Privacy Policy

Last updated: 23 September 2026

This policy explains what information QuickExpense (“we”, “us”) handles when you use the QuickExpense app for iPhone and Android and this website, why, and what you can do about it.

Information that stays on your phone

Your expenses, categories, notes, projects, settings and receipt photos are stored in the app on your phone. You can use QuickExpense offline, and none of this is sent to us unless one of the features below needs it.

On iPhones that support it, QuickExpense can read receipts and payment notifications with Apple’s on-device intelligence. When that’s turned on, the reading happens entirely on the phone.

Information that reaches our servers

An anonymous identifier

When you first open the app, it creates a 24-word recovery phrase on your phone. From it, the app derives a random identifier and a key it uses to sign in to our servers automatically. The recovery phrase itself never leaves your phone. The identifier isn’t linked to your name, email or phone number.

Receipts read online

When a receipt can’t be read on your phone, the app sends the photo to our servers, which pass it to an AI service provider to pick out the shop, date, items and amounts. The photo is deleted once it’s been read. If reading fails, it’s deleted within a few days. The details that were read are kept only until the app collects them, and never longer than a few days.

Automatic entries from payments

If you set up automatic logging, your phone gives QuickExpense the details of a payment: on iPhone, the merchant and amount from Apple Wallet (through a Shortcuts automation you create), and on Android, the text of notifications from apps you choose. These are read on your phone first. Only when the phone can’t read one, and the text looks like a payment, is it sent to our servers and an AI service provider to pick out the amount, merchant and card, or to suggest a category. For category suggestions, a few of your past merchant and category pairs are included. This information isn’t stored after the reply.

Encrypted receipt backups

Receipt photos attached to your expenses are backed up to our storage so they can be restored with your recovery phrase. Each photo is encrypted on your phone before upload with a key derived from your recovery phrase (or, for a shared project, the project’s key). We store only the encrypted file, which we can’t open.

Sync (Pro)

With Pro, your expenses sync between your devices and with the people in your shared projects. Sync data is end-to-end encrypted on your phone. Our sync service stores and passes along encrypted data it can’t read.

Shared projects (Pro)

When you share a project, our servers store its name and currency so people you invite can see what they’re joining. Invite links carry a passphrase that we never receive. The people in a project can see its expenses, receipts and the display names members choose.

Subscriptions

Purchases are handled by Apple or Google. To confirm your Pro subscription, the app sends us the purchase details, which we check with Apple or Google. We keep your subscription status, its start and end dates, and the store’s transaction identifiers. We never see your payment card.

Usage and technical information

• Scan counts: how many receipts and payments were read online this month, to apply the free plan’s monthly limit.
• Sync bookkeeping: the date of your most recent expense, so sync can resume efficiently. Not the expense itself.
• Crash reports: if the app crashes, it sends a report to our own crash-reporting service. A report includes your device model, operating system and app version, your IP address, and recent app log messages, which can include merchant names. We use crash reports only to fix bugs.
• Server logs: our servers keep short-lived operational logs (anonymous identifiers, request sizes and errors) to keep the service running. They don’t contain receipt photos.

Exchange rates

To convert other currencies, the app fetches exchange rates from a public exchange-rate service. The request contains only currency codes, though the service can see your IP address, as with any web request.

Permissions

• Camera: to photograph receipts.
• Photos: you pick receipts with the system picker, so the app doesn’t need access to your whole library. If you choose to save receipts to Photos, it asks for permission to add them.
• Notification access (Android, optional): to log payments from the apps you select. Notifications from other apps are ignored.
• Notifications (iPhone, optional): to remind you when payments are waiting to be added.

QuickExpense doesn’t use your location, contacts or microphone.

Who processes information for us

We use a small number of service providers, only to run QuickExpense:

• Cloud infrastructure providers, which host our servers, storage and sync service.
• AI service providers, which read receipts and payment details sent for online reading. Under their terms, they don’t use this data to train their models and keep it only for a limited time for security and abuse monitoring.
• Apple and Google, which process purchases and confirm subscriptions.
• An exchange-rate service, as described above.

We don’t sell or rent your information, share it for advertising, or use third-party analytics or tracking. We may disclose information if the law requires it, which is limited by the fact that most of what we hold is encrypted or anonymous.

How long we keep information

• Receipts sent for online reading: deleted once read, or within a few days if reading fails.
• Payment details sent for reading: not stored.
• Encrypted receipt backups, sync data and shared-project details: until you ask us to delete them, or the project is deleted.
• Subscription records and scan counts: while you use QuickExpense, and as required for tax and accounting.
• Crash reports and server logs: for a limited period, then deleted.

Your choices

• Delete from your phone: delete any expense in the app, or use Reset all data in Settings to erase everything on the phone.
• Delete from our servers: resetting the app doesn’t remove your encrypted backups or subscription records from our servers. Email us to have them deleted. We’ll explain how to identify your data without sharing your recovery phrase. Never send us your recovery phrase.
• Access or correct: everything we can read about you is listed on this page. Email us for a copy of what we hold about your identifier.
• Keep reading on your phone: on supported iPhones, turn on on-device reading in Settings, and leave automatic entries off if you don’t want payment details read online.

Security

Data is encrypted in transit. Synced data and receipt backups are encrypted on your phone before they leave it. Your recovery phrase is the only key to your data. If you lose it, we can’t recover your data for you.

International transfers

Our service providers may process information in countries other than yours, including Singapore and the United States. We use providers that protect it to the standard this policy describes.

Children

QuickExpense isn’t directed at children under 13, and we don’t knowingly collect information from them.

Changes

If we change this policy, we’ll update the date above. If the change is significant, we’ll also note it in the app.