Privacy Policy

1. Overview

XpenseDash ("we", "us", or "our") is an AI-powered expense, mileage, time, and fuel tracking application. We are committed to protecting your privacy and being transparent about how your data is collected, used, and stored.

2. Information We Collect

When you use XpenseDash, we collect the following types of information:

• Account Information: Your email address, display name, and profile photo (if you provide one).
• Financial Records: Receipts, odometer photos, clock photos, expense amounts, merchants, dates, and descriptions you choose to capture and store.
• Usage Data: App interactions, feature usage, and device information used to improve the product.

3. How We Use Your Information

• To provide the XpenseDash service—storing, organizing, and exporting your tracked records.
• To process photos through our proprietary AI for automatic data extraction.
• To generate CPA-approved reports on your request.
• To send you support responses and important account notifications.

4. Data Security

We use bank-grade encryption and secure cloud storage to protect your records. Your data is isolated per account, and access is controlled through Row-Level Security policies. Biometric and PIN locks are available for additional on-device protection.

5. AI Training

Your personal data and financial records are never used to train public AI models. We use AI solely to process the photos and data you submit within the app for your own tracking purposes.

6. Data Sharing

We do not sell your data. We share information only:

• With your consent (e.g., when you invite guests to a shared tracker).
• With service providers who help us operate the app (payment processing, cloud hosting, AI inference).
• Third-party AI sub-processors (Google Gemini, OpenAI, and Anthropic Claude) handle user data strictly to deliver requested features and are bound to provide equal or greater protection of user data.
• AI scanning and the XpenseDash Assistant require your opt-in consent. You can grant or revoke this consent anytime in Settings; declining or revoking keeps manual entry fully available without any AI data sharing.
• When required by law or legal process.

7. Data Retention & Deletion

Your records are retained for as long as your account is active. You can delete individual entries at any time. Deleting your account permanently removes all associated data.

8. Contact

If you have questions about this Privacy Policy, please visit our Support page or email us at legal@xpensedash.com.