Privacy Policy

Introduction

ExpenseGrip operates as a fair, ethical, and transparent financial tracking utility. We are an independent platform built with the singular mission of empowering individuals to understand their financial velocity. This Privacy Policy outlines our unwavering commitment to protecting your personal and financial data. By using ExpenseGrip, you entrust us with your information, and we take that responsibility with the utmost seriousness. We do not engage in opaque data practices, hidden tracking, or any form of user surveillance. Every feature we build, every line of code we write, is designed with your privacy as the foundational principle.

Zero Data-Stealing Intention

ExpenseGrip has zero intention to compromise, harvest, or misuse your personal or financial data. We do not sell, license, or share your information with advertisers, brokers, or any third party. Your financial portfolio details, income records, expense logs, and account identifiers are your property — never ours to monetise.

To ensure the highest level of data security, we implement the following measures:

• Encryption at rest and in transit: All data stored on our servers is encrypted using industry-standard AES-256 encryption. All communications between your browser and our servers are secured via TLS 1.3 protocols.
• Token-based authentication: We use secure, short-lived JWT tokens for session management. No plain-text passwords or sensitive credentials are ever stored on our systems.
• Minimal data collection: We collect only the data necessary to provide the service — investment records, income entries, and account preferences. We do not track your browsing behaviour, mouse movements, or any telemetry unrelated to the core functionality of the platform.
• No third-party analytics: We do not embed Google Analytics, Facebook pixels, or any third-party tracking scripts that would surveil your activity on our platform.

These measures are designed to comply with the data security requirements mandated under Section 43A of the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act), which require reasonable security practices and procedures to protect sensitive personal data from unauthorised access, disclosure, or misuse.

AI-Powered Features & Third-Party Data Processing

ExpenseGrip uses Google's Gemini AI API to power one optional convenience feature — receipt scanning. We believe in being upfront about how your data interacts with this feature, so here is exactly what happens:

• Receipt scanning — when you upload a bill or receipt image, the image is sent to Google's Gemini API to extract expense details (merchant name, amount, date, category). The extracted data is saved to your account; the raw image is not retained by us or by Google after processing.
• No advertising or profiling — we do not sell, share, or use your financial data for advertising, profiling, or any purpose beyond powering the features you explicitly use. Data sent to Gemini is governed by Google's API data usage policies; we recommend reviewing Google's privacy policy for details on how Google handles API data.
• Optional — you are in control — receipt scanning is entirely optional. You can use ExpenseGrip's core functionality (manual expense tracking, calculators, bill splitting, group expenses) without ever using receipt scanning. Choose what works for you.
• Minimal and transient data — only the minimum data required to process your specific request is sent to Gemini. No bulk exports, no continuous streaming, no hidden background processing. Your data footprint stays small.

If you have questions about how your data is processed in these features, please reach out through your account dashboard.

Your Data Rights Under the DPDP Act

In accordance with the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data on ExpenseGrip:

To exercise any of these rights, please contact us through the channels provided in your account dashboard. We will respond to your request within the timeframe stipulated under the DPDP Act and applicable rules.

Fair Play & Prohibited Actions

ExpenseGrip is a community-driven platform built on trust and mutual respect. To maintain the integrity and security of our service, the following actions are strictly prohibited:

• Deploying or executing malicious scripts, bots, or automated scrapers to extract data from the platform without express written authorisation.
• Attempting to interfere with, disrupt, or degrade the availability, performance, or security of our servers, APIs, or infrastructure.
• Making unauthorised or excessive API calls that impose an unreasonable load on our systems or circumvent rate limits.
• Attempting to access another user's account, data, or session without their explicit consent.
• Using the platform for any unlawful, fraudulent, or misleading purpose that violates applicable Indian laws or regulations.

Violation of these terms may result in immediate suspension of access, permanent account termination, and, where applicable, referral to law enforcement authorities under the provisions of the Information Technology Act, 2000 and the Indian Penal Code, 1860.