Privacy policy
How Expeniqo handles your data, in plain language.
Who we are
Expeniqo is a personal expense tracker for Android, built by Edgezen Labs. Legal entity responsible for your data and its registered address: To be confirmed
This policy covers the Expeniqo app and its servers. The last section covers this website.
What Expeniqo collects
Your account
- Your name, email address and, if you add one, your phone number.
- Your password, stored only as a one-way bcrypt hash — never as plain text.
- If you sign in with Google: your name, email address and a Google sign-in account identifier. Expeniqo doesn't receive your Google password and gets no access to your Gmail.
- One-time codes sent to your email to verify your account, sign you in or reset your password. They expire after 10 minutes.
Your expenses
- Expenses you add: amount, category, merchant, date, payment method and an optional note.
- Your monthly budgets and the categories you choose for merchants.
SMS tracking — only if you turn it on
With your permission, the app checks the SMS on your phone for bank and payment alerts. Messages are checked on your phone and personal messages are ignored. For each transaction it finds, the app sends to Expeniqo's servers:
- the amount, merchant, date, category and whether it's money in or out;
- the sender ID of the message, for example VM-HDFCBK;
- a one-way fingerprint of the message, so the same alert isn't recorded twice;
- how confident the app is about the transaction, so uncertain ones can wait for your review.
The text of your messages is never uploaded. If a payment the app is unsure about can't be held for review on the server, it's kept in a review list in the app's private storage on your phone, together with the message text, so you can confirm or ignore it. That list never leaves your phone, isn't included in device backups, and is cleared when you log out or delete your account.
Receipts — only when you scan one
The photo you choose is sent over HTTPS to Expeniqo's server, which uses Google's Gemini API to read the merchant, date, total and other details. Expeniqo doesn't store the image — it's processed in memory and discarded. Nothing is saved until you review the details and tap Save expense. How Google handles images under the Gemini API terms that apply to Expeniqo: To be confirmed
Technical data
- Your IP address is used to limit abusive request rates. Only a one-way hash of it is stored, and those records are deleted after about 2 days.
- Expeniqo's servers keep logs of requests (the address requested, the result and how long it took) and of some account events, which can include your account ID. Passwords, codes, tokens, message text and amounts are removed before anything is logged, and email addresses and phone numbers are masked.
- The app contains no advertising, analytics or crash-reporting SDKs and shows no ads.
Device permissions
| Permission | Why | Required? |
|---|---|---|
| SMS (read and receive) | Find bank and payment alerts | No — you can add expenses and scan receipts without it |
| Camera | Photograph receipts | No — you can choose a photo from your gallery instead |
| Internet | Talk to Expeniqo's servers | Yes |
The app doesn't ask for your location, contacts or call logs. You can revoke permissions at any time in Android Settings.
How it's used
- To run Expeniqo: store your expenses, show your budget and reports, and categorise transactions.
- To sign you in and keep your account secure, including one-time codes and rate limiting.
- To send service emails such as verification codes.
Who processes it
Your data is sent only to the services Expeniqo needs to run:
| Service | Purpose | Data |
|---|---|---|
| Amazon Web Services, Mumbai (ap-south-1) | Hosting Expeniqo's servers, database and logs | Your account and expense data |
| Google Firebase Authentication | Google sign-in, if you use it | Name, email address, sign-in identifier |
| Google Gemini API | Reading receipts you choose to scan | The receipt image |
| Zoho Mail | Sending verification codes | Email address, the code |
Expeniqo's servers and database are in India. Google's services may process data outside India.
How it's protected
- The app talks to Expeniqo's servers only over HTTPS.
- Your sign-in token is kept in Android's secure storage on your phone.
- Every request is checked against your signed-in account, so you only see your own data.
- Signing out ends your session on every device.
More detail: how Expeniqo handles security and privacy.
How long it's kept
- Account and expense data: until you clear it or delete your account.
- One-time codes: they expire after 10 minutes and are deleted with your account.
- Rate-limit records (hashed IP address): about 2 days.
- Server logs: 30 days, then deleted automatically.
- Database backups, taken before maintenance, can contain data that has since been deleted. How long backups are kept: To be confirmed
- Google sign-in record held by Firebase Authentication: deleted together with your Expeniqo account (older records have one exception — see account deletion).
Your choices
- Turn off SMS tracking on the Home screen or in Profile, and revoke the SMS permission in Android Settings.
- Edit your details in Profile → Personal details.
- Clear all data in Profile to delete your expenses and budgets but keep your account.
- Delete your account in Profile → Danger zone, or by email if you can't use the app. See account deletion for exactly what's removed.
- Ask about the data in your account by emailing contact@edgezenlabs.com.
Your rights under applicable law, and a grievance officer if one is required: To be confirmed
Children
Expeniqo is a personal finance app and isn't designed for children. Minimum age: To be confirmed
This website
expeniqo.com is served by Cloudflare, which handles each request to deliver the page. The site has no sign-in, forms or advertising, and doesn't set cookies itself. Email links open your own email app.
Changes to this policy
When this policy changes, this page will be updated. How significant changes will be announced: To be confirmed
Contact
Questions about your data? Email contact@edgezenlabs.com.