Myexpense
Sign inGet started free

Last updated: June 2026

Privacy Policy

1. Introduction

Myexpense ("we", "us", or "our") operates the website myexpense.org and provides a free personal finance tracking service (the "Service"). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have over it. By creating an account or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information we collect

Information you provide directly

  • Account information: your name and email address when you register
  • Authentication credentials: password (stored as a one-way hash; we never see your plain-text password) or Google OAuth token
  • Financial data: expense records, income entries, budget limits, bill amounts, categories, notes, and any other data you manually enter into the Service
  • Communications: messages you send us via the contact form or email

Information collected automatically

  • Usage data: pages visited, features used, actions taken within the platform, and session duration
  • Device and browser data: browser type, operating system, screen resolution, and language preference
  • IP address: used for security purposes and broad geographic analytics (country-level only)
  • Cookies: a single secure HTTP-only session cookie to maintain your logged-in state
  • Analytics: we use Google Analytics (gtag.js) to understand aggregate usage patterns. Google Analytics collects anonymised data including page views, session duration, and referral sources. No personal financial data is sent to Google Analytics.

Information we do NOT collect

  • Bank account numbers, credit card numbers, or payment credentials
  • Government-issued identification numbers
  • Biometric data
  • Location data beyond country-level IP inference

3. How we use your information

  • To create and maintain your account
  • To provide, operate, and improve the Service
  • To send transactional emails: account verification, password reset, and bill due-date reminders (where enabled)
  • To send optional product update or announcement emails (you may unsubscribe at any time)
  • To detect, investigate, and prevent fraudulent or abusive activity
  • To analyse aggregate, anonymised usage patterns to improve product features
  • To comply with applicable legal obligations
  • To respond to your support requests or enquiries

4. Data storage and security

Your data is stored on MongoDB Atlas infrastructure. We apply the following security measures:

• Encryption in transit: all data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher. • Encryption at rest: your stored data is encrypted using AES-256. • Authentication security: passwords are hashed using industry-standard algorithms (bcrypt). Plain-text passwords are never stored. • Session security: session tokens are stored in secure, HTTP-only cookies to prevent client-side script access. • Access controls: access to production databases is restricted to authorised personnel only.

Despite these measures, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, we will notify affected users within 72 hours of becoming aware of the breach, to the extent required by applicable law.

5. Data loss disclaimer

Myexpense is provided as a free service on a best-effort basis. While we take reasonable measures to protect and maintain your data, we do not guarantee that your data will be retained indefinitely or that it will be free from loss, corruption, or accidental deletion.

WE ARE NOT RESPONSIBLE FOR ANY LOSS OF DATA, WHETHER CAUSED BY TECHNICAL FAILURE, SERVER ERRORS, DATABASE CORRUPTION, ACCIDENTAL DELETION BY YOU OR A THIRD PARTY, CYBERATTACKS, NATURAL DISASTERS, OR ANY OTHER CAUSE BEYOND OUR REASONABLE CONTROL.

You are solely responsible for maintaining independent backups of any financial data you consider important. We strongly recommend you periodically review and record your financial data through the platform's reporting features. We shall not be liable to you or any third party for any damages, losses, or costs arising from data loss or data unavailability under any circumstances.

6. We never sell your data

We do not sell, rent, trade, license, or otherwise transfer your personal or financial data to any third party for commercial purposes — ever. Your financial data exists in our systems solely to provide the Service to you.

7. Third-party services

We use a limited set of third-party services to operate Myexpense. Each processes data only to the extent necessary for its stated purpose:

  • MongoDB Atlas — database hosting and storage. Data may be stored in servers located in India or other regions as configured by Atlas.
  • Google OAuth — optional sign-in via your Google account. If you choose Google sign-in, Google's Privacy Policy governs that authentication flow.
  • Google Analytics (gtag.js) — anonymised, aggregate usage analytics. No personal financial data is transmitted to Google.
  • SMTP / Transactional Email Provider — for sending verification, password-reset, and notification emails.

We do not use advertising networks, data brokers, or behavioural tracking services.

8. Cookies and local storage

We use the following minimal set of cookies and browser storage:

• Session cookie: a single secure, HTTP-only cookie used to keep you logged in. This cookie is essential to the operation of the Service and cannot be disabled without breaking the login functionality. • No advertising cookies: we do not use cookies from advertising networks, social media platforms, or third-party trackers. • No persistent tracking: we do not track you across websites or devices.

You can configure your browser to block or delete cookies, but doing so may prevent you from logging in to the Service.

9. Data retention

We retain your personal data and financial records for as long as your account remains active. If you delete your account:

• All personal data (name, email, password hash) is permanently deleted within 30 days. • All financial data (expenses, income, budgets, bills, categories) is permanently deleted within 30 days. • Aggregate, anonymised analytics data that cannot identify you personally may be retained indefinitely. • We may retain certain information for longer periods where required by applicable law (e.g. for tax, audit, or legal compliance purposes).

10. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data. You can exercise these rights by emailing hello@myexpense.org:

  • Right of access: request a copy of the personal data we hold about you
  • Right to rectification: request correction of inaccurate or incomplete data
  • Right to erasure: request deletion of your account and all associated data
  • Right to data portability: request your data in a machine-readable format
  • Right to restrict processing: request that we limit how we use your data
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: withdraw consent for optional communications at any time

We will respond to verified requests within 30 days. We may need to verify your identity before processing a request.

11. Children's privacy

The Service is not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at hello@myexpense.org and we will delete the information promptly.

12. International data transfers

Myexpense is operated from India. If you access the Service from outside India, your data may be transferred to and processed in India or other countries where our infrastructure providers operate. By using the Service, you consent to such transfers. We take reasonable steps to ensure that transferred data is protected in accordance with this Privacy Policy.

13. Links to third-party websites

The Service may contain links to external websites or services that we do not operate. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of every website you visit.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the 'Last updated' date at the top of this page. For material changes that significantly affect how we process your data, we will notify you via email at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes your acceptance of the updated policy.

15. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: hello@myexpense.org

Website: myexpense.org/contact

We aim to respond within 2 business days.