Privacy Policy

XpeZ("we", "our", "us") is a personal finance and expense tracking application operated by lssgoo. This Privacy Policy explains what information we collect when you use the XpeZmobile application ("the App"), how we use it, and the choices you have.

By using XpeZ you agree to the collection and use of information in accordance with this policy.

1. Information we collect

1.1 Information you provide

• Account information: name, email address, and password (or Google account identifier if you sign in with Google).
• Financial data you enter: transaction records, account balances, budgets, savings goals, categories, notes, and CSV imports. This data is entered manually by you and is never fetched from your bank without your explicit action.
• Profile information: any optional profile details you add.

1.2 Information collected automatically

• Device identifiers: Firebase Cloud Messaging (FCM) push notification tokens used to deliver notifications.
• Diagnostic data: app crash reports, error logs, and app performance data collected via Firebase to help us diagnose issues.
• App interaction data: anonymized events such as feature usage, streaks, and achievements used to power in-app engagement features.

1.3 Information we do NOT collect

• We do not collect your precise location.
• We do not access your contacts, photos, camera, microphone, calendar, or SMS messages.
• We do not scrape or read your financial accounts from third-party services.

2. How we use your information

• Provide and maintain the App's core functionality.
• Authenticate you and secure your account, including biometric app lock.
• Send push notifications you have opted into.
• Diagnose crashes and improve app reliability.
• Enable AI-powered features (chat, budget planning) when you use them; your prompts are sent to our AI provider to generate a response and are not used to train third-party models.

3. Data storage and security

• Financial and account data is stored on secure servers operated by lssgoo.
• All data transmitted between the App and our servers is encrypted in transit using TLS (HTTPS).
• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• On-device data is protected by the operating system's application sandbox and, when enabled, by biometric app lock.

4. Third-party services

XpeZ uses the following third-party services, each governed by its own privacy policy:

• Google Firebase (Google LLC) — push notifications and crash reporting.
• Google Sign-In (Google LLC) — optional authentication.
• AI provider — used only when you invoke AI chat or plan-budget features.

We do not sell your personal information to third parties. We do not share your financial data with advertisers.

5. Data retention and deletion

• Your data is retained for as long as your account is active.
• You can delete your account at any time from Settings → Delete Account in the App. Deleting your account permanently removes your financial data from our servers within 30 days, except where retention is required by law.
• You may also request access to or a copy of your data by contacting us at the address below.

6. Children's privacy

XpeZ is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated in-app or via email. The "Last updated" date above reflects the most recent revision.

8. Contact

Questions about this Privacy Policy or your data: