Skip to content

PRIVACY_POLICY.md

Latest commit

 

History

History
198 lines (128 loc) · 4.53 KB

PRIVACY_POLICY.md

File metadata and controls

198 lines (128 loc) · 4.53 KB
Raw

Privacy Policy

Last updated: February 2025

1. Introduction

Welcome to Expensify ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our expense tracking application.

2. Information We Collect

2.1 Personal Information

  • Account information (email address, name)
  • Financial information (expense records, income data, budgets)
  • Usage data (login times, feature usage)

2.2 Cookie Information

We use different types of cookies and similar tracking technologies:

Essential Cookies (Always Active)

  • Authentication and security
  • Basic application functionality
  • Session management

Analytics Cookies (Optional)

  • Usage patterns and statistics
  • Performance monitoring
  • Feature optimization
  • Page views and navigation paths

Social Features Cookies (Optional)

  • Social media integration
  • Sharing capabilities
  • Comments and interactions

Advertising Cookies (Optional)

  • Personalized advertisements
  • Marketing effectiveness
  • Campaign tracking

3. How We Use Your Information

3.1 Essential Operations

  • Providing expense tracking services
  • Managing your account
  • Processing financial data
  • Ensuring security
  • Responding to your requests

3.2 Analytics (With Consent)

  • Improving our services
  • Analyzing usage patterns
  • Enhancing user experience
  • Debugging and optimization

3.3 Social Features (With Consent)

  • Enabling social sharing
  • Managing comments and interactions
  • Facilitating community features

3.4 Advertising (With Consent)

  • Displaying relevant advertisements
  • Measuring marketing effectiveness
  • Personalizing promotional content

4. Your Data Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have:

  • Right to access your data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision-making

5. Cookie Management

You can manage your cookie preferences through:

  • Our cookie consent manager
  • Your browser settings
  • In-app privacy controls

Your choices will be respected and stored both in cookies and our secure database to ensure consistency across devices.

6. Data Security

We implement appropriate security measures:

  • Encryption of sensitive data
  • Regular security assessments
  • Access controls
  • Secure data storage
  • Regular backups

7. Data Retention

We retain your data for:

  • Active accounts: As long as necessary for service provision
  • Deleted accounts: Up to 30 days after deletion
  • Analytics data: 24 months (if consent given)
  • Financial records: As required by law

8. Third-Party Services

We may share data with:

  • Payment processors
  • Analytics providers
  • Cloud storage services
  • Marketing services (with consent)

All third-party providers are GDPR-compliant and bound by data processing agreements.

9. International Data Transfers

If we transfer your data outside the EEA, we ensure:

  • Adequate safeguards
  • Standard contractual clauses
  • Privacy Shield compliance (where applicable)

10. Children's Privacy

Our service is not intended for users under 16. We do not knowingly collect data from children.

11. Changes to Privacy Policy

We may update this policy periodically. We will notify you of significant changes via:

  • Email
  • In-app notifications
  • Website announcements

12. Contact Information

For privacy-related inquiries:

13. Legal Basis for Processing

We process your data based on:

  • Contract performance (essential services)
  • Legal obligations (financial records)
  • Legitimate interests (service improvement)
  • Consent (analytics, social, advertising)

14. Complaint Resolution

You have the right to:

  • Contact us directly
  • Lodge a complaint with a supervisory authority
  • Seek judicial remedy

15. Automated Decision Making

We use automated processing for:

  • Fraud detection
  • Budget recommendations
  • Spending analysis

You can request human intervention for any automated decisions.

16. Data Minimization

We collect only necessary data for:

  • Service provision
  • Legal compliance
  • Authorized processing

17. Consent Management

You can:

  • Give or withdraw consent at any time
  • Request consent history
  • Update preferences through our cookie manager

Your choices will be honored across all platforms and devices.