. The app may use Google AdMob for advertising. These services can process device or advertising identifiers and usage data, so advertising does not imply that no data reaches advertising providers.

When you use intelligent notification parsing, the notification text being analyzed may pass through our server to OpenAI to extract transaction details. That text may contain financial information. Avoid including secrets or details the feature does not need. Data sent depends on the feature used.

We do not sell your financial records. Necessary processing by service providers is different from selling data. See Firebase privacy information, Google’s privacy policy and OpenAI’s privacy policy. Provider servers may be outside your country.

Website and device choices

The website includes Google Analytics configuration; cookies and identifiers depend on loaded services and browser settings. You can manage browser cookies, Android permissions and advertising identifiers, and Google advertising settings. Changing these settings or uninstalling the app does not submit an account deletion request.

The website also loads Microsoft Clarity for interaction analytics and Google AdSense for advertising. Processing may include cookie identifiers, device information and page interactions. Avoid entering personal financial details on public website pages. See the Microsoft privacy statement and Google’s use of data on partner sites.

Security and retention

Service connections use HTTPS, authentication and access controls. This is not a guarantee of absolute security or end-to-end encryption of all records. Records needed for the account and synchronization remain while the account exists. Purchase and security records or shared rights may require separate review when deletion is requested. We do not publish a uniform retention period or fixed deletion deadline without verifying the resource and applicable obligation. Ask support to explain what remains, why, and for how long in your case.

Account deletion and current limits

Follow the account deletion instructions. The current public route is a support request for ownership verification and scope review, not a guaranteed, complete automated deletion service. Sending or acknowledging a request does not establish that local, backend, Firebase and backup data has all been deleted. Support should identify what has been processed and what remains pending or under review. We do not promise complete deletion within 48 hours.

Shared records may require resolution of other people’s rights. Copies you exported or that others hold are not removed simply by deleting the service account. Uninstalling does not remove previously synchronized data. Account deletion is not confirmation of Google Play subscription cancellation or a refund; manage your subscription separately in Google Play.

Updates and contact

We revise the date when this policy changes. To report data concerning a child, ask about processing or raise a complaint, use the support email above or our contact page. Do not send passwords, verification codes or full payment card details.