Expenses — Privacy Policy

01Who we are

Expenses is developed and published by Khodour Fouani, an independent developer trading as Digital Ninja (www.dninja.com). Khodour Fouani is the developer named on the Google Play and Apple App Store listings for Expenses and is the party responsible for the information described in this policy.

Application: Expenses Book – In & Out (shown as “Expenses” on your phone)
Package / Bundle ID: app.expenses.ai
Developer: Khodour Fouani
Trading as: Digital Ninja — dninja.com
Platforms: Google Play (Android) and Apple App Store (iOS)
Contact: Via the developer contact details published on Expenses’ Google Play and App Store listings

This policy covers the Expenses mobile app only.

02Stored on your device

Expenses has no account, no login, and no server of ours. Everything you enter is written to private database files inside the app’s own storage on your phone, which no other app can read. We cannot see it. That storage holds:

Your books — each book’s name and its currency.
Your entries — the amount, whether it is money in or money out, the date and time, its label, and any note you write.
Your labels — their names, colours, icons, and order.
Repeating entries you set up and their schedule.
Receipt photos you attach. The app keeps its own reduced copy of each photo; it does not read the rest of your photo library.
App preferences such as appearance, reminders, the app lock setting, and backup settings.
If you give a book a PIN, a scrambled (salted and hashed) form of it — never the PIN itself.

The camera is used only when you choose to photograph a receipt. Photos picked from your library are chosen through the phone’s own picker, which hands the app only the photos you tap.

Reminders for repeating entries are scheduled by your phone’s own notification system. Expenses does not use push messaging, and no reminder content is sent over the internet.

The app lock uses your phone’s own Face ID, Touch ID, fingerprint, or passcode check. The phone tells the app only whether the check passed; Expenses never receives your face, fingerprint, or passcode.

03What leaves your device

We want to be precise here rather than claim more privacy than the app delivers. The following information can leave your phone.

Google Analytics for Firebase

Expenses uses Google Analytics for Firebase, a Google service, to understand how the app is used so we can decide what to build next. It records usage events — for example that an entry was added, edited, or deleted; that a label or a book was created; that a backup was made or failed; that a screen control such as the chart, search, or a filter was used; or that something failed to load or save.

These events record that an action happened, never what you entered. No amount, note, label name, book name, search text, or receipt photo is ever sent. A few events carry a short detail about the action itself — for example whether an entry was money in or out, whether it had a note or a photo (yes or no, not the content), or which kind of filter was used.

Alongside the events, the app sends a small set of facts about how it is set up, so that usage can be grouped: the number of books and the number of entries, each only as a broad range (such as “10–99”, never the exact count); whether the app lock is on; the currency code of the open book (such as USD); and whether the light or dark appearance is in use.

The Firebase library also collects standard technical information: an identifier for this installation of the app, and on iPhone the identifier Apple assigns to a developer’s apps on your device; the device model; the operating system version; the app version; your language; and your approximate country or region. Expenses is built without the advertising identifier on both Android and iOS, and without Google Play install referrer information. Google processes this as our service provider. See Firebase’s privacy documentation and Google’s privacy policy.

Usage sharing is on when the app is first installed. You can turn it off at any time in the app’s Settings with the “Share app usage” switch. Once it is off, nothing further is sent — not even the fact that you turned it off — and anything waiting to be sent is discarded.

Backups to your own cloud account

Backup is something you turn on or run yourself. On iOS, backups are saved to the Expenses folder in your own iCloud Drive. On Android, they are saved to a folder you choose, which may be on the phone or in a cloud service you use, such as Google Drive. A backup contains the whole book, including its entries, notes, and receipt photos. In every case the files go to storage that belongs to you, not to us — we have no access to them.

Separately, if you use your phone maker’s own device backup (for example iCloud Backup on an iPhone), the app’s data may be included in it under your account, as with other apps. On Android, Expenses is excluded from Google’s automatic app backup.

Things you share yourself

You can share entries as a PDF, or save a backup file, from inside the app. These files are created only when you ask, and they go wherever you choose to send them. Once a file leaves the app it is outside our control, so take care when sharing it.

Siri and Shortcuts — iOS only

If you add an entry by asking Siri or through the Shortcuts app, your request is handled by Apple under Apple’s own privacy policy. The entry itself is saved on your device like any other.

04What Expenses never does

We never sell or rent your personal information to anyone.
Expenses contains no advertising and shows no ads.
Expenses does not track you across other companies’ apps or websites, and does not use the advertising identifier.
Your financial records are never used for advertising, ad targeting, or building marketing profiles.
There is no account system, so nothing is stored on our servers — we do not operate a server for Expenses.
Expenses does not connect to your bank, read your messages, or use your location, contacts, or microphone.
Nobody at Digital Ninja can read your entries, notes, labels, or receipt photos.

05Who we share with

Google is the only third party that receives information from Expenses, in its role as our analytics provider, and only the information described in section 03. Google processes it on our behalf under its own terms.

We would disclose information if compelled by a valid legal request from a competent authority. Given that we hold no copy of your financial records, there is in practice nothing of that kind for us to hand over.

06Keeping & deleting your data

Your records stay on your device until you remove them. You are in control of all of it:

Delete individual records — remove any entry, receipt photo, label, or repeating entry from within the app.
Delete a book — removing a book deletes its entries and receipt photos from the phone.
Uninstall — removing the app deletes its data from your phone.
Remove backups — delete the backup files from the Expenses folder in your iCloud Drive, or from the folder you chose on Android.
Stop usage sharing — turn off “Share app usage” in the app’s Settings.

Analytics events already sent to Google are retained by Google under its retention settings, up to a maximum of 14 months, and are then deleted automatically. They are tied to an installation of the app, not to your name or any account. To ask us about them, write to us using the developer contact details published on Expenses’ Google Play or App Store listing.

07Security

Expenses’ data lives in the app’s private storage area, which the operating system isolates from other apps, and it benefits from your device’s own encryption. Information sent to Google’s analytics service travels over encrypted connections. You can add the app lock, and a PIN on any book, from Settings. The most important protection is the one you control: keep a screen lock on your phone, and remember that backup files you save elsewhere are protected by that storage, not by the app.

08Children’s privacy

Expenses is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided information through the app, contact us using the developer contact details published on Expenses’ store listing.

09International transfers

Your financial records are not transferred anywhere by us — they remain on your device and in any backup location you choose. The analytics information described in section 03 is processed by Google on infrastructure that may be located outside your country, under the safeguards set out in Google’s own privacy terms.

10Your rights

Depending on where you live you may have the right to:

Access the personal information held about you.
Correct information that is inaccurate or out of date.
Delete your information.
Export your information in a portable format.
Object to certain processing, or withdraw consent where it was the basis.

For everything stored on your device you can exercise these rights directly in the app — view, edit, share as a PDF, back up, or delete, at any time, without asking us. You can stop the analytics described in section 03 with the switch in Settings. For anything else, contact us using the developer contact details published on Expenses’ store listing and we will respond within a reasonable timeframe.

11Changes to this policy

We may update this policy as the app changes or the law evolves. When we do, we will revise the “Last updated” date at the top of this page. If a change materially affects how your information is handled, we will make that clear in the app.

12Contact us

Expenses is published by Khodour Fouani, trading as Digital Ninja. Questions, requests, or concerns about the app and this policy should be sent to the developer contact address published on Expenses’ Google Play listing and on its Apple App Store listing, which is kept current on both stores.

We handle privacy requests received that way and will respond within a reasonable timeframe.