Privacy Policy

1. Introduction

This Privacy Policy explains how NYL10 Softwares Private Limited ("we," "us," or "our") handles information in connection with the Expnz mobile application ("App"). Expnz is an AI-powered bill scanning and expense tracking application designed with a privacy-first architecture.

By using Expnz, you agree to the practices described in this policy. If you do not agree, please do not use the App.

2. Privacy-First Architecture

Expnz is built on a local-first data model. Unlike traditional expense tracking apps that store your financial data on company servers, Expnz keeps all of your bill data on your device's local storage. We do not operate backend databases that store your personal expense information.

2.1 Data Flow Overview

3. Information We Collect

3.1 Information Stored Locally (Not Collected by Us)

The following data is stored exclusively on your device and is never transmitted to our servers:

• Bill and receipt images
• Extracted merchant names, dates, amounts, and line items
• Expense categories and tags
• Your complete expense history and analytics
• App preferences and settings

3.2 Authentication Information

When you sign in using Google Sign-In or Sign in with Apple, we receive a limited authentication profile through Firebase Authentication. This includes your name, email address, and a unique user identifier. This information is used solely to authenticate your identity and manage your subscription status.

3.3 Location Data

Expnz requests access to your device's location to automatically detect your region and configure the correct currency symbol and date format for bill scanning. This improves the accuracy of AI-powered data extraction.

3.4 Camera and Photo Library Access

Expnz requires access to your device camera and photo library to capture or select receipt images for scanning. These images are processed using Google's Gemini API to extract text (see Section 4). We do not access your camera or photos for any purpose other than bill scanning initiated by you.

3.5 Subscription Information

If you purchase an Expnz Pro subscription, the transaction is processed entirely through the Apple App Store or Google Play Store. We receive a purchase receipt which is verified through our Firebase Cloud Functions to confirm your subscription status. We store only your subscription status, product identifier, and expiration date. We do not receive or store your payment details, credit card numbers, or billing address.

4. AI-Powered Bill Processing

Expnz uses Google's Gemini API to extract text and structured data from receipt images. When you scan a bill:

• Your receipt image is temporarily transmitted to Google's Gemini API for processing.
• Google processes the image and returns extracted text data (merchant name, date, amount, line items) to the App.
• The extracted data is stored locally on your device.
• Google does not permanently store your receipt images for this API usage.

5. Optional Cloud Backup

Expnz offers optional cloud backup to help you preserve your data across devices. This feature backs up your bill data to your own personal cloud storage account:

• iOS users: iCloud Drive (under your Apple ID)
• Android users: Google Drive (under your Google account)

6. Anonymous Analytics (Opt-In Only)

With your explicit consent, Expnz collects a minimal set of anonymous analytics data to help us understand how the App is used across different regions and to improve the experience for all users.

6.1 What We Collect

6.2 What We Never Collect

• Bill photos, receipt images, or scanned documents
• Merchant names, transaction amounts, or line items
• Personal financial data of any kind
• Precise GPS coordinates or movement data
• Device identifiers, IP addresses, or browsing history

6.3 Your Control

Analytics collection is entirely opt-in. You are prompted for consent when you first use the App and can change your preference at any time via Settings → Privacy → Share anonymous usage data. Opting out immediately stops all analytics data collection. Previously collected data can be deleted upon request.

7. Third-Party Services

Expnz integrates with the following third-party services to provide core functionality:

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

8. Your Privacy Rights

8.1 Data Access and Control

Because your bill data is stored locally on your device, you have direct and immediate control over it:

• Access: View all your bill data directly within the App at any time.
• Edit: Modify or correct any bill information.
• Delete: Remove individual bills or clear all data via Settings → Clear All Data.
• Export: Export your bills in JSON, CSV, or ZIP format via Settings → Export Bills.
• Opt-out: Disable analytics at any time via Settings → Privacy.

8.2 Account Deletion

You can delete your account through the App. Upon deletion, your authentication data, subscription records, and any opt-in analytics data stored on our servers are permanently removed within 30 days. Local data on your device can be cleared via the App's settings at any time.

8.3 GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have the following additional rights under the General Data Protection Regulation:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to restrict or object to processing
• Right to lodge a complaint with a supervisory authority

To exercise these rights, contact us at privacy@getexpnz.com.

8.4 CCPA Rights (California Residents)

Under the California Consumer Privacy Act, California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

9. Data Security

We take the security of your data seriously and employ the following measures:

• Local storage: Your primary bill data is stored on-device, protected by your device's built-in security (passcode, biometrics, encryption).
• Encryption in transit: All network communications use industry-standard TLS/SSL encryption.
• Authentication: Firebase Authentication with secure token-based access control.
• Server-side security: Firebase Cloud Functions with authenticated access and input validation for subscription verification and analytics.
• Minimal data exposure: By storing the vast majority of data locally, we significantly reduce the attack surface compared to traditional cloud-based architectures.

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Data Retention

11. Children's Privacy

Expnz is not intended for children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe that a child has provided us with personal data, please contact us immediately at privacy@getexpnz.com, and we will take steps to delete such information.

12. International Data Transfers

Expnz is operated from India. If you access the App from outside India, please be aware that the limited data we do collect (authentication, subscription status, opt-in analytics) may be processed in India or in data centers operated by our third-party service providers (Google/Firebase) in various locations globally. By using the App, you consent to such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. We will notify you of significant changes through in-app notifications and by updating the "Last Updated" date at the top of this page. Your continued use of Expnz after changes are posted constitutes acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

We aim to respond to all privacy-related inquiries within 48 hours on business days.