Privacy Policy
This Privacy Policy explains what information Expense Monitor handles, how it is used, and the choices available to you.
Last updated: October 31, 2026Operated by Krishna Maliya. Contact: support@updates.expensemonitor.app.
Information stored by the current app
- Username, email address, display name, and a password hash for account access.
- Spaces, membership, invitations, category choices, expenses, payer contributions, cost shares, and reported repayments.
- An HTTP-only session cookie needed to keep you logged in, with a revocable token digest stored on the server.
How it is used and shown
Account data is used for sign-in and invitations. Expense data is used for ledgers, linked-space views, reports, and split balances. Active members of a space can see its expenses and shares; linked-space views omit the source expense note. Hosting and database providers process the information needed to operate the app.
Support and product usage
Support tickets contain the messages you submit and any replies. Platform admins may review tickets; private admin notes are not shown to users. Daily activity records support aggregate platform usage reporting. Contact support for questions about retained records.
Security and controls
Passwords are stored as scrypt hashes, not plaintext. The app uses revocable, HTTP-only session cookies. Expense and space deletion currently use soft deletion. Account & security provides data export, password recovery, password changes, session revocation and account closure. Closing an account anonymizes its profile and removes login access; shared financial records, historical memberships and support records remain. Expense and space deletion do not erase their history. Receipt images are processed on your device for OCR and are not uploaded by that feature. Transactional email delivery uses Resend when configured. Expiring recovery links and queued emails are removed after expiry; successful email payloads are cleared after delivery. Hosting and database backups have a separately configured retention period.