Privacy Policy — ExpenseTracker

Last updated: 3 June 2026

This Privacy Policy explains how the ExpenseTracker mobile application ("ExpenseTracker", "the app", "we", "us") collects, uses, and protects your information. ExpenseTracker is operated by Fahed Alfarah. By using the app you agree to this policy.

Contact: fahed.alfarah@gmail.com

1. Information we collect

We only collect what the app needs to work. You provide most of it directly.

Account information: name, email address, password (stored only as a securely hashed value), phone number (optional), age (optional).

Financial information you enter or that the app helps you record: expenses (amount, merchant, category, date, notes), budgets, bills, income, savings targets, and currency/language preferences.

Bank transaction SMS (Android only, optional): if you enable automatic expense detection and grant SMS permission, the app reads bank transaction notification messages on your device to detect new purchases. From these messages the app extracts the amount, merchant, bank name, and the last four digits of the card. Messages are parsed on your device. Only the resulting structured transaction details — not your full message inbox — are stored in your account to create expense entries that you confirm. You can use the entire app without granting SMS access.

Device & usage information: a device identifier and sync logs used to keep your data consistent across the app and our servers.

We do not collect your precise location, contacts, photos, or browsing history.

2. How we use your information

To create and secure your account and authenticate you.
To provide the app's features: expenses, budgets, bills, income, savings goals, and reports.
To detect and suggest expenses from bank SMS, if you enable that feature.
To send in-app and push reminders you have enabled.
To sync your data between your device and your private cloud account.
To diagnose problems and improve the app.

3. How your information is stored and protected

Your data is stored locally on your device and synced to our backend service (hosted on Railway, with a PostgreSQL database). Data in transit is encrypted using HTTPS/TLS. Passwords are stored using one-way hashing. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

4. Sharing your information

We do not sell your data, and we do not share it with third parties for advertising. Your data is stored only in your own ExpenseTracker account on our backend. We do not use third-party advertising or analytics SDKs that share your personal data. We may disclose information if required by law or to protect the rights, safety, and security of our users and the service.

5. Your choices and rights

Access & edit: view and edit your data in the app anytime.
SMS feature: optional; you can decline or revoke the SMS permission in device settings and the rest of the app keeps working.
Delete your account and data: permanently delete your account in the app (Settings → Delete account), which removes your data from our servers. You may also email fahed.alfarah@gmail.com to request deletion.
Notifications: turn off reminders in the app or device settings.

6. Data retention

We retain your data while your account is active. When you delete your account, your associated data is deleted from our systems.

7. Children's privacy

ExpenseTracker is intended for users aged 18 and over and is not directed at children. We do not knowingly collect data from children.

8. International users

The app is designed primarily for users in Saudi Arabia and supports the Saudi Riyal and Arabic, but may be used elsewhere. By using the app you consent to the processing of your information as described here.

9. Changes to this policy

We may update this policy from time to time and will update the "Last updated" date above.

10. Contact us

Questions or requests about this policy or your data: fahed.alfarah@gmail.com