Privacy Policy

1.Who we are

XpenseTracker (“the app”, “we”, “us”) is a personal finance app published by MeoTechent, Accra, Ghana. This policy explains how the app handles information, and applies to XpenseTracker on every platform where we distribute it.

For the purposes of the UK/EU General Data Protection Regulation, we act as the data controller for the advertising data described in section 6, the diagnostic data in section 7, and the assistant data in section 5. We are not a controller of the financial records you keep in the app, because — except when you use the assistant — those never reach us.

2.The core principle, and its one exception

XpenseTracker is an offline-first, local-only app. There is no sign-up and no user account. Everything you enter — transactions, amounts, categories, notes, budgets, currencies and preferences — is written to encrypted storage on your own device.

We operate no database of your books. We cannot read, retrieve, back up or restore them. There is one deliberate exception, and we want it stated plainly rather than buried:

3.Information we never collect

We do not collect, store on our systems, sell, rent or share:

• Your name, email address, phone number or postal address
• Bank account numbers, card numbers or any payment credentials
• Your contacts, photos, files, messages or calendar
• Your precise GPS location
• Any record of which screens you visit or how you use the app

The app never requests access to your camera, photo library, microphone, contacts or location, and contains no code that could. The only permissions it ever asks for are biometric unlock (if you enable App Lock), notifications (if you create a reminder), and — on iOS — the tracking prompt described in section 6.

You are never asked to create an account, and nothing you do in the app is linked to a real-world identity by us.

4.Security of data on your device

Your transactions, settings, categories, reminders and conversion history are encrypted at rest with AES-256, authenticated so that tampering is detected. The encryption key is generated on your device using the operating system's secure random generator and stored in the system credential store — the Keychain on iOS, Keystore-backed encrypted storage on Android.

The key is marked as non-exportable and device-only: it is excluded from iCloud Keychain and from encrypted computer backups, and is readable only while your device is unlocked. A consequence worth knowing: if you restore a backup onto a new device, the encrypted data comes across but the key does not, so the restored data cannot be read.

You can add a second layer with App Lock under Profile → Security. When it is on, the app requires Face ID, a fingerprint, or your device passcode each time it opens. Biometric verification is performed entirely by your operating system — the app receives only a yes-or-no result and never sees your fingerprint or face data. Note that if your device has no biometric or passcode enrolled, App Lock cannot engage and the app will open normally.

One exception to the encryption above: your AI assistant chat history is stored unencrypted on your device, and the transactions the assistant creates for you are saved inside those transcripts. See section 5.

No security measure is perfect. A device that is jailbroken, rooted, infected with malware, or left unlocked in someone else's hands may expose data that would otherwise be protected.

5.The AI assistant (“Kudi”)

The app includes an optional AI assistant that logs spending from plain language, answers questions about your money, and can edit or delete entries for you. Making that work requires sending your financial data to a language model, which cannot run on your phone. This is the only feature in the app that transmits your financial records.

Exactly what is sent

Every message you send to the assistant transmits, alongside the text you typed:

• Your current balance, and your all-time income and expense totals
• Your income and expense totals for the current month
• Your 40 most recent transactions, each with its date, type, exact amount, category, internal record identifier, and any note you wrote on it
• Your selected currency
• The last 10 messages of the current conversation

This happens on every message, including the one-tap suggestion buttons on the assistant's welcome screen. It is not limited to questions about your spending — the data accompanies the request regardless of what you ask.

Your profile name, avatar, budget, reminders and app-lock settings are not sent. Notes are, so avoid writing anything in a transaction note you would not want a third party to process.

Who receives it

• MeoTechent — our own inference server at ai.meotechent.com, running a self-hosted open-weights model. Requests are processed in memory to generate a reply and are not retained.
• Google LLC — the Gemini API, when a Gemini model is used.

The assistant can change your records

The assistant is able to create, edit and delete transactions and generate statements. These actions are applied to your data immediately, without a confirmation step. Newly created entries can be undone from the chat; edits and deletions cannot. Review what it reports back, and be aware that language models can misinterpret an instruction.

Chat history

Conversations are kept on your device so you can return to them — up to 50 conversations of 100 messages. Unlike the rest of your data, this history is not encrypted, and transactions the assistant created for you are stored in full inside it.

You can delete conversations individually from the assistant's history screen. Note that “Clear all data” does not remove chat history — see section 9. Deleting the app removes it.

6.Advertising (Google AdMob)

XpenseTracker is free, and banner advertising pays for it. Ads are delivered by Google AdMob. To serve and measure them, the AdMob software — not us — may collect:

• Your device advertising identifier, only where you have allowed tracking
• IP address, and a coarse location such as country or city inferred from it
• Device and app information: model, operating system version, language, screen size, app version
• Ad interaction events, such as whether an ad was shown, viewed or tapped

Your choice about personalised ads

On first launch you are asked whether to allow personalised ads. On iOS you will also see Apple's App Tracking Transparency prompt. If you decline, the app flags every ad request as non-personalised: no advertising identifier is used, and your activity is not combined into an advertising profile. No ad is requested at all until you have answered.

To be straightforward about the limits of that choice: non-personalised ads are still delivered over the internet, so Google still receives your IP address and basic device information, and still uses them for frequency capping, fraud prevention and choosing contextually relevant ads. The app's features work identically either way; nothing is withheld or degraded if you say no.

Where consent is the legal basis for processing — for example in the EEA and UK — we rely on the choice you make in that prompt, and you can change it at any time.

Managing or resetting your advertising ID

• Android: Settings → Privacy → Ads, where you can reset or delete your advertising ID
• iOS: Settings → Privacy & Security → Tracking
• Google's own controls: adssettings.google.com

7.Diagnostics and the update service

The app can receive over-the-air updates so we can ship fixes without a full store release. This service is operated by Expo (650 Industries, Inc.). On each cold launch, before the app runs, it checks for an update and in doing so transmits:

• A randomly generated install identifier, persistent for as long as the app stays installed and reset when you delete it. It is not linked to you, to your device's advertising ID, or to your financial data.
• Your platform, the app's runtime version, and your IP address
• If the app crashed on its previous launch, a short excerpt of the technical error message. We use this only to find and fix crashes.

The app separately checks a version file hosted on GitHub once per launch to see whether a newer store release exists. That request sends nothing about you, though as with any web request your IP address is visible to the host.

Beyond these, the app contains no analytics, attribution, profiling or crash-reporting products of any kind.

8.Everything the app sends, in one table

Third parties named in this policy

• Google LLC — Gemini AI, AdMob advertising, and ad consent — privacy policy
• 650 Industries, Inc. (Expo) — app update service — privacy policy
• GitHub (Microsoft) — version file hosting — privacy statement
• ExchangeRate-API — currency rates — terms & privacy
• Apple and Google Play — app distribution and, on iOS, the tracking permission framework
• MeoTechent — our own AI inference server, described in section 5

9.Retention and deletion

Because your data lives on your device, you control how long it is kept. We retain no copy of your books, so there is nothing on our side to delete.

Profile → App settings → Clear all data permanently deletes every transaction. So that you are not misled about its scope, the following are stored separately and are not removed by it:

• Your name, budget, currency and other settings
• Custom categories
• Reminders, including any amounts attached to them
• Currency conversion history
• AI assistant chat transcripts, which may contain transaction details

To remove everything, delete conversations from the assistant's history screen, or uninstall the app, which erases all of it permanently.

Advertising data is held by Google under its own retention schedule; reset your advertising ID (section 6) to break the link to past ad activity. Data submitted to Google's Gemini API is retained under Google's terms for that service, described in section 5.

10.Children's privacy

XpenseTracker is a general-audience personal finance app. It is not directed to children and is not intended for anyone under 13 — or under 16 where that is the applicable age of digital consent.

We do not knowingly collect personal information from children. Since the app has no accounts and collects no personal information, there is no children's data for us to hold. If you believe a child has used the app on your device, clearing the app's data — and uninstalling it — removes everything associated with that use.

11.Your rights

Depending on where you live, you may have rights under laws such as the GDPR (EU/UK), the CCPA/CPRA (California), or Ghana's Data Protection Act, 2012 (Act 843) — including rights of access, correction, deletion, portability, and objection to processing.

Most of these you exercise directly and instantly, without asking us:

• Access and portability: your data is already on your device, viewable and exportable as a PDF statement.
• Correction: edit any entry in the app at any time.
• Deletion: Profile → App settings → Clear all data, plus the steps in section 9, or uninstall the app.
• Objection to ad personalisation: decline personalised ads, or reset your advertising ID.
• Objection to AI processing: do not use the AI assistant. No other feature sends your records anywhere.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA. For data held by Google as a result of advertising or of the assistant, please also contact Google using the links in this policy, since we have no access to it. For anything else, contact us at the address in section 14.

12.International users

Your financial data does not cross any border unless you use the AI assistant. Where you do, it is processed by our server and by Google, both of which may process it outside your country. The advertising and diagnostic data in sections 6 and 7 is processed by Google and Expo, which operate globally, under their own safeguards and standard contractual clauses.

13.Changes to this policy

If we change how the app handles data, we will update this page and revise the “Last updated” date at the top. If a change is significant — a new recipient of your data, or a new category of collected data — we will surface a notice in the app before it takes effect, and seek fresh consent where the law requires it.

Continuing to use the app after an update means you accept the revised policy.

14.Contact us

Questions about this policy, or about how the app handles your information? We are happy to answer, and we aim to respond to data-rights requests within 30 days.