1. Introduction
Xpensy ("the App") is a group travel expense tracking application developed by Erez Cohen, operating under E-REZULTS ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the App on iPhone and Mac.
2. Information We Collect
2.1 Account Information
- Email address — used for authentication and account recovery
- Display name — shown to other trip members
- Authentication tokens — for secure session management
2.2 Trip & Expense Data
- Trip details (name, destination, dates, currency settings)
- Expense records (amount, category, description, date, who paid)
- Custom expense categories and freeform tags/labels you create
- Trip member information (names, roles, permissions)
- Trip folders and organizational preferences
- Recurring expense schedules
- Expense templates you save for reuse
- Comments and discussions on expenses
- Settlement and debt records between members
- Change history (audit log) of expense modifications
2.3 Receipt Images
- Photos of receipts you upload for expense tracking
- Images are compressed before upload (resized to a maximum of 1600px wide and re-encoded as JPEG at about 50% quality)
- Stored securely in our cloud storage
- Images shared via the iOS Share Extension from other apps (e.g., WhatsApp, email) are processed in the same manner
2.4 Usage Analytics
- Session duration and pages visited (screen names only)
- Action counts (e.g., number of expenses added)
- Usage analytics are stored on our own Supabase backend and linked to your account; they contain no expense content and are never shared with any third-party analytics provider
- You can opt out of analytics tracking in Settings
2.5 Device & Diagnostic Data
- Push notification token — a device identifier used to deliver push notifications (stored on our server, linked to your account)
- Crash reports and diagnostics — sent to Sentry for stability improvements. These may include device model, OS version, and stack traces. No personal expense data is included.
2.6 On-Device Data (Not Sent to Our Servers)
The following data is processed or stored only on your device and is never transmitted to our servers:
- Biometric data (Face ID / Touch ID) — used solely for local app unlock via iOS system APIs. We never access, store, or transmit biometric data.
- Location data — used only to auto-detect your country and suggest a local currency. Location is processed on-device via reverse geocoding and is not stored or sent to our servers. You will be asked for permission before any location access.
- Contacts — accessed only when you choose to invite friends to a trip. Contact data is used on-device to compose an invitation message and is never uploaded or stored by us.
- Calendar — accessed only when you explicitly choose to add trip dates to your device calendar. Calendar data is never read or uploaded by us.
- Spotlight index — trip and expense data is indexed locally on your device for iOS Spotlight Search. This data stays on-device.
- Widget data — budget summaries and last-expense info are shared with the Xpensy home screen widget via App Groups (on-device only).
- Handoff / Continuity data — activity state (which screen you are viewing) is shared between your devices via Apple's Handoff framework for seamless multitasking.
2.7 iCloud Backup
If enabled, your app preferences (theme, accent color, app language, AI language, biometric-lock preference, selected app icon, and custom categories) are backed up to your personal iCloud account via Apple's iCloud Key-Value Storage. This data is encrypted by Apple and governed by Apple's privacy policy. We do not have access to your iCloud data.
2.8 Purchase Data
If you make an in-app purchase, the transaction is processed by Apple's App Store via StoreKit (using the expo-iap library). Available purchases include one-time per-trip and group unlocks as well as Monthly, Yearly, and Lifetime plans. Each purchase is verified by our own Supabase Edge Functions against Apple's App Store Server API, and we store only the resulting entitlement and subscription status, linked to your account. We never have access to your payment method or billing details, and no third-party purchase-management provider is involved.
3. How We Use Your Information
- Core functionality — tracking and splitting trip expenses among group members
- AI receipt parsing — receipt images are sent to Google Gemini API to extract expense data (amount, category, description). A consent dialog is shown before any image is sent. Images are processed in real-time and not stored by the AI provider.
- Authentication — verifying your identity via email/password, Apple Sign-In, or Google OAuth
- Push notifications — sending you alerts about new expenses, trip invitations, and budget warnings (configurable per notification type in Settings)
- Background sync — syncing pending offline data, refreshing exchange rates, and checking budget alerts when the app is in the background
- App improvement — usage analytics (linked to your account; you can opt out in Settings) and aggregate crash reports help us improve the user experience
4. Data Storage & Security
- All data is stored on Supabase (PostgreSQL database hosted on AWS, EU region)
- All network communication uses HTTPS/TLS encryption
- Authentication credentials are stored in the iOS Keychain (hardware-encrypted)
- Local cache data is encrypted using MMKV with encryption
- Passwords are hashed before any local storage
- App Groups are used for secure on-device data sharing between the main app, widgets, and the Share Extension
5. Data Sharing
We do not sell, rent, or trade your personal data. Your data may be shared in these limited cases:
- Trip members — other members of your trips can see shared expense data, comments, and settlement information
- Google Gemini API — receipt images are sent for AI processing (only with your consent; not stored by Google)
- Supabase — our database and authentication provider
- Sentry — crash reports and diagnostics for app stability (Sentry Privacy Policy)
- Apple App Store — in-app purchase and subscription processing (Apple Privacy Policy)
- Legal requirements — if required by law or legal process
6. Data Retention
- Your data is retained as long as your account is active
- Offline cache expires after 7 days
- Audit log entries (change history) are retained for the lifetime of the associated trip
- Crash reports are retained by Sentry for 90 days
- Usage analytics sessions are retained for product improvement purposes
7. Account Deletion
You can delete your account at any time from Settings → Delete Account. This will:
- Permanently delete your profile and personal data
- Delete all expenses you created
- Remove you from all trips
- Delete your authentication record
- Remove your push notification token
- Clear all locally cached data, Spotlight index, widget data, and iCloud backup
Account deletion is irreversible. If you are a trip admin, you will be prompted to transfer admin rights before deletion.
8. Children's Privacy
Xpensy is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal data, please contact us.
9. Third-Party Services
- Supabase — database, authentication, and file storage (supabase.com/privacy)
- Google Gemini API — AI-powered receipt parsing (Google Privacy Policy)
- Apple Sign-In — authentication (Apple Privacy Policy)
- Google OAuth — authentication (Google Privacy Policy)
- Expo — over-the-air updates (expo.dev/privacy)
- Sentry — crash reporting and diagnostics (sentry.io/privacy)
- Apple App Store / StoreKit — in-app purchase and subscription processing (Apple Privacy Policy)
- Apple iCloud — settings backup via iCloud Key-Value Storage (Apple Privacy Policy)
- Apple MapKit — map display for trip locations (processed on-device; Apple Privacy Policy)
10. Your Rights
You have the right to:
- Access your personal data (visible in the app)
- Correct inaccurate data (edit your profile in Settings)
- Delete your account and all associated data
- Opt out of analytics tracking (Settings → toggle)
- Revoke AI receipt processing consent at any time in Settings
- Disable push notifications (Settings → Notifications, or iOS Settings)
- Revoke location, contacts, calendar, or camera permissions at any time via iOS Settings
- Export your data (contact us)
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance of the updated policy.
12. Cookies & Local Storage (Website)
This website (xpensy.erezults.com) does not use cookies, tracking pixels, or any third-party analytics or advertising scripts. It uses your browser's local storage only, to remember your language preference (Hebrew/English) and your accessibility-widget preferences (text size, contrast, motion), so they persist between visits. This data stays on your device, is never transmitted to our servers, and is not used for tracking.
13. Contact Us
If you have any questions about this Privacy Policy, contact us at:
- Email: xpensy.support@erezults.com
- Website: xpensy.erezults.com