Your financial data never leaves your phone

None of your financial data. Ever. Expenso has no servers of its own, no ads and no user accounts. Your amounts, merchants, accounts, categories, budgets, trips and notes are never transmitted anywhere.

The one thing we do collect is anonymous usage statistics, through Google Firebase Analytics, to see whether the app is being used and which parts people actually open. That covers app opens, session counts, app version, device model and Android version, and whether a feature was used at all, for example that an expense was added or that notification capture was switched on.

It explicitly does not include the amount, the merchant, the category, the account, the note, or anything else you type. Those values are never passed to the analytics SDK at all. By design, the app’s analytics code accepts no free-form data, only a fixed list of event names.

We do not collect an advertising ID. Ad ID collection is disabled and the permission is removed from the app.

You can switch this off. Settings, then Anonymous usage data. Turning it off stops collection and upload inside the SDK itself, not merely at our own call sites.

• Accounts, cards, transactions, categories and budgets you enter are stored in a local database on your phone only.
• Optional spend capture. If you enable it, Expenso reads incoming bank notifications, or SMS in the sideloaded build, on your device to suggest a transaction. The message text is parsed locally and immediately discarded. Only the amount and merchant you choose to save is kept. Nothing is uploaded.

Weekly backups and manual exports are written as CSV files to your phone’s Downloads folder. They are ordinary files under your control, and sharing them is always your explicit action.

Settings, then Erase all data, permanently deletes everything after writing a final backup. Uninstalling the app deletes all app data as governed by Android.

If you enable AI mode, you provide your own Google Gemini API key. When, and only when, you explicitly submit an entry, that content reaches Google’s Gemini API using your key. We operate no server, and nothing transmits in the background. Google’s terms govern their handling of it.

• Notifications. To remind you about bills and show capture suggestions.
• Notification access. Optional and off by default. Used solely to detect bank spend alerts locally, and revocable at any time in system settings.
• Microphone.Optional, and only with AI mode. Records a voice note only while the listening screen is visible. The recording is sent once to Google’s Gemini API with your own key and is not stored by us.
• Internet. Used only by AI mode, solely for the Gemini requests above.

Expenso is not directed at children under 13, and we do not knowingly collect data from them.

Any change to this policy will be published at this same address.

Expenso is built and published by Zorizon Labs, which is the data controller for the anonymous usage statistics described above. You can read more about the app here.

Questions about this policy or the app go to hello@zorizonlabs.com.

To have already-collected anonymous usage data deleted, email that address with the request. Because the data carries no name, email or account, please send it from a device where the app is installed so we can match the app instance. There is no user account to delete, as Expenso has none.