Privacy Policy

1The Short Version

• Your personal finance data lives on your device in secure local storage. It is stored locally for speed and privacy.
• Optionally, back up to your own Google Drive, protected with strong encryption before it leaves your device.
• We keep a minimal account (email, display name, avatar) — never your financial data.
• We never sell, share, rent, or monetize your personal financial data. No ads. No data brokers. No lending partners. Ever.
• You can export or delete everything we hold about you, from inside the app, at any time.

2Data We Handle

2a. Data You Provide Directly

2b. Data Created Automatically

2c. What We Do NOT Collect

• We do not read your bank SMS messages or auto-track your notification inbox.
• We do not collect your contacts list, call logs, browsing history, or data from other apps.
• We do not collect your bank account number, credit card number, UPI PIN, OTP, or any financial credential.
• We do not use cookies for advertising, fingerprinting, IDFA, or cross-app tracking.
• We do not collect your location or GPS coordinates.

3Where Your Data Lives

XMP is built on a local-first architecture. Your core financial data lives in your browser's secure local storage, scoped strictly to your authenticated account.

Logging out completely purges in-memory active states and clears user-scoped local storage data, preventing data leakage on shared devices.

4AI Feature Processing

XMP includes three AI-powered features. Here is exactly how each handles your data:

5Authentication & Account

XMP uses secure cloud authentication. You can sign in with:

• Google OAuth 2.0 — We receive your Google email, display name, and profile picture from Google's consent flow.
• Email and Password — Your password is securely hashed using industry-standard algorithms before storage; we never store plaintext passwords.

Your account record contains only: email address, display name, avatar URL, authentication provider, and account creation date. It never contains your expenses, budgets, or financial data.

6Cloud Backup (Google Drive)

When you connect Google Drive from Settings → Data & Backup:

1. OAuth Scope: We request only an app-private folder scope — the app can only read its own isolated folder, never your personal Drive files.
2. Client-Side Encryption: All data is protected with strong encryption before it leaves your browser, with a key derived from your credentials.
3. Your Private Folder: The encrypted file is uploaded to your Google Drive's hidden app-private folder. Only the XMP app can read this folder.
4. Restore Preview: When restoring, the app downloads and decrypts locally, showing you a comparison before overwriting.
5. Offline Fallback: You can also export/import plain .json backup files locally without internet.

7Subscription & Payment (Razorpay)

• What Razorpay receives: Your payment method details (UPI, card, netbanking) are processed entirely by Razorpay's PCI-DSS Level 1 compliant infrastructure. We never see, store, or handle your card number, CVV, or UPI PIN.
• What we store: Razorpay order ID, payment ID, plan type, activation date, and expiry date — solely to verify your Pro entitlement.
• Server-side verification: Payment signatures are verified using cryptographic signature verification to prevent tampering.
• Invoices: PDF invoices with GST details are generated and available for download inside the app.

8Push Notifications (Firebase Cloud Messaging)

• What we send: Daily expense reminders, scheduled bill alerts, plan expiry warnings, and admin broadcasts.
• What we store: Your FCM device token linked to your user ID. This token is an opaque Firebase identifier and cannot identify you personally.
• Notification payloads contain only title, body text, and optional image. They never contain your financial data.
• You can disable push notifications at any time from device settings or within the app.

9Zero Silent-Save Principle

10Data Ownership & Your Rights

You can, at any time and without contacting us:

• View every piece of data XMP holds about you — it's all visible in the app.
• Edit any expense, budget, category, or scheduled transaction.
• Export your complete transaction ledger in PDF, Excel (.xlsx), or CSV format.
• Backup your data to your own Google Drive with client-side encryption.
• Delete all local data with one tap from Settings → Clear Data.
• Delete your account permanently from Settings → Delete Account.

If you are a resident of a jurisdiction with additional data protection rights (e.g., India's DPDP Act 2023, EU GDPR), you can exercise those rights by emailing support@xpensemanagerpro.in.

11Data Retention

12Third-Party Services

13What We Will Never Do

14Children's Privacy

XMP is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will promptly delete it.

15Changes to This Policy

If we change this policy materially, we will update the date at the top, post the new version at this URL, and surface the change inside the app. Material changes do not take effect retroactively for data already collected.

16Contact