Privacy Policy
Last updated: August 2026
Information we collect
Only what runs the service: your email, an optional name and profile picture, the expense entries you type (descriptions, amounts, dates, categories), budgets you set, and — if you use receipt scanning — the receipt photos you choose to upload. No location, no contacts, no bank credentials. We never sell your personal information.
Your data is used to provide the service to you. We do not train AI models on it, and we never share it for marketing or advertising.
AI processing & service providers
A small set of processors act on our behalf, each receiving only what its function requires:
Google Gemini
Parses expense text & receipt photos
Pinecone
Anonymized vectors for smarter categories
DigitalOcean
Servers, database & image storage
Resend · Google Play · RevenueCat
Account emails & subscription billing — we never see your card
Storage & security
Encrypted in transit (HTTPS), stored on access-controlled servers. Passwords exist only as salted hashes; password-reset codes expire after 10 minutes; on mobile your session lives in the device's secure storage.
Your rights & account deletion
View and correct your data anytime in the app. Delete your account yourself — Profile → Security → Danger Zone, or via /account-deletion — and everything goes with it immediately: expenses, budgets, insights, learned category data, search embeddings, and uploaded images. If you cannot access your account, email us and we will process the deletion within 30 days. Deleting your account does not cancel a Google Play subscription — cancel that in the Play Store.
Contact
Privacy questions or data requests: thoughtexpense@nafiziqbal.com. We will notify you of material changes to this policy.