Privacy Policy

This Privacy Policy explains how Reflect Technology Inc. ("we", "our", "us") handles information in the Expense Tracking app for Android (com.expensetracking.android) and iOS ("App"), and on this website. By using the App you agree to the practices described here.

1 Using the App without an account

An account is optional. Without one, everything you enter — transactions, bills, loans, budgets, ledger entries, categories and savings goals — is stored only on your device. We cannot see it.

Even without an account, the App sends us install and usage statistics (Section 5), and the advertising and analytics services in Sections 8 and 9 may collect data.

2 If you sign in (cloud backup & sync)

You can sign in with your email address — we email you a one-time code; there is no password. When you do, we store:

• Your email address, used to sign you in and to contact you about your account.
• Your synced records — the transactions, bills, loans, budgets, ledger entries (including the names and phone numbers of customers or vendors you add), categories and settings you create in the App — so they can be backed up, restored and kept in sync across your devices.
• Device details: the App's version and build, your platform (Android or iOS) and when your account was last active.
• Push notification tokens for your devices (Section 6).

3 Shared businesses

With Premium, you can share a business with people you invite by email. Everyone in a shared business can see that business's records, depending on the access the owner gives them. The App also keeps an activity history showing who added, changed or deleted each record and when, which the owner (and people they allow) can see.

When you invite someone, we store their email address and send them an invitation (Section 6). Records you add to someone else's business belong to that business and stay with it, even if you leave or delete your account.

4 Contacts, backups and other device access

• Contacts: only when you choose to pick a customer or vendor from your phone's contacts. We only read the contact you pick, and only its name and phone number are saved in the App.
• Google Drive / iCloud backups: backups you save go to your own Google Drive or iCloud account, not to us. On Android the App can only access files it created itself in your Drive.

5 Install and usage statistics

To understand how the App is used and to improve it, the App sends us the following whenever it is opened. This is always collected; the App has no setting to turn it off.

• A random install ID created by the App (not your device's advertising ID).
• Your platform, App version, App language and whether you use Personal or Business mode.
• Your approximate location — country, region and city — worked out from your internet connection. We do not store your IP address and do not collect precise (GPS) location.
• Your time zone, and when the App is opened (including the local hour and weekday).

If you sign in, these statistics are linked to your account. Records of individual App opens are deleted after 400 days.

6 Push notifications and emails

Push notifications (for example, invitations, changes in a shared business, budget alerts and account notices) are delivered through Google Firebase Cloud Messaging. You can turn notifications off in your phone's settings. Bill, loan and daily reminders are scheduled on your phone itself.

Emails are sent through our email provider, Brevo. We send sign-in codes, business invitations, ownership requests and account notices. Our support team may email you about your account, and we may occasionally send news about the App — every news email has an unsubscribe link. We keep a log of emails sent to you.

7 Purchases & subscriptions

Premium is billed entirely by Apple (App Store) or Google (Google Play). We never see your card number, billing address or other payment details. We receive a purchase confirmation from the store so we can verify it and unlock Premium; if you are signed in, it is linked to your account so Premium works on all your devices. See our Terms of Use for billing, renewal and cancellation terms.

8 Advertising

Without Premium, the App shows ads served by Google AdMob, which may use device identifiers and similar technology to show and measure ads. Where the law requires it (for example in the EEA and UK), the App asks for your consent first, and on iOS it asks for App Tracking Transparency permission. Learn more in Google's partner data policy.

You can limit personalised ads on Android in Settings → Google → Ads, and on iOS in Settings → Privacy & Security → Tracking.

9 Analytics and remote settings

The App uses Google Firebase (Analytics, In-App Messaging and Remote Config) to show in-app messages, deliver App settings and measure how the App is used. Firebase collects its own usage data under Google's privacy terms.

10 Where data is stored and how it is protected

Account data is stored on Cloudflare's servers. All data sent between the App and our servers is encrypted in transit (HTTPS). Access to our admin tools is restricted to authorised staff and every action there is logged. You can also protect the App on your phone with a PIN lock.

11 How long we keep data

• Synced records: while your account exists. Data you clear in the App stays recoverable from your account for 30 days, then is deleted.
• Deleted accounts: removed 30 days after deletion (Section 12).
• Usage statistics: individual App opens for 400 days.
• Proof of deletion: a record that the account was deleted, including the email address, is kept as proof.
• Purchase records: kept for accounting and legal reasons, with the email address removed after deletion.

12 Deleting your account

You can delete your account at any time in the App (Settings → Danger Zone → Delete account) or on our account deletion page. Your account closes at once and its data is removed after 30 days. If you change your mind, sign in again within those 30 days to cancel the deletion. Records you added to someone else's shared business stay with that business. Data saved on your own phone stays until you uninstall the App.

13 Who we share data with

We do not sell, trade or rent your personal data. We share data only with:

• Service providers that run the App for us: Cloudflare (servers and storage), Brevo (emails), Google Firebase (push notifications, analytics, in-app messages) and Google AdMob (ads).
• Apple and Google, to process and verify purchases.
• People you share a business with, as described in Section 3.
• Authorities, if required by law or to protect our rights.

14 Children's privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

15 Your rights

You can access, correct, export and delete your data in the App: edit any record, export to PDF, CSV or Excel, clear your data, or delete your account. Depending on where you live, you may have further rights (for example under the GDPR or Canadian privacy law), such as asking for a copy of the data we hold about you. To make a request, email us at the address below.

16 Changes to this policy

We may update this Privacy Policy. When we do, we will change the "Last updated" date above, and for significant changes we will tell you in the App. Continued use of the App after a change means you accept the updated policy.

17 Contact us

• Email: hello@reflect-technology.ca
• App: Expense Tracking on the App Store or Google Play