Everything you enter is written to a SQLite database in the app's private storage on your device: transactions, accounts, categories, budgets, debts and repeating entries, reminder settings, receipt photos, and your appearance preferences.
None of it is transmitted to the Developer or to any third party. There is no user account, no sign-in, and no server operated by the Developer.
Does not collect analytics, usage statistics, or crash telemetry
Does not show advertising and contains no advertising SDK
Does not track you across apps or websites, and uses no advertising identifier
Does not read your SMS messages or notifications
Does not read your contacts, location, call log, or calendar
Does not browse your photo gallery (see section 4)
Nothing granted here sends data anywhere.
Camera — Only to photograph a receipt when you tap the camera button. Photos are saved in the app's private storage and never uploaded.
Notifications — To show reminders for bills, debts, and repeating entries, generated and delivered on your device.
Alarms & reminders — To deliver a reminder at the chosen time. If declined, reminders still work but may arrive late.
Run at startup — To restore pending reminders after a reboot.
Vibration — To vibrate with a reminder.
Biometrics & fingerprint — To unlock the app via App Lock using the fingerprint/face already registered on your device (see section 6).
The app requests no storage or media permission — it uses Android's own picker/document chooser, which hands back only the items you tap.
When you attach a receipt from your gallery, the app opens the Android photo picker, which returns only the images you select — the app cannot see the rest of your gallery.
When you export a CSV, PDF, or Excel file, or save a backup, the app writes to the location you choose via the system file chooser. Once a file leaves the app, its handling is governed by whichever service you used, not this policy.
Android's built-in backup service (on by default on most phones) may copy the app's data — including your ledger database — to your own Google Drive account, and restore it on a new device. This is handled entirely by Android/Google; the Developer has no access and cannot read those backups.
You can turn it off in device settings, usually under System → Backup. Doing so means a new phone starts with an empty ledger unless you restore it yourself from the app's own backup file.
If App Lock is switched on, your PIN is never stored as digits — the app stores a salted SHA-256 hash used only to check the PIN you type, which cannot be reversed.
Fingerprint and face unlock are handled entirely by Android's own biometric system. The app only ever receives a yes-or-no answer; your biometric data never reaches the app and never leaves your device.
If you forget your PIN, there is no reset link and no way for the Developer to recover it, because nothing about it exists outside your phone.
Expense Book is free to download. A one-time in-app purchase unlocks the Pro features.
The purchase is processed by Google Play Billing. Your payment details go to Google and are never seen by the app or the Developer — the app receives only a yes-or-no answer about entitlement, stored on your device so Pro works offline.
Google's handling of your purchase is covered by the Google Privacy Policy. Refunds are handled by Google Play under its own refund policy.
No analytics, advertising, or tracking services are integrated. The only third-party services involved are Google's own:
Google Play Billing — to sell and restore the Pro upgrade (section 7)
Android Backup — to back up and restore app data under your Google account (section 5)
The app can also open your browser (Play Store listing or this policy) or your mail app (to contact support). These hand you over to apps you already have; no data is sent with them.
Your data stays on your device until you remove it. Because the Developer holds nothing, there is no deletion request to make and no account to close.
You can clear your data at any time:
In the app, use Delete & Reset to erase entries or reset the whole ledger
Uninstalling the app removes its database and stored receipts
If Android backup is on, also delete the app's backup in your Google account, or the data may return when you restore a device
Your data sits in the app's private storage, which other apps cannot read on a normal, non-rooted device. Because it is held on your phone rather than a server, its safety depends on your device — use a screen lock, keep device encryption on, and switch on App Lock if the ledger is sensitive.
No method of storage is perfectly secure, and the Developer cannot guarantee data on a lost, rooted, or compromised device.
The app is not directed at children under 3, and the Developer does not knowingly collect personal information from them. Since the app collects nothing at all, no such information can reach the Developer.
Privacy laws including the GDPR (EU/UK) and CCPA (California) give you rights to access, correct, export, and delete personal data held about you. The Developer holds no personal data about you, so there is nothing to disclose, correct, or erase on request.
You exercise equivalent control directly in the app: your data is already in your hands, section 4 lets you export it, and section 9 lets you delete it. The Developer does not sell or share personal information, because none is collected.
This policy may be updated when the app changes. The effective date at the top shows when it was last revised, and the current version is always at this address. Material changes will be noted in the app's release notes.
Questions about this policy, or about the app: supportexpensebook@gmail.com
This address must match the contact email on the Play Store listing and the one shown in the app's Help screen.
Last Updated: September 9, 2026
Terms of Use
By installing or using Expense Book you agree to these terms. If you do not agree, uninstall the app. Your purchase through Google Play is additionally governed by the Google Play Terms of Service.
The Developer grants you a personal, non-exclusive, non-transferable, revocable licence to use the app on devices you own or control, for your own personal or business record-keeping.
You may not resell, redistribute, or sublicense the app; reverse-engineer or decompile it except where the law expressly permits; remove its branding; or attempt to unlock paid features other than by purchasing them.
Pro is a one-time purchase, not a subscription. There is no recurring charge and nothing to cancel.
The price shown in the app is the price Google Play charges in your country and currency
The upgrade is tied to the Google account that bought it, and restores on a new device or reinstall through the same account using Restore purchase
Refunds are handled by Google Play under Google's refund policy — the Developer cannot issue or reverse a payment
Which features are Pro may change as the app develops, but anything already paid for stays unlocked
The free version caps some features by count rather than switching them off. If you were already over a cap before it existed, your existing items keep working — the cap applies only to adding more.
The app stores your ledger on your device, and the Developer keeps no copy — it cannot be recovered by the Developer if lost.
You are responsible for keeping your own backups using the app's backup and export features, and for keeping your PIN safe. Losing your device, uninstalling the app, clearing its data, or forgetting your PIN may mean losing your ledger permanently.
Expense Book is a record-keeping tool. Its totals, budgets, forecasts, and charts are arithmetic performed on the figures you entered, and are not financial, tax, accounting, investment, or legal advice.
You are responsible for the accuracy of what you enter and for checking any figure before relying on it, including for tax or accounting purposes. Consult a qualified professional for advice on your finances.
You agree not to use the app for any unlawful purpose, and not to interfere with its operation or its security.
The app is provided as an ongoing but not guaranteed service. The Developer may add, change, or remove features, and may stop publishing updates. Features may also stop working after an operating-system change outside the Developer's control.
The app works offline by design; a network is needed only to buy or restore Pro.
The app is provided "as is" and "as available," without warranties of any kind, whether express or implied, including fitness for a particular purpose and uninterrupted or error-free operation. Some jurisdictions do not allow the exclusion of certain warranties, so parts of this section may not apply to you.
To the fullest extent the law allows, the Developer is not liable for any indirect, incidental, or consequential loss arising from your use of the app, including lost data, lost profits, or decisions made on the basis of figures shown in it.
Where liability cannot be excluded, it is limited to the amount you paid for the app in the twelve months before the claim. Nothing here limits liability that cannot lawfully be limited.
Your licence ends when you uninstall the app, or if you materially breach these terms. Sections 5, 6, 9, and 10 survive.
Questions about these terms: supportexpensebook@gmail.com