Expenny

1. Information We Collect

Account information. When you create an account, we collect your email address and a securely hashed version of your password. We never store passwords in plain text.

Subscription data. We store the entries you create in Expenny — service names, costs, billing cycles, renewal dates, and notes — so we can display and calculate them for you.

Usage data. We may collect anonymous usage events (page views, feature interactions) to understand how the product is used and where we can improve it. This data cannot be linked back to individual users.

2. How We Use Your Information

• To provide, operate, and maintain the Expenny service
• To send account-related emails (password resets, security alerts)
• To calculate and display your subscription analytics
• To understand usage patterns and improve the product
• To respond to support requests you initiate

We do not use your data for advertising, and we do not sell your personal information to any third party.

3. Data Storage & Security

Your data is stored using Firebase (Google Cloud), which provides industry-standard encryption at rest (AES-256) and in transit (TLS 1.2+). Firebase is SOC 2 Type II certified and GDPR-compliant.

Access to your subscription data is enforced by Firebase security rules — only you can read or write your own data. Our team does not access individual user data except to investigate reported security issues.

4. Third-Party Services

Expenny relies on the following third-party services to function:

• Firebase (Google): Authentication and database storage. Subject to Google's Privacy Policy.
• Formspree: When you submit feedback via the feedback form, your name, email address, and message are sent to and stored by Formspree, Inc. Subject to Formspree's Privacy Policy.
• Google Fonts: Font delivery via CDN. May log IP addresses per Google's standard practices.
• Font Awesome: Icon delivery via CDN. Subject to Fonticons, Inc. Privacy Policy.

We are not responsible for the privacy practices of these services. We encourage you to review their policies directly.

5. Cookies & Local Storage

Expenny stores Firebase Authentication tokens in your browser's local storage to keep you logged in between sessions. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and all associated data
• Export your subscription data in a portable format
• Object to or restrict certain processing of your data

To exercise any of these rights, email us at support@expenny.app. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. If you request account deletion, all personal data associated with your account will be permanently removed within 30 days. Aggregate, anonymized analytics may be retained indefinitely.

8. Children's Privacy

Expenny is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or by displaying a notice in the app. The "last updated" date at the top of this page always reflects the most recent revision.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at: