Expense Flow

Privacy Policy

Effective date: 2025-08-11

This privacy policy applies to the Expense Flow mobile application (the “Application”) provided by Udesh Arlekar (the “Service Provider”). This Application is provided on an "AS IS" basis, meaning the Application is provided in its current condition without warranties beyond those required by applicable law. By using the Application you agree to the terms of this Privacy Policy.

Information We Collect

The Application collects information when you download and use it. The categories of information we may collect include:

Personal Information you provide: Email address and Username (if you sign in or create a profile).
Expense Data: transaction amounts, categories, dates, notes and other expense-related details you enter into the app.
Automatically collected information: device IP address, pages/screens visited in the Application, time and date of visits, session duration, operating system version, and crash logs.

The Application does not collect precise GPS location data. We do not collect any sensitive personal information beyond the categories described above, except as you provide within expense entries.

Why We Collect Information (Purpose)

We collect this information for the following purposes:

To provide the core functionality of the Application (recording and displaying your expenses and balances).
To securely synchronize your data across your devices.
To store encrypted backups of your expense data on our backend (Google Firebase) so you can restore data if you reinstall or change devices.
To analyze and improve the Application, diagnose problems, and monitor usage patterns (analytics and crash reporting).
To communicate with you about the Application (for support, notices, and optional marketing where permitted).

Encryption & Security

We take the protection of your data seriously:

Certain sensitive information (for example, account balances or fields you identify as sensitive) is encrypted locally on your device before being transmitted to our servers. On Android this is implemented using Android's secure storage APIs (e.g., EncryptedSharedPreferences) so that sensitive fields are encrypted at rest on the device prior to any upload.
Data transmitted between the Application and our servers (Firebase) is sent over secure, encrypted connections (HTTPS/TLS).
We use standard industry safeguards — physical, technical, and administrative — to protect information under our control. However, no security system is impenetrable; we cannot guarantee absolute security.

Third-Party Services

The Application uses a limited set of third-party services to operate and improve the app. These services have their own privacy policies and may process data as described below:

What is shared: only the information necessary for these services to operate (for example crash logs to Crashlytics, analytics events to Firebase Analytics). We do not sell your personal information to third parties.

How We Share Information

The Service Provider may disclose User Provided and Automatically Collected Information:

To comply with legal obligations (for example in response to a subpoena or similar legal process).
When necessary to protect the rights, safety, or property of the Service Provider, its users, or the public.
With service providers who perform services on our behalf (for example Firebase). These providers are contractually bound to only use the data to provide the requested services.

Data Retention & Deletion

We retain personal and expense data for as long as you use the Application and for a reasonable period thereafter to allow account recovery, comply with legal obligations, and provide our services.

To delete all data associated with your account:

Use the in-app “Delete my data” feature. This feature will send an automated delete request email to the Service Provider (udesh.arlekar@gmail.com) containing the minimum information needed to identify your account. After receiving a valid request, we will delete the associated data as described below.
Or, you can directly email the Service Provider at udesh.arlekar@gmail.com with a request to delete your data. Please include the email address or username associated with your account and a short statement requesting deletion.

After we receive and verify a valid deletion request, we will remove your personal and expense data from active systems and backups within a reasonable time, except where retention is required by law. If you request deletion, we will confirm by email once deletion is complete.

Rights Under GDPR / CCPA (Where Applicable)

If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights regarding your personal data. These may include:

The right to request access to the personal data we hold about you.
The right to request correction of inaccurate personal data.
The right to request deletion of your personal data.
The right to request portability of your personal data (export).
The right to opt out of certain data sales or targeted marketing (where applicable).

To exercise any of these rights, please contact us at udesh.arlekar@gmail.com. We may ask you to verify your identity before fulfilling certain requests to protect your privacy and security.

Children

The Application is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we learn that personal information of a child under 13 has been collected, we will take reasonable steps to delete such information.

Opt-Out

Uninstalling the application from your device will stop any future data collection. However, uninstalling the app will not automatically delete any data you have already provided or that has been stored on our servers. To request permanent deletion of your data, you may use the in-app “Delete Data” request feature or contact us directly at udesh.arlekar@gmail.com

Changes to This Privacy Policy

We may update this Privacy Policy occasionally. If we make material changes, we will post the updated policy here and update the “Effective date” at the top. Continued use of the Application after changes are posted means you accept the revised policy.

Your Consent

By using the Application you consent to the collection and use of information as described in this Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or want to make a data request (access, deletion, export, or correction), please contact:

Email: udesh.arlekar@gmail.com

Last updated: 2025-08-11