We are committed to securing your financial data. Learn exactly how your transaction details, settings, and media are managed.
Your financial records are highly sensitive. Smart Expense is designed with data containment principles. Our application does not sell, lease, or distribute your financial logs to third-party marketing firms. Depending on the mode of operation you select (Guest Mode or Registered Mode), your data is stored locally on your device or synchronized securely with Google Cloud services.
The app operates in two modes, providing you with full control over where your financial information lives:
| Operation Mode | Authentication Required | Storage Location | Sync Mechanism |
|---|---|---|---|
| Guest Mode | No | In-Memory / Local Cache | None (完全 Offline) |
| Registered Mode | Yes (Email or Google Sign-In) | Secure Firebase Auth & Firestore DB | Real-time SSL Sync under Private UID |
Smart Expense includes options to integrate Google's Gemini generative models to enable receipt scanning, voice inputs, and conversational budgeting. Here is how this data is handled:
- API Execution: When you capture a voice input or upload a receipt photo, the transcription text or image bytes are processed via the Google Generative AI API (`gemini-2.5-flash`). This transmission is secure, encrypted, and direct.
- API Keys: Users have the option to set up and sync their *own* Gemini API key. If supplied, the key is saved securely inside your isolated user profile document on Firestore and loaded locally into memory at app launch.
- Analytics Summaries: The financial insights, summaries, and chat sessions are built dynamically by parsing current transaction logs as prompt context. These sessions are in-memory; no chat history or transcript logs are permanently cached by the app creator.
- Statement Downloads: Exporting transactional statements (PDF, CSV, Excel) saves files directly to your device's internal storage (e.g. `Download/` folder on Android). This action runs locally on-device and requires standard filesystem write permissions.
- SMS Auto-Import (Android Only): If you choose to enable the optional Bank SMS Auto-Import feature, the app reads incoming SMS messages strictly on-device to detect transaction alerts from recognized bank and UPI senders. Personal SMS messages are never read, accessed, or uploaded to any server. Detected transactions are queued locally for your explicit review and confirmation before saving.
- Native Notifications: The app triggers local system status-bar notifications when exports finish. No telemetry, identifiers, or tracking metrics are transmitted out of your device during this process.
You have full ownership of your data. Registered users can permanently delete their accounts and wipe all transaction records directly from the settings panel inside the application. Deletion triggers a direct wipe from Cloud Firestore, ensuring no orphaned financial data remains in our cloud database.