Security & privacy

Careful with your money data — and clear about how.

Expense data is personal. This page explains what Expeniqo actually does with it, in plain language. No badges, no vague promises — just how it works today.

Key facts

  • No ads, and no third-party analytics in the app
  • No bank login and no access to your bank account
  • No upload of SMS message text
  • No storage of receipt images

Data handling

What happens to your data.

Your account

  • Sign up with your email address and a password, verified with a one-time code sent to your email. Codes expire after 10 minutes.
  • Passwords are stored as bcrypt hashes, never as plain text.
  • Sign-in attempts are rate limited to slow down password guessing.
  • Signing out ends your session on every device, not just the one in your hand.

SMS data

  • SMS tracking is optional and only starts after you allow it.
  • Messages are checked on your phone. Personal messages are ignored.
  • For each transaction, the amount, merchant, date, category, whether it's money in or out, and the sender ID are saved, with a one-way fingerprint so the same message isn't recorded twice. The text of your messages is never uploaded or shared.

Receipts

  • Receipt images are sent over HTTPS, read in memory and then discarded — Expeniqo doesn't store them.
  • To read a receipt, Expeniqo's server uses Google's Gemini AI model.
  • Scanned details are only suggestions. Nothing is saved until you tap Save expense.

Connections and storage

  • The app talks to Expeniqo's servers over encrypted HTTPS connections.
  • Your sign-in token is kept in Android's secure storage on your phone.
  • Every request is checked against your signed-in account, so you only see your own data.
  • Expeniqo's servers run on Amazon Web Services in the Mumbai (ap-south-1) region.

Connected services

Who else is involved.

Expeniqo works with very few outside services. Here's each one and what it's used for.

Google sign-in

If you choose Continue with Google, Google shares your name and email address so you can sign in. It doesn't give Expeniqo access to your Gmail or your inbox.

Google Gemini

Used to read receipt images you choose to scan. Images are processed in memory and not stored by Expeniqo.

Zoho Mail

Sends the one-time codes that verify your email address and sign you in.

Your bank

Not connected. Expeniqo never asks for your bank login, doesn't connect to your bank account and can't move money.

Email import is planned for the future and isn't available. If it's ever released, it will be a separate, explicit choice — signing in with Google will never turn it on.

Privacy controls

You can leave whenever you want.

Turn SMS tracking off at any time. Clear all your expenses and budgets but keep your account. Or delete your account entirely from Profile — type DELETE to confirm, and your profile, expenses, budgets and category preferences are permanently deleted, and you're signed out everywhere.

Security is ongoing work

We review Expeniqo's security as the product grows and will keep this page up to date. We don't claim certifications we don't hold. If you think you've found a security issue, please tell us at our contact address so we can look into it.

FAQ

Privacy questions

Can I use Expeniqo without SMS access?

Yes. SMS tracking is optional. You can add expenses manually or scan receipts instead, and you can turn SMS tracking off at any time.

Do you keep my receipt images?

No. The image is sent over HTTPS for reading, processed in memory using Google's Gemini API, and not stored by Expeniqo. Only the details you choose to save become an expense.

Can Expeniqo read my Gmail?

No. Email intelligence is being planned for the Expeniqo web experience. It isn't available today. If it's released, it will be a separate, explicit choice inside the product, and the permissions it needs will be clearly presented before you decide.

Signing in with Google does not give Expeniqo access to your email.

How do I delete my account?

In the app, go to Profile → Delete account and type DELETE to confirm. This permanently deletes your profile, expenses, budgets and category preferences, and signs you out on all devices. Read the full account deletion details.

Track your spending with your eyes open.

Know what Expeniqo does with your data — then see where your money goes.

Expeniqo is launching on Android. A web experience is in development.