Privacy Policy

Effective October 12, 2026

Daftar ("we", "us") provides expense-tracking software for businesses and individuals. This page explains what we collect, why, and how you can have it removed.

What we collect

• Account information: your name, email address, password (stored as an irreversible hash, never in plain text), phone number, job title and department if you provide them, and your preferred language.
• Company information (company accounts only): company name, industry, and currency.
• Financial records you create: expense titles, amounts, dates, categories, vendors, payment methods, notes, and any tags or free-text location you add.
• Receipt files: photos or documents you attach to an expense.
• Device and usage data: a push-notification token if you enable notifications, the type of device/browser you sign in from, IP address, and sign-in timestamps — used to secure your account and show you which devices are currently signed in.
• Subscription information (company accounts): which plan your company is on, its renewal and expiry dates, and the identifier of the store purchase. We do not receive or store your card or payment details — payment is handled entirely by Apple or Google.
• Log data: basic activity logs (who did what, when) within your own company account, for audit and support purposes.

What we don't do

We do not sell your data. We do not show ads or use advertising trackers. We do not access your device's contacts, precise location, microphone, or SMS. Camera and photo-library access is used only when you choose to attach a receipt to an expense.

Who we share it with

We use a small number of service providers strictly to run the app:

• Our hosting provider's mail server: sends account emails from contact@expenseapp.site (sign-up verification codes, password resets, account-deletion confirmations). These emails do not contain your expense data.
• Expo: delivers push notifications to your device using your device's push token. It does not receive your expense data.
• Apple and Google: process subscription payments made through the App Store and Google Play, under their own privacy policies.
• RevenueCat: manages subscription purchases on our behalf. It receives an identifier for your company (not your name or email) and the purchase details from the store, and tells us which plan is active. It does not receive your expense data.
• Our hosting provider: stores the application and database that make up the service.

None of these providers may use your information for their own purposes.

Company accounts and shared data

If you're a member of a company account, expenses you submit are visible to the people your company has given the appropriate role to (managers, admins, or the owner) — that's the core purpose of the app. Personal-scope expenses on a company account are visible only to you.

How long we keep your data

We keep your account data for as long as your account is active. If you delete your account (see below) and you are the sole owner of your account, everything — your profile, your company, every expense, and every receipt file — is permanently deleted.

If your account is one of several members on a company account, deleting your account removes your name, email, password, and any device data, but the expense records you filed remain — with your identifying information removed — so the company's own financial and audit records stay accurate for the rest of the team. This is the one case where full deletion isn't performed, and it's done only to preserve the company's own legitimate business records, never to retain anything about you personally.

Deleting your account

You can request deletion at any time, whether or not you're able to sign in: visit expenseapp.site/delete-account, or from inside the app under Account → Delete my account. We'll email a confirmation link to your account's address before anything is removed.

Security

All traffic to Daftar is encrypted (HTTPS). Passwords are hashed, never stored in plain text. Sign-in tokens are stored as hashes and can be revoked instantly from any device. We rate-limit sign-in and account-recovery attempts to reduce abuse.

Children

Daftar is a business and personal finance tool and is not directed at, or intended for use by, children.

Changes to this policy

If this policy changes materially, we'll update the effective date above. Continued use of Daftar after a change means you accept the update.

Contact us

Questions about this policy or your data: contact@expenseapp.site