Privacy Policy
This Privacy Policy describes what information the Expense Track app (the “App”) processes, for what purpose and with whom it is shared. The App is developed in Mexico, and this policy follows Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties. It is a translation of our Aviso de Privacidad; if the two versions differ, the Spanish version prevails.
1. Who is responsible
The party responsible for your data is Héctor Mata Preciado, developer of the App, with an address for notices at Av. Rubén Darío 425, Col. Circunvalación Vallarta, C.P. 44680, Guadalajara, Jalisco, Mexico. Contact: expensetrack2@gmail.com.
2. The general rule: your finances live on your device
The transactions, categories, budgets, savings goals, recurring payments and other records you enter are stored locally on your iPhone or iPad. We do not have a database with your personal finances and we cannot see them.
Some optional features need to send part of that information to a provider to process it: group projects (Google Firebase) and the artificial intelligence features (Google Gemini). Section 4 explains what is sent in each case. If you don’t use those features, your financial information never leaves your device.
3. Information we process
| Category | What it includes | Where it is stored |
|---|---|---|
| Personal financial data | Income, expenses, categories, budgets, goals, notes, payment method and merchant name for each transaction you record. | Only on your device. |
| Apple Pay payments (optional) | If you set up the automation in the Shortcuts app, iOS gives the App the amount, merchant and card name of each Apple Pay payment. Apple does not share your card number. | Only on your device. |
| Bank statements (optional) | The PDF you choose to import. If it has a password, the password is used only on your device to open it and is not stored. | The file is not stored. Its text is sent to Google Gemini to extract the transactions (section 4). Only the transactions you confirm are saved, on your device. |
| Voice and dictated text (optional) | What you say or type to record a transaction, for example “40 for gas with my card”. | Audio is transcribed by Apple’s speech recognition; depending on your device, it may be processed on Apple’s servers. We never receive the audio. The text is sent to Google Gemini to interpret it. |
| Receipt photos (optional) | Images of receipts you scan in Split the Bill. | Sent to Google Gemini to read the items and amounts. We don’t store them. |
| Group projects (optional) | Project name, names or nicknames of participants, and descriptions and amounts of shared expenses. | Google Firebase (Firestore), only if you create or join a group project. |
| Identifier and account | An anonymous Firebase Authentication identifier that links you to your group projects. If you choose to link an account so you don’t lose your projects, also your email address or, with “Sign in with Apple”, the email (which may be Apple’s private relay address) and the name Apple shares. | Google Firebase. |
| Advertising | Device data and, only if you allow it, the advertising identifier (IDFA). | Google AdMob. |
| Email for Tax Advice (optional) | Only if you enter it and check the consent box for the Tax Advice service. | Formspree. |
| Purchases and subscriptions | The status of your Premium subscription or purchase. | Apple (App Store / StoreKit). We never receive or store card or payment details. |
4. Artificial intelligence features
These features use Gemini, Google’s artificial intelligence service, through Firebase. Each one sends only what it needs to produce its result:
| Feature | What is sent | What is not sent |
|---|---|---|
| AI dictation | The phrase you dictated or typed and the names of your categories. | Your other transactions. |
| Automatic categories | The merchant name or note of transactions that don’t have a category yet, and the names of your categories. | Amounts, dates and payment methods. |
| Bank statement import | The text of the statement: dates, descriptions, merchants and amounts of the transactions, and the bank name. It may include other details that appear in the document, such as your name or address. If the PDF is a scanned image with no text, the file is sent. | Before sending the text, the App hides on your device card, account and bank routing numbers (except the last 4 digits) and national ID numbers such as the Social Security Number, RFC and CURP. |
| Split the Bill | The photo of the receipt. | Your transactions. |
| Monthly AI report | Monthly totals of income, expenses and savings, and the amounts of your top categories. | Individual transactions, notes and merchants. |
Google processes this information on our behalf and only to generate the response. We use Gemini on its paid tier; under those terms, Google does not use the content of requests to train its models, although it may retain it for a limited time to prevent abuse. Google’s servers may be located outside your country. See the Gemini API terms and Firebase privacy.
AI responses may contain mistakes. That’s why the App shows you what it understood before saving, and you can correct any category or amount.
5. Financial data and your consent
Information about your income, expenses and bank statements is financial in nature. We process it only with your express consent, which you give by turning on each feature: when you record transactions, set up the Apple Pay automation, dictate or type a transaction with AI dictation, or choose the PDF you want to import after seeing on screen what will be sent. None of these features turns on by itself.
You can withdraw your consent at any time by no longer using the feature, deleting the automation in the Shortcuts app, deleting your records in the App or writing to us (section 10). Withdrawal does not apply retroactively to what was already processed.
6. Purposes
Purposes necessary for the service:
- Letting you record, categorize and review your personal finances.
- Automatically recording your Apple Pay payments, if you set up the automation.
- Interpreting what you dictate or type, categorizing your transactions and extracting transactions from your bank statements and receipts with artificial intelligence, when you use those features.
- Generating your monthly report with recommendations.
- Syncing expenses among the participants of a group project and keeping your access to them.
- Validating your Premium subscription and showing ads in the free version.
- Putting you in touch with a certified public accountant, only if you request Tax Advice.
Non-necessary purpose: showing you personalized ads. You can refuse them without affecting the service by declining tracking, as explained in section 7.
7. Advertising and App Tracking Transparency
The free version of the App shows ads through Google AdMob. Where required by law, for example in the European Economic Area and the United Kingdom, the App first shows Google’s consent form. Before using your device’s advertising identifier (IDFA) for personalized ads, the App shows Apple’s App Tracking Transparency prompt. If you decline, you’ll still see ads, but they won’t be personalized. You can change this at any time in Settings → Privacy & Security → Tracking, and review your ad choices in the App under Settings → Ad privacy. See Google’s policies. Your financial data is never used for advertising.
8. Who we share it with
We do not sell, rent or trade your personal information, and we do not “sell” or “share” it for cross-context behavioral advertising as those terms are defined in U.S. state privacy laws, beyond the ad identifiers described in section 7 when you allow tracking. We only share it with the following providers, which process it on our behalf and only as needed to run the App:
- Google (Firebase, Gemini and AdMob): group projects, authentication, verifying that requests come from the genuine App (App Check), artificial intelligence features and advertising.
- Apple: speech recognition for dictation, processing of purchases and subscriptions, and “Sign in with Apple”.
- Formspree: sending the Tax Advice form, only if you use it.
Some of these providers process information outside your country. We make no other transfers of your data, except when required by law or a competent authority.
9. Retention and deletion
- Local data: stays on your device until you delete it in the App or uninstall the App. Uninstalling it deletes all your local financial information, including the merchant memory the App uses to categorize.
- Bank statements, receipts and dictated phrases: we don’t store them. They are used only while being processed; Google may retain them temporarily as described in section 4.
- Group projects: kept while the project exists. You can delete a project in the App, which deletes its expenses.
- Linked account: kept while you use it; you can ask us to delete it.
- Tax Advice email: kept only as long as needed to handle your request.
10. Your rights
Wherever you live, you can at any time request access to, correction of or deletion of your personal data, object to its processing, withdraw your consent or limit its use and disclosure by writing to expensetrack2@gmail.com. Include your name, a way to reply to you, the right you want to exercise and, if applicable, the group project or account involved. We will reply within 20 business days. We will not discriminate against you for exercising these rights. Residents of California, the European Economic Area, the United Kingdom and other places with privacy laws may have additional rights under those laws, and may also contact their local data protection authority.
Because your financial records are stored only on your device, you can view, correct or delete them directly in the App at any time.
11. Security
Information in transit is encrypted with HTTPS/TLS. Access to group projects is restricted by Firestore security rules, and the artificial intelligence features only respond to the genuine App through Firebase App Check. Before sending a bank statement, the App hides card and account numbers and national ID numbers on your device. You can also turn on Face ID or Touch ID lock to protect local access.
12. Children
Expense Track is not directed to children under 13, and we do not knowingly collect information from children under that age. If we find that such information was collected, we will delete it.
13. Changes to this policy
We may update this Privacy Policy. The date of the last update appears at the top of this page. Significant changes will be communicated in the App.
14. Contact
Questions about this policy or how your data is handled: expensetrack2@gmail.com