Privacy Policy

Last updated: 19 October 2026

Exp Planner is a personal budgeting app. To work, it has to know about your money: your accounts, your plans and your spending. This policy explains, in plain words, what we keep, why, where, and what you can do about it.

It covers the Exp Planner web app, the Exp Planner Android app and this website. “We” means the operator named above, who is responsible for your data (the controller, in the words of the GDPR).

The short version

• Your data is stored in the European Union, and only your account can read it.
• We don’t show ads, we don’t sell your data, and we don’t share it with advertisers.
• We never ask for your bank login. You import statements yourself.
• Optional features that read more (notifications, Google Wallet payments, the Apple Pay shortcut) are off until you turn them on, and you can turn them off at any time.
• You can export everything or delete your account yourself, in Settings → Data & privacy.

What we store, and why

Your account

• Your email address, to sign you in with a one-time code and to tell you about important changes to the service.
• Your name, if you give it, to address you in the app.
• If you sign in with Google: the name, email address and profile picture link that Google shares with us.
• Sign-in sessions: the sign-in service records each session (time, device type and IP address), so you can see where you’re signed in and sign out elsewhere (Settings → Security).

Your budget

Everything you put into the app, so the app can show it back to you on any of your devices and do its sums: accounts and balances, categories, budgets, bills and their payments, funds, taxes, transactions (amounts, dates, payees, descriptions, notes, tags, splits), rules and your settings (currency, formats, the start of your month).

Bank statements are read in your browser or on your phone. The file itself isn’t uploaded: only the rows you choose to import are saved, as transactions, together with a fingerprint of each row so the same row isn’t imported twice.

Receipts you attach (photos or PDFs) are kept in private storage that only your account can reach.

Notifications (optional)

If you turn on notifications on a device, we store what’s needed to reach it: the address and keys your browser’s push service gives us (on Android, the Firebase Cloud Messaging token), a short description of the device, and your choices (which reminders, how many days before, whether amounts may appear). We also note which reminders were sent, so each one is sent only once.

Purchases written down for you (optional)

• Apple Pay shortcut (iPhone): when you set up the Shortcut, it sends us the amount, the merchant and the card name of each Apple Pay purchase. We add it to your transactions to review. Your Shortcut token is stored only as a one-way hash plus its last four characters.
• Google Wallet payments (Android app): if you turn this on and give the app notification access, the app reads only Google Wallet’s notifications after a payment. It ignores every other app’s notifications and doesn’t read or keep them. For each Wallet notification it sends us the notification’s title and text (the merchant, amount and card), the time, and the notification’s own identifier, so the same payment isn’t added twice. The device’s token is kept in the phone’s encrypted storage.

Guide feedback on this website

If you answer “Was this helpful?” on a guide, we count one anonymous answer: the page and yes or no. Nothing about you is stored with it.

Visits to this website

This website counts visits with Cloudflare Web Analytics, which uses no cookies and doesn’t identify you: it records which pages are viewed, the referring site, the browser and the country, as totals. It isn’t used in the app.

Technical data

Like every website, our hosting providers receive your IP address and basic request details (browser, time, page) when you use the app or this site. They use them to deliver the pages and protect the service from abuse, and keep them only briefly.

What stays on your device

Some things never leave your phone or computer:

• the offline copy of the screens you’ve opened (kept for your account only, and cleared when you sign out);
• actions waiting to be sent while you’re offline;
• device settings such as the theme, density and App lock;
• App lock: your fingerprint or face is checked by your phone’s operating system. We never see or receive it;
• the numbers shown in the Android widget;
• the list of the last Google Wallet payments shown in Settings, and purchases waiting to be sent.

We don’t use cookies for tracking. The app keeps your sign-in session in your browser’s storage so you stay signed in. This website stores one cookie, lang, only if you pick a language with the switcher, to open the site in that language next time.

Why we’re allowed to (legal bases)

• To provide the service you signed up for (performance of a contract): your account, your budget data, receipts, sign-in.
• Your consent, which you give by turning a feature on and can withdraw by turning it off: notifications, Google Wallet payments, the Apple Pay shortcut.
• Our legitimate interest in keeping the service secure and working: request logs, limits against abuse, records that stop duplicates.

Who helps us run Exp Planner

We use a few providers to run the service. They process data only on our instructions and only to provide their part:

Some of these providers may process data outside the EU. Where they do, they rely on safeguards required by EU law, such as the European Commission’s Standard Contractual Clauses.

We don’t share your data with anyone else, unless the law requires us to.

How long we keep it

• Your account and budget data: for as long as you have an account.
• When you delete your account, your data and receipt files are deleted from our database and storage straight away. Backups kept by our database provider are overwritten within a limited time.
• Delete all data (without deleting the account) removes your budget data in the same way.
• Notification devices: until you turn notifications off, sign out, or the push service reports the device as gone.
• Request logs at our hosting providers: a short time, under their own policies.

Your rights

Under the GDPR and similar laws, you can:

• get a copy of your data: Settings → Data & privacy → Export (JSON for everything, CSV for transactions);
• correct it: everything is editable in the app;
• delete it: Settings → Data & privacy → Delete all data, or Delete account;
• take it elsewhere: the export is in open formats;
• withdraw consent for an optional feature by turning it off;
• object to processing based on legitimate interest, and ask us about anything in this policy;
• complain to the data protection authority in your country.

For anything you can’t do in the app, write to us at the address above. We’ll answer within a month.

Security

All traffic is encrypted (HTTPS). In the database, every row of your data is tied to your account, and the database itself refuses access to anyone else’s. Tokens are stored as one-way hashes. Deleting your account requires a recent sign-in. You can add App lock on Android.

Children

Exp Planner isn’t meant for children under 16, and we don’t knowingly keep data about them.

Changes to this policy

When we change this policy, we update the date at the top. If a change matters, we’ll tell you in the app or by email before it applies.

Contact

Questions, requests or complaints about privacy: write to us at the address above.