Privacy Policy

01 Privacy Policy Summary

Welcome to Expense Manager, developed and distributed by Systematic Finance ("we," "our," or "us"). This Privacy Policy governs your use of our mobile application across Android devices and our web synchronization portals.

Expense Manager offers both an offline Guest Mode (where all data resides only within your device's sandboxed local storage) and an Authenticated Cloud Mode (where data is synchronized via Google Firebase Cloud Firestore to give you real-time access across authorized devices).

02 Information We Collect

Depending on how you use Expense Manager, we collect and process the following categories of data:

A. Account and Profile Identification Data

• Email Address and Full Name: Collected when you create an account via Email/Password or authenticate through Google Sign-In. Used strictly for user identification, authentication tokens, and account recovery.
• Profile Avatar URL: If you sign in via Google Sign-In, we store the public avatar URL associated with your Google Account to personalize your in-app experience.
• Unique User Identifier (UID): An internally assigned pseudonymous cryptographic identifier generated by Firebase Authentication.

B. Financial and Budgeting Data

• Income and Expense Transactions: Amounts, transaction dates, custom categories (e.g., Housing, Food, Transportation, Shopping, Healthcare), payment method notes, and descriptions that you voluntarily log.
• Monthly and Category Budgets: Spending limits and allocation targets configured by you to track financial progress.
• Currency Preferences: Selected currency symbol and currency code (e.g., INR ₹, USD $, EUR €, GBP £).

C. Household Service & Recurring Tracker Records

Expense Manager includes specialized ledger utilities designed for everyday household accounting:

• Daily Milk Ledger: Daily quantity delivered, price per liter/packet, vendor identification name, and monthly milk settlement logs.
• Newspaper Subscription Tracker: Daily delivery status, subscription rates, vendor name, and monthly billing totals.
• Domestic House Worker / Maid Ledger: Worker names, monthly salary allotments, daily attendance markings (Present/Absent/Half-day), advance cash disbursements, and payment logs.

D. Device & Technical Diagnostics

• Device OS Version & Hardware Model: Processed automatically by Firebase services to optimize rendering and detect compatibility issues across Android devices.
• Network Connection State: Used to switch dynamically between offline local cache mode and live Cloud Firestore sync.

03 Biometric Authentication & App Lock

All biometric authentication operations occur completely within your physical device's hardware-isolated security module (such as ARM TrustZone, Titan M, or the Android Keystore Secure Element). The app only receives a cryptographic boolean result (success or failure) confirming whether the device's authorized owner unlocked the screen.

04 How We Use Your Information

We process your data strictly for legitimate operational purposes under the following legal bases:

1. Providing Core Functionality: Calculating your total monthly expenditure, tracking budget consumption percentages, rendering statistical breakdown charts, and calculating domestic vendor balances.
2. Multi-Device Cloud Synchronization: Storing your entries securely in Google Cloud Firestore so that your data is safe and synchronized whenever you sign into your account.
3. Authentication & Security: Verifying your identity, preventing unauthorized access to your financial records, and protecting our cloud backend against abuse.
4. Offline Data Persistence: Caching your records locally via Android Encrypted / Secure Storage so that the app remains fully functional without an active internet connection.

05 Third-Party Service Providers

To maintain reliable cloud infrastructure, authentication, and app distribution, we partner with industry-leading cloud service providers. Each provider is governed by their independent security and privacy standards:

06 Google Play Store Data Safety Matrix

In full accordance with Google Play's User Data Policy, the table below provides our exact responses for the Google Play Console Data Safety Questionnaire:

07 User Control, Account & Data Deletion

In accordance with Google Play's mandatory Account Deletion Policy, we provide two straightforward, permanent methods for users to delete their account and all associated personal and financial data:

What Data Is Deleted Upon Request?

• Your authentication account and profile credentials in Firebase Auth.
• All income transactions, expense records, and custom categories in Cloud Firestore.
• All monthly budget figures, thresholds, and financial histories.
• All daily milk ledger records, newspaper delivery logs, and worker management/salary entries.
• All local cache data and stored preferences.

Data Retention Window

We retain your information only as long as you maintain an active account with Expense Manager. When you delete your account, your data is permanently removed immediately. Backups are rotated out and destroyed within a maximum of 30 days.

08 Children's Privacy (COPPA & GDPR-K)

Expense Manager is designed for general household budgeting and personal expense management by individuals capable of managing financial accounts. The application is not directed to children under the age of 13 (or under 16 in certain European jurisdictions).

We do not knowingly collect, request, or maintain personally identifiable information from children under 13. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us immediately at pansoftech@gmail.com. We will promptly verify and permanently delete such records from our systems.

09 Security Standards & Safeguards

We implement stringent technical and organizational security measures to protect your sensitive financial records:

• Cryptographic Password Salting: Email/Password credentials are protected using salted hashing algorithms (v2$salt$sha256) to prevent dictionary and rainbow-table compromises.
• Secure Local Storage: Sensitive device tokens are stored in Android Keystore / EncryptedSharedPreferences via Flutter Secure Storage.
• Firestore Security Rules: All Cloud Firestore collections are protected with strict, user-scoped security rules ensuring that only authenticated users can read or write their own documents.
• HTTPS / TLS 1.3: All communications between the mobile app, web hosting, and Firebase backend are encrypted using TLS 1.3.

10 Contact Us & Grievance Redressal

If you have any questions, feedback, privacy concerns, or data protection requests regarding this Privacy Policy or our practices, please contact our dedicated Data Protection and Grievance Officer: