Privacy Policy

Custom Expenses App (MyExpenses) — version 2.7, last updated 2026-11-11.

This app is a personal income and expense tracker. It is run by one person for themselves and a small number of invited users. There is no company behind it, no advertising, and no selling of data. If you have a question about your data, contact kumarwebinar1219@gmail.com.

1. What data we collect

• Account data: your email address (your login) and the display name you choose.
• Your ledger: the income and expense records you enter — months, amounts, categories, business names, notes, repeating items, starting balance and month colours. This is your data; each user has a separate ledger and cannot see anyone else's.
• Backups: automatic copies of your ledger (up to 60 per user) and any manual or encrypted backups you download.
• Sign-in and admin events: when you sign in or out, failed sign-ins, password changes and admin actions, with the time and a device description (browser/app). No IP address is stored with these events. Sign-in sessions themselves (kept by the login system) do record an IP address and device description, which the administrator can see for their own sessions.

We collect nothing else. There is no analytics, no tracking, and no advertising in the app.

2. Why we collect it

Only to run the app: to let you sign in, to store your ledger and keep it separate from other users' ledgers, to keep backups so your data can be restored, and to keep the admin console working (users, sessions, activity).

3. Where your data is stored

Your data is stored with two service providers, both over encrypted (HTTPS) connections:

• Convex — the database, the sign-in system and backup file storage. This is where your account, ledger and backups live.
• Cloudflare — the website itself (Cloudflare Pages) and, when configured, nightly backup storage (Cloudflare R2). Cloudflare also sees ordinary web-request information (such as IP address and browser) when your browser loads the site, as any web host does.

Nothing else processes your data. The Excel file library (SheetJS) runs entirely in your browser; it does not send your data anywhere. If that library ever fails to load from the site, the browser falls back to loading the same public library file from cdnjs (Cloudflare's public file service) — that request carries no personal data.

4. Subprocessors

The third parties that process your data on our behalf are:

• Convex, Inc. — backend, database, authentication and backup storage.
• Cloudflare, Inc. — website hosting (Pages) and backup storage (R2).

That is the full list. See COMPLIANCE.md in the project for the data processing agreement (DPA) status of each vendor.

5. What we never do with your data

• We do not sell, rent or share your data with anyone for advertising or marketing.
• We do not run analytics or trackers (the analytics tool from the original build, PostHog, is turned off).
• We do not use your data to train AI models. The app has no AI features.
• We do not send your data to any other service.

6. Cookies

The app uses one first-party session cookie (and browser storage) to keep you signed in. There are no tracking or advertising cookies, so there is no cookie banner.

7. Your rights — download and delete

You can download your whole ledger at any time: Settings → Your data → Download backup (plain or encrypted). You can erase everything: Settings → Your data → Erase everything. An administrator can also delete your account, which removes your profile and all of your data. To ask for a copy of your data or for your account to be deleted, email kumarwebinar1219@gmail.com.

8. How long we keep data

• Your ledger is kept until you delete it (Erase everything) or your account is deleted.
• Automatic backups are trimmed to the newest 60 per user; activity and change logs to the newest 2,000 per user.

9. Children

This app is for adults only (18+). It is not directed at children, and we do not knowingly collect data from anyone under 18. See the Terms of Service.

10. Changes to this policy

If this policy changes, the new version is posted here with a new date, and the change is listed in the app's version history (footer → "See what changed"). By continuing to use the app after a change, you accept the new policy.

11. Contact

Questions about this policy or your data: kumarwebinar1219@gmail.com.