Privacy Policy

Last updated: 30 October 2026

In short: You can use TapXpense completely anonymously. As a guest, your expenses stay on your device — we never upload them, sell your data, show ads, or track you. Cross-device sync happens only if you choose to sign in with Apple or Google. Category suggestions, receipt reading, insights, reports and the Ask chat all run on your iPhone: what you type is never sent to an outside AI service.

This Privacy Policy describes how TapXpense ("we", "our", or "the app") handles information when you use our mobile application. By installing or using TapXpense, you consent to the practices described below.

1. Information We Collect

On-device data. When you record an expense, the app stores the amount, title, category, payment method, account, date, and any optional notes locally on your iPhone using Apple's SwiftData framework. Your name and preferred currency are stored the same way.

Account information. If you sign in with Apple or Google, we receive your name and email address (Apple lets you hide your real email) in order to identify your account and synchronise your data across your devices. If you stay a guest, the app runs entirely on your device — we do not create an account for you, and your expense data is never sent to our servers.

On-device AI. Category suggestions use a built-in word list and, on iPhones with Apple Intelligence, Apple's on-device model. Insights, the financial report, the Ask chat and receipt reading also run on your iPhone. None of this sends what you type or photograph to us or to any AI provider. (Version 1.0 only: when you were signed in and your iPhone couldn't sort an expense itself, the typed phrase alone, with no name or identifier, was sent to OpenRouter to suggest a category. Version 1.0.1 removed this.)

Receipt photos (TapXpense Pro). Photos you attach to an expense, from the camera or your photo library, are stored only on your iPhone. They are not uploaded to us and are not included in backups.

iCloud backup. If you turn on iCloud backup, a copy of your data is saved to your own iCloud Drive, in the app's private folder. Apple stores it under your Apple Account; we cannot see it. If you lock backups with a password, they are encrypted on your iPhone before they are saved.

Face ID lock. If you turn on the app lock, iOS checks your face, fingerprint or passcode. The app only learns whether the check passed; it never sees your biometric data.

Purchases. TapXpense Pro is bought through Apple. Apple handles payment; we never see your card or payment details. The app only learns which Pro option is active on your Apple Account.

Exchange rates. If you log an expense in a currency other than your main one, the app downloads that day's exchange rates from ExchangeRate-API (exchangerate-api.com). The request contains only your main currency code (for example "AUD") — never an expense, amount, name or identifier — and the rates are kept on your device for a day.

Notion (optional). If you choose to connect Notion, the expense details you sync — title, amount, currency, category, date, notes, and account name — are sent to the Notion database you select so they appear in your own workspace. We store an access token for your Notion workspace on our backend so syncing can work; disconnecting Notion in Settings deletes that token. Connecting Notion requires signing in.

In-app feedback board (optional). If you post on the feedback board inside the app, your post, and your email address if you add one, are sent to our Supabase backend. After we review it, your post is shown to other TapXpense users without your name; your email is never shown and is used only to reply to you. Votes and posts are linked to a random board ID made on your iPhone, not to your name or account. Ask us to remove a post at any time.

Website community feedback. Our public feedback board is hosted by UserJot (userjot.com). Anything you submit or vote on there is collected and processed by UserJot under its own privacy policy; we see the content you choose to post. Feedback posts are public, so do not include private financial details or personal information in them.

Diagnostic information. The app does not collect crash reports, analytics events, advertising identifiers, or device fingerprints. We do not integrate with any analytics SDK.

2. How We Use Your Information

We use the information described above only to:

Display your expenses, accounts, and reports inside the app.
Sync your data across the devices on which you sign in with the same account.
Unlock the TapXpense Pro features you bought.
Send your expenses to your own Notion database, if and when you connect Notion.
Review and prioritise the public feedback posted on our UserJot board.

We do not use your data for advertising, profiling, or any form of targeted marketing.

3. How Your Information Is Stored

Where your data lives depends on whether you sign in:

Always — locally on your device, in the app's private storage, encrypted by iOS at rest.
Only if you turn on iCloud backup — in your own iCloud Drive.
Only if you sign in with Apple or Google — a copy is also stored in our Supabase backend (operated by Supabase, Inc.), in a private Postgres database protected by row-level security policies that ensure each user can only access their own rows. Connections are encrypted in transit using TLS 1.2 or higher.

Guests are never stored on our backend — guest data exists only on the device. Because of that, please keep a backup (iCloud backup, or Settings → Export); uninstalling the app permanently removes guest data on the device.

4. Sharing With Third Parties

We do not sell, rent, or share your personal information with advertisers or data brokers. The app interacts with the following third-party services strictly to provide the functionality you have requested:

Supabase, Inc. — cloud storage and authentication when you sign in, and the in-app feedback board for anyone who posts or votes.
Apple Inc. — Sign in with Apple, iCloud backup and in-app purchases, only when you use them.
Google LLC — only when you choose to sign in with Google.
ExchangeRate-API — daily exchange rates, only when you use another currency; the request carries only your main currency code.
Notion Labs, Inc. — only when you choose to connect Notion; the expense details you sync are sent to the Notion database you select.
UserJot — hosts our public feedback board; it processes anything you post there under its own privacy policy.

Each of these providers has its own privacy policy. We encourage you to review them.

5. Data Retention and Deletion

Local data persists on your device until you delete the data or remove the app. For guests, deleting the app permanently removes the data on the device, as there is no server copy. iCloud backups stay in your iCloud Drive until you delete them in the app or in iCloud settings. If you are signed in, your backend data persists until you delete your account. Feedback board posts stay until we remove them, which we do whenever you ask. Disconnecting Notion in Settings deletes the access token we hold for your Notion workspace.

To delete all of your data:

Signed-in users: use Settings → Account → Delete Account inside the app. This immediately and permanently deletes your account, everything synced to our servers (including any Notion connection), and the data on your device. It cannot be undone.
Guests: deleting the app deletes all of your data, except any iCloud backups you chose to keep.
You can also contact us with any deletion request (see Contact below).

6. Children's Privacy

TapXpense is not directed to children under the age of 13, and we do not knowingly collect information from anyone under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

7. Your Rights

Depending on where you live, you may have rights under the GDPR, CCPA, or similar laws — including the right to access, correct, or delete the personal data we hold about you, and the right to withdraw consent at any time. To exercise any of these rights, please contact us using the link below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes, and the current version is always on this page.

9. Contact

If you have any questions about this Privacy Policy or your data, email mahin404error@gmail.com or see our support page.