Privacy Policy

Expensync · Last updated 1 November 2026

Expensync is operated by Unplugged Bytes Co. For any question or request about your data, contact [email protected].

What we collect and how

We collect only what you give us directly through the app:

• Account details — your email address, a password (stored hashed, never readable by us), and your business name. We email you a code to verify your address.
• Business records you enter — expenses and income, including amount, date, description, category, payment method and the US state you select; trucks, drivers and financial account labels; clients, including the name, email, phone and address you enter for them; and invoices.
• Receipt images — photos you take with the camera or pick from your photo library, only when you attach one to a transaction.
• Server logs — IP address, timestamp and the endpoint called, recorded automatically when the app contacts our servers.

The app does not collect your device location, and contains no analytics, advertising or tracking software. If you enable Face ID, iOS performs the check on your device and tells the app only whether it succeeded; we never receive biometric data.

How we use it

• To store your records and sync them across your devices, and to produce the reports, CSV exports and invoice PDFs you request — this is how we perform our contract with you.
• To sign you in and keep your account secure, and to diagnose faults and prevent abuse — our legitimate interest in running a reliable, secure service.
• To email you about your account, such as verification codes and essential service notices.
• To confirm whether your subscription is active, so paid features unlock.

We do not use your data for advertising, and we do not use it to train machine-learning models. Providing this information is necessary to use Expensync; without it we cannot give you an account.

Who we share it with

• Apple — processes your subscription purchase and tells us whether it is active. Apple does not give us your payment card or Apple Account details.
• Our hosting provider — stores the data on servers we control, acting only on our instructions.
• Authorities — where we are legally required to disclose, or to establish or defend a legal claim.

Any third party with whom we share your data provides the same or equal protection of that data as stated in this policy and required by the App Store Review Guidelines. We do not sell or rent your personal information.

Where it is stored

Your data is held on servers in the United States and is encrypted in transit. If you use Expensync from outside that region, your data is transferred there; where the law requires it, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

How long we keep it, and how to delete it

We keep your records for as long as your account exists. You can delete your account at any time from Settings inside the app; doing so deletes your account and the records attached to it from our systems, and withdraws your agreement to the processing described here. Copies held in routine encrypted backups are overwritten as those backups age out. We keep only what the law requires us to retain afterwards.

Deleting your account does not cancel your subscription. Manage or cancel that in the App Store, under your Apple Account subscriptions.

Your rights

You can view and correct your records in the app at any time, and export them to CSV. Depending on where you live, you may also have the right to request a copy of your data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Write to [email protected] and we will respond within 30 days.

If you are in the EEA or the UK, you also have the right to complain to your national data protection authority.

Changes

If we change this policy, the date at the top will change with it. We will tell you in the app or by email before any change that materially affects how we handle your data takes effect.