Last updated: November 2, 2026 · We take your privacy seriously
Your privacy is fundamental to Xpenvo. This app exists to help you manage your finances, not to profit from your data. This Policy explains exactly what we collect, why, and how we protect it. It applies to all users worldwide and covers the Xpenvo web app and installable app. By using Xpenvo you acknowledge the practices described here.
Xpenvo ("Xpenvo", "we", "us" or "our") runs the Xpenvo web app and installable app at https://xpenvo.com. For the personal data described in this Policy, we are the controller, which means we decide how and why it is used. You can contact us at [email protected].
This Policy applies worldwide to everyone who uses Xpenvo, including visitors and people who use our public tools without an account.
We use your information to run Xpenvo, to power Zara, and to keep your account secure. We do not sell your personal data and we do not share it for advertising.
To let Zara answer you, relevant parts of your data are sent to our AI provider, Anthropic. Under its business terms it does not train its models on it by default.
Xpenvo works only from what you enter or import. It does not connect to your bank.
You can access, correct, export and delete your data. See "Your rights and choices".
Account and profile: your name, email address, password (stored only as a hash), country and currency, plan, referral code, and anything you choose to tell us during onboarding or in Settings, such as monthly income, whether your income is fixed or varies, your skills, free hours per week and a monthly savings budget.
Financial information you enter or import: transactions, categories, budgets, savings goals, debts, subscriptions, wallets, invoices, net worth items, shared expenses, and notes you attach to them.
AI and usage information: your messages to Zara and her replies, thumbs-up and thumbs-down feedback, daily usage counts for plan limits, and which features you use.
Receipts, statements and photos: if you scan a receipt or import a statement, the image or file is sent to our AI provider to read it. We do not keep the original image or file.
Goal cover photos: if you choose a photo as a goal cover on Pro, we resize it on your device and store it in private storage that only your account can read. We delete it when you change the cover, delete the goal or delete your account. Please do not upload anything private, such as documents, IDs or cards.
Voice: if you use voice input, your browser's own speech recognition turns your speech into text, and your browser provider may process the audio under its own policy. Xpenvo only receives the text and does not store the audio.
Device and technical information: your IP address, approximate location (country only, taken from our hosting provider), device, browser and operating system type, sign-in times and security events, and error reports.
Payments: payments are handled by Dodo Payments. We receive a customer ID, subscription ID, your plan status, and the email and billing country that Dodo shares with us. We never receive your full card details.
Messages to us: emails and support requests you send us.
What we do not collect: your bank login details, card numbers, precise GPS location, your contacts, or advertising identifiers.
Sensitive details: Xpenvo is not designed to collect special categories of personal data such as health, religion or political views. Please avoid putting them in notes or messages. If you do, we process them only to provide your features.
To provide the Service: creating your account, storing your records, running calculations, reports and forecasts, and sending the emails and notifications you ask for. Legal basis: performing our contract with you.
To power AI features: sending the minimum needed to our AI providers so Zara and other AI features can respond. Legal basis: performing our contract with you, because you asked for the feature.
To keep Xpenvo secure: detecting suspicious sign-ins, preventing fraud, bots and abuse, enforcing plan limits and fixing errors. Legal basis: our legitimate interests in keeping the Service safe, and legal obligations.
To process subscriptions and meet legal duties: billing, refunds, tax and accounting records, and responding to lawful requests. Legal basis: performing our contract, and legal obligations.
To improve the Service: using aggregated or anonymised usage and error data. Legal basis: our legitimate interests in improving a product that works.
To communicate with you: service emails such as password resets and security alerts. Marketing emails are sent only if you opt in. Legal basis: performing our contract and legitimate interests, and your consent for marketing. You can withdraw consent at any time.
To run the referral programme. Legal basis: performing our contract and legitimate interests.
We do not use your data to make automated decisions that have legal or similarly significant effects on you.
Zara is an AI system, not a person.
Anthropic: We use Anthropic's Claude models for Zara, for reading receipts and statements, for insights and reports, and, on Pro, for web search. To answer you, we send your message and a summary of the information needed to respond, such as totals, categories, goals, debts, budgets, recent transactions and the income details you gave us. For web search, search terms generated from your question are sent to the search service used by Anthropic.
OpenAI: voice features. openai.com/policies/privacy-policy
What the provider does with it: Anthropic acts as our processor under its business terms. By default it does not use this data to train its models. It may keep inputs and outputs for a limited period for safety and abuse monitoring, currently up to 30 days, longer only where the law requires it or to deal with misuse.
Your chat history: We store your conversations with Zara in our database so you can read them again. You can delete them in the app, and they are deleted when you delete your account.
Your choice: You can choose not to use AI features. Email us if you want AI processing switched off for your account.
We do not sell personal data and we do not share it for cross-context behavioural advertising. We share it only with the following, and only as needed:
Supabase: database, sign-in and server functions, hosted on Amazon Web Services. supabase.com/privacy
Cloudflare: hosting, content delivery, security and bot protection (including Turnstile at sign-up), and basic cookie-free traffic statistics. cloudflare.com/privacypolicy
Anthropic: AI for Zara and other AI features, including web search. anthropic.com/privacy
OpenAI: voice features. openai.com/policies/privacy-policy
Dodo Payments: our Merchant of Record. It sees your name, email and billing details and acts as an independent controller for payment and tax data. dodopayments.com/privacy
Resend: sends our emails, such as sign-up confirmations, password resets and security alerts. resend.com/legal/privacy-policy
Sentry: error monitoring, which receives limited technical details about errors and an internal user identifier. sentry.io/privacy
Browser push services (Google, Apple, Mozilla): deliver notifications you turn on.
Other people: anyone with a link to a shared expense split can see what is in it.
Advisers, authorities and buyers: professional advisers, regulators, courts or law enforcement where the law requires or to protect rights and safety, and a buyer or successor if the business is sold, with notice to you.
We update this list when our providers change.
We and our providers process data in several countries, including the United States and countries in the European Union, and our team may access data from outside your country. If you are in the UK, the European Economic Area or Switzerland and your data goes to a country without an adequacy decision, we use safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or the provider's certification under the EU-US and UK-US Data Privacy Framework where it has one. You can ask us for a copy of these safeguards at [email protected].
Account and financial data: until you delete your account. After you delete it, we remove it from our live systems within 30 days. Backups are overwritten on a rolling basis and are fully replaced within 90 days.
AI chat history: until you delete it or delete your account.
Goal cover photos: until you change the cover, delete the goal or delete your account.
Usage and security records: while your account is active, and removed with your account.
Error reports: up to 90 days.
Payment and tax records: kept by Dodo Payments and by us for as long as tax and accounting law requires, typically 6 to 7 years.
Support emails: up to 2 years after the issue is resolved.
Account deletion feedback: if you tell us why you are leaving, we keep the reason you choose without your name or email.
Referral records: for as long as needed to pay and audit rewards.
We may keep some data longer where the law requires it, or to deal with a legal claim.
Everyone: you can access and correct your information in the app, delete your account in Settings, and ask us for a free copy of your data at any time by emailing [email protected]. You can also export your data as Excel files from Settings.
If you are in the UK, the EEA or Switzerland: you have the right to access your data, correct it, delete it, restrict or object to our use of it, receive it in a portable format, withdraw consent at any time, and not be subject to solely automated decisions with legal or similar effects. You can complain to us first, and we will acknowledge your complaint within 30 days and keep you informed. You can also complain to the Information Commissioner's Office in the UK or to your local data protection authority.
If you live in California or another US state with a privacy law: you can ask to know what personal information we collect, use and disclose, to access it, correct it, delete it, receive it in a portable format, and appeal our decision. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We will not treat you differently for using your rights. An authorised agent can make a request for you with your written permission.
If you live in Canada, Australia or another country with its own privacy law: you have the rights that law gives you, and we will honour them. Contact us to use them.
How to use your rights: email [email protected]. We may need to confirm it is you. We reply within 30 days (45 days for some US requests, and we will tell you if we need more time). There is no charge unless a request is clearly unfounded or excessive.
Browser privacy signals: we respect Global Privacy Control and Do Not Track signals. We do not sell or share your data for advertising, so there is nothing to opt out of.
Emails and notifications: you can turn push notifications on or off in Settings and in your device, and unsubscribe from marketing emails using the link in them. Service emails, such as security alerts, cannot be turned off while you have an account.
We use only what is strictly necessary to run Xpenvo: your sign-in session, a cached copy of your profile, your preferences (such as your active profile and dismissed tips), and the app's offline cache. Cloudflare may set security cookies and bot-check cookies when you sign up or sign in.
We do not use advertising cookies, analytics cookies or cross-site trackers. We measure basic traffic (page views, countries and device types) with Cloudflare Web Analytics, which does not use cookies and does not follow you across other sites. Because we use only strictly necessary storage, we do not show a cookie banner. If we ever add anything else, we will ask for your consent first.
We protect your data with encryption in transit (HTTPS) and encryption at rest provided by our database host, hashed passwords, row-level access rules that stop one user reading another's data, server-side secrets kept out of the app, and automatic sign-out after 30 minutes of inactivity.
No system is perfectly secure. If a breach affects your personal data, we will notify the relevant authority and affected people as the law requires, for example within 72 hours of becoming aware where UK or EU law applies, and without undue delay where the risk to you is high.
You can help by using a strong, unique password, signing out on shared devices, and telling us at [email protected] if you suspect a problem.
Camera: used only if you choose to scan a receipt. Microphone: used only when you use voice features. Notifications: used only if you turn them on. Each is optional, and you can turn each off in your browser or device settings.
Xpenvo is for people aged 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has an account, email [email protected] and we will delete it.
Shared links: anyone who has a link to a shared expense split can see what is in it.
Public tools: some tools may work without an account. What you submit is processed to produce your result and may be sent to our AI provider. We do not keep uploaded images. Please do not paste account numbers or other personal identifiers.
If you take part in a referral or affiliate programme, we keep your programme identifier, the referral activity linked to it and any payout details you give us. Referral tracking does not use cross-site advertising cookies.
We send service emails that you need to use your account. We send marketing emails only if you have opted in, and you can unsubscribe at any time.
We may update this Policy. We will tell you about important changes by email or in the app at least 14 days before they take effect, and we will update the date at the top. If a change needs your consent, we will ask for it.
Questions, requests and complaints about privacy: [email protected].
If you are not satisfied with our response, you can contact the Information Commissioner's Office in the UK, your local data protection authority in the EU, your state attorney general in the US, or the privacy regulator where you live.
Global Compliance: This Policy is written to comply with GDPR (EU/UK), CCPA/CPRA (California), COPPA (USA), PIPEDA (Canada), Privacy Act 1988 (Australia), Ghana Data Protection Act 2012, NDPA 2023 (Nigeria), POPIA (South Africa), and other applicable data protection laws. To exercise your rights under any of these laws, contact us at [email protected].
