Privacy Policy

Xpensa helps you manage and understand your financial information. You can record income and expenses, keep track of accounts and balances, review your transaction history, organise credit and debit transactions, and upload supported bank statements so the transactions they contain are read and organised for you.

This Policy applies to everyone who uses the Services and describes how the application handles your information in practice. By creating an account or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please discontinue use of the Services.

Multi Code Genius is the company behind Xpensa. Xpensa is a product operated and provided by Multi Code Genius, and Multi Code Genius is responsible for the personal information processed through the Services.

In this Policy, “Xpensa” refers to the application and website, while “we”, “us”, and “our” refer to Multi Code Genius as the operator of those Services.

Information you provide to us

• Account details: your name, email address, and a password. You may also add a phone number and set an app PIN. Passwords, PINs, and recovery codes are stored only as salted hashes — never as readable text.
• Sign-in identifiers: if you choose Sign in with Apple or Sign in with Google, we receive the account identifier from that service along with the name and email address it shares with us.
• The financial records you create in the app, such as accounts, balances, transactions, categories, notes, budgets, goals, debts, trips, and shared or household expenses.
• Bank statements you upload and receipt images you scan, together with the information contained in them.
• Messages, feedback, and support requests you send to us.

Information collected automatically

• A device notification token and your platform (iOS or Android), if you enable push notifications.
• Sign-in and session records, including refresh tokens and, where you set up biometric unlock or a passkey, the credential's public key, identifier, and a device label.
• Operational server logs, such as the time of a request, the endpoint called, and error diagnostics, which we use to keep the Services running and to investigate problems.
• For a statement import, the file name and size of the upload are recorded against that import task so you can see its progress and outcome.

The financial information processed by Xpensa includes your account records and balances, credit and debit transactions, transaction history, merchant names, transaction descriptions and notes, and the personal expense records you create or import.

Sensitive values — including amounts, balances, merchant names, descriptions, notes, and account details — are encrypted on your device before they reach our servers and are stored as ciphertext. Structural information needed to organise your records, such as the transaction date, whether an entry is income, expense, or a transfer, its category, and internal record identifiers, is stored without that encryption so the Services can sort, group, and total your data.

This information is used to operate the features you ask for. It is not used for advertising, profiling, credit scoring, or sale.

Xpensa lets you upload a bank statement in PDF form so that the entries it contains can be turned into organised records in your account. During an import, the application reads information printed in the statement — transaction dates, descriptions, debit and credit amounts, running and closing balances, and the account details shown on the document — and converts it into transactions, which are then encrypted and saved to your account.

The statement file itself is processed in memory and is not written to disk or kept on our servers. Only the transaction data extracted from it is saved to your account. If your statement is password-protected, the password you enter is used solely to open that file during the import and is not stored.

You decide what to upload, and you can review, edit, or delete any imported transaction inside the app. Importing a statement requires an active Cloud Assist session, because the transactions being created have to be encrypted with your key before they can be stored — this is described in the section on AI features and Cloud Assist below.

We use the information we collect to:

• Create and maintain your account and keep your records available across the devices where you are signed in.
• Read the statements and receipts you submit and organise the resulting transactions, balances, and categories.
• Produce the summaries, budgets, reports, and insights you ask for inside the app.
• Send the notifications and reminders you have enabled.
• Authenticate you, protect accounts against unauthorised access, and prevent fraud and abuse.
• Respond to your support requests and communicate with you about the Services.
• Diagnose faults and improve the reliability, accuracy, and features of the Services.
• Comply with applicable legal and regulatory obligations.

Encryption

Sensitive financial fields are encrypted on your device using AES-256-GCM before they are sent to us. The key used for that encryption is derived from your password with Argon2id and is held in your device's secure keystore. Our servers keep only wrapped — that is, encrypted — copies of that key, which can be unwrapped with your password or with your recovery phrase.

Other safeguards

• Information is transmitted between the app and our servers over HTTPS.
• Passwords, PINs, and recovery codes are stored only as salted hashes.
• Sign-in and account recovery endpoints are rate limited, and standard HTTP security headers are applied across the API.
• Biometric unlock and passkey sign-in are handled by your device — we store only the credential's public key, never your fingerprint or face data.
• Access to production systems is limited to authorised personnel and only for operating, supporting, and securing the Services.

No method of transmission or storage is completely secure, so while we take these measures seriously, we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and your recovery phrase safe: if you lose both your password and your recovery phrase, your encrypted data cannot be recovered by us or by anyone else.

Some Xpensa features use AI models operated by Google to read a receipt, suggest a category, or answer a question about your spending. These features are grouped under Cloud Assist, which is switched off by default.

When you turn Cloud Assist on, you consent to it for a limited window. Your app then sends a temporary copy of your data key to our server, where it is held in memory for that window only — it is not written to disk or saved in our database, and it is discarded when the window expires or when you switch Cloud Assist off.

What happens while Cloud Assist is on

• Statement import: imported transactions are encrypted with your key before being stored, which is why an active Cloud Assist session is required to run an import.
• AI chat and insights: relevant transaction details — such as dates, amounts, merchant names, categories, and totals — are sent to the AI provider so it can produce an answer. Your name, email address, and account numbers are not included in what is sent.
• Receipt scanning: the receipt image is sent to the AI provider for extraction. It is processed in memory and is not stored on our servers.
• Category suggestions during a statement import: where you ask for them, transaction descriptions may be sent to the AI provider so a category can be suggested for entries our own rules could not classify.

Your conversations with the AI assistant are saved to your account so you can return to them. Unlike your transaction fields, chat content is not encrypted with your personal key. You can delete individual chat sessions at any time, and they are removed with your account if you delete it.

You can turn Cloud Assist off at any time in the app, after which Xpensa runs in on-device insights mode and no further transaction data is sent for AI processing.

We share information only in the limited circumstances described below:

• With the service providers that make the Services work — cloud hosting and database providers, the AI provider used for the Cloud Assist features described above, the push-notification service, and the sign-in services you choose to use.
• When required by law, regulation, legal process, or a valid governmental request.
• To protect the rights, property, or safety of Multi Code Genius, our users, or others, including to prevent or investigate fraud and abuse.
• In connection with a merger, acquisition, financing, or reorganisation, in which case we will require the recipient to honour this Privacy Policy.

We do not share your information with advertisers, data brokers, or marketing networks, and we do not share your Xpensa data with the banks whose statements you upload.

Xpensa relies on a small number of third-party services in order to function:

• Google AI (Gemini) — processes receipt images, statement category suggestions, and Cloud Assist chat and insights requests, as described above.
• Firebase Cloud Messaging (Google) — delivers push notifications to your device.
• Sign in with Apple and Sign in with Google — verify your identity if you choose one of those sign-in methods.
• Cloud infrastructure providers — host our servers, database, and application files.
• Apple App Store and Google Play — distribute the app and handle any purchases made through them.

These providers handle information under their own privacy policies and only for the purposes above. We share the minimum needed for each purpose, and we do not authorise them to use your data for their own marketing.

We keep your account details and the records you add to Xpensa for as long as your account is active, so that your history remains available to you. Uploaded statement files and scanned receipt images are not retained after they have been processed. Chat conversations are kept until you delete them or delete your account. Operational logs are kept for a limited period for security and diagnostic purposes.

When you delete your account, the data associated with it is deleted as described in the next section.

You can delete your account from within the app at Settings → Privacy & Security → Delete Account. You will be asked to type DELETE to confirm and to enter your PIN before the deletion is carried out. Deleting your account is handled entirely in the app, and it is the only way an Xpensa account is closed.

Deleting your account removes your profile along with the data associated with it — your transactions, accounts, categories, budgets and other records, your chat history, your sign-in sessions, and any biometric or passkey credentials registered to you. Deletion is permanent and cannot be undone, so export anything you want to keep before you begin.

Limited records may be retained after deletion only where we are required to keep them to meet legal, tax, accounting, or fraud-prevention obligations, and only for as long as applicable law requires. See the Delete Account page for the full process.

Subject to applicable law, you may:

• Access the personal information associated with your account.
• Correct information that is inaccurate or out of date.
• Export your data from within the app.
• Delete individual records, your chat history, or your entire account.
• Withdraw your consent to Cloud Assist at any time, and object to or restrict certain other processing.
• Lodge a complaint with the data protection authority in your jurisdiction.

To exercise any of these rights, contact us at contact@multicodegenius.com from the email address linked to your account. We will respond within the timeframe required by applicable law.

The Services are not directed to children under the age of 18 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

This website does not set cookies and does not use analytics, advertising, or tracking technologies. The Xpensa app contains no advertising or analytics SDKs and does not use advertising identifiers or track you across other apps and websites. The only usage information we hold is the operational server logs described under “Information We Collect”.

We may update this Privacy Policy as Xpensa develops or as legal requirements change. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you within the app or by email. Your continued use of the Services after an update means you accept the revised Policy.

If you have questions about this Privacy Policy, how your information is handled, or a request you would like to make, contact us at contact@multicodegenius.com.

Xpensa is operated by Multi Code Genius, India.