Expense Tracker Privacy Policy
Last updated: November 1, 2026 (applies to version 1.1.0 and later) · 繁體中文
Expense Tracker ("the app", called 記帳本 in Traditional Chinese) is developed by an individual developer, jojomango. This policy explains how the app handles your data.
Your entries stay on your phone
- Everything you enter in the app — wallet names, transactions, amounts, categories, notes, currencies, budgets and dates — is stored only on your device and is never sent to the developer or any third party.
- The app has no account and no ads, and does not use the advertising ID.
The app connects to the internet in only the two cases below, and neither of them sends your entries.
1. "Help improve the app" (off by default)
Settings has a "Help improve the app" switch, which is off by default. While it is off, the app sends no usage or crash information.
If you turn it on, the app sends the following through Google's Firebase Analytics and Firebase Crashlytics:
- Anonymous usage: for example which screen you opened (home, stats, settings…), whether you added an expense or income, which budget mode you chose for a new wallet, switching dark mode, and using backups. It never includes amounts, categories, notes, wallet names or currencies.
- Crash information: the error log when the app crashes (which line of code failed), plus your phone model, Android version and app version. Crash logs do not include your entries.
- Information Firebase adds automatically: a randomly generated identifier used only for analytics (not your name, phone number or advertising ID), app version, phone model and OS version, language, and the country or region estimated from your network address (not your precise location). Firebase also records basic events such as app opens, time spent and updates.
This data is processed by Google under Firebase's privacy and security terms. The developer only sees aggregated statistics and crash reports, used solely to understand what works, where people get stuck and where the app crashes. The app does not set a user ID, does not collect the advertising ID and does not enable ad personalization.
You can turn it off at any time in Settings. Collection stops immediately, unsent crash reports are deleted, and the analytics identifier on your phone is cleared — if you turn it on again later, you get a brand-new identifier that cannot be linked to earlier data.
2. Support the developer (donations)
"Support the developer" at the bottom of Settings is an optional donation and does not unlock any features. The app only connects to Google Play to look up prices when you open that section; payment is handled entirely by Google Play. The developer cannot see your card or other payment details and only receives a standard order record from Google Play (such as the order number, item and amount). See Google's privacy policy for how Google Play handles payment data.
Backups
- Backup files you export: when you use "Export backup", you choose where the file is saved (for example your Downloads folder or a cloud drive app). The file contains your entries; how you store and share it is entirely up to you, and the developer cannot access it.
- Android system backup: if you have turned on Google account backup in your phone's settings, Android may back up the app's data to your own Google account so it can be restored on a new phone. This is a system feature provided by Google; the backup is encrypted with your screen lock and the developer cannot read it. You can turn it off under Settings → System → Backup. The "Help improve the app" switch and your language choice are not backed up — on a new phone they start from the defaults.
Permissions the app uses
| Permission | Purpose |
|---|---|
| Internet, network state | Only for "Help improve the app" (when you turn it on) and Google Play donations |
| Google Play billing | Donation payments |
| Notifications | A reminder to export a backup at the end of each month. It is scheduled on your phone and does not use the network. You can turn it off in system settings at any time. |
| Run at startup, keep awake, foreground service | Needed by Android's scheduler (WorkManager) so the backup reminder runs on time in the background |
Introduction website
The app’s introduction website uses GoatCounter to count page views, showing approximate country, referring site, browser, operating system, screen size, and language. It does not use cookies and is not used to identify individual visitors. This counting happens only on the introduction website, not in the app, and never includes your entries.
Children
The app is not designed for children.
Deleting your data
- Your entries are only on your device: you can delete transactions and wallets in the app at any time, or uninstall the app to delete everything. (If Android system backup is on, Google keeps and deletes that backup under its own policy.)
- Anonymous analytics data: turning off "Help improve the app" clears the analytics identifier on your phone. Data Firebase has already received is deleted automatically after Firebase's retention period; to request earlier deletion, email the address below.
Changes to this policy
If this policy changes, this page will be updated along with the "Last updated" date above.