Privacy Policy
Last updated: August 8, 2026
This page is provided as a general template and does not constitute legal advice. It has not been reviewed by a lawyer and should not be relied on for legal compliance without independent review.
1. Who we are
e-Xpens is operated by Manuel Fabri, an individual developer, not a registered company. If you have any questions about this policy or how your data is handled, you can reach out at [email protected].
2. What data we collect
When you create an account we collect your name, username and email address. As you use the app, we store the financial data you enter yourself: accounts, transactions, categories, subcategories and recurring transactions. We also store your display preferences (theme and language). We do not collect payment card details, government IDs, or link to any bank account - all financial data in e-Xpens is entered manually by you.
3. Why we process your data
We process your account and financial data because it's necessary to provide the service you signed up for (performance of a contract). None of the data e-Xpens stores is "special category" data under GDPR (such as health, biometric or religious data) - it's the everyday financial records you choose to enter. Where we ask for consent - such as the cookie notice or the checkbox at sign-up - consent is the legal basis for that specific processing only.
4. Who we share your data with
We use Firebase Authentication (a Google Cloud service) to manage sign-in and passwords. Firebase receives your email address and authentication credentials, but never your financial data. We don't use any analytics, advertising, or tracking services, and we don't sell or share your data with anyone else.
5. International transfers
Firebase Authentication is operated by Google, which may process data outside your country, including in the United States. Google provides contractual safeguards (such as Standard Contractual Clauses) for these transfers as part of its standard terms for Firebase.
6. How long we keep your data
We keep your account and financial data for as long as your account is active. If you delete your account, your profile and all associated financial data are permanently deleted, along with your Firebase authentication record.
7. Your rights
You have the right to access, correct, delete, export, restrict, or object to the processing of your data, and to withdraw consent at any time. You can download a copy of your data or permanently delete your account at any time from Settings. For anything else, or to lodge a complaint with your local data protection authority, contact us at [email protected].
8. Cookies
e-Xpens uses a small number of first-party cookies needed to keep you signed in and remember your language. See our Cookie Policy for full details.
9. Children's privacy
e-Xpens is not directed at, and is not knowingly offered to, children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the most recent version. Continued use of e-Xpens after a change means you accept the updated policy.
11. Contact
Questions about this policy or your data? Email [email protected].