Expense HuntThinkerCart (“ThinkerCart”, “Expense Hunt”, “we”, “us”) is the controller of the personal data described in this notice. Contact us at support@expensehunt.thinkercart.com. This notice is intended to explain our processing in clear language; it does not limit rights that may apply under law.
What we collect
- Account and identity data: name, email address, authentication identifiers, and profile preferences. You can sign in with email/password or Google. If Apple Sign In is made available in a future version, Apple-provided account identifiers and any email information you choose to share will be handled in the same way.
- Financial and app content: the information you enter, import, or create in Expense Hunt, such as transactions, accounts, budgets, goals, debts, recurring items, notes, categories, payment methods, split-expense information, report preferences and settings.
- Device, security and technical data: an app-generated device/session identifier, device name and model, platform, operating-system and app version, last-active time, authentication/session events, and an optional push-notification token when you enable notifications.
- Subscription data: entitlement and purchase-status information needed to provide Premium features. Payment-card data is handled by Apple, Google Play and their payment systems, not by us.
- AI data: the message, receipt image where you choose receipt parsing, and the limited account/category context needed to process your request; plus an AI-use timestamp to apply free-tier limits and prevent abuse.
- Support communications: information you send us when requesting help, exercising a privacy right, or reporting an issue.
Why we use data and our legal bases
- To create and secure your account, synchronise your data, provide reports, and deliver the features you request — performance of our contract.
- To protect the service, prevent fraud or misuse, enforce feature limits, debug and maintain reliability — our legitimate interests and, where applicable, legal obligations.
- To provide optional notifications and monthly email reports — your consent or request. You can turn these off in the app.
- To meet accounting, tax, legal, or regulatory duties where applicable — legal obligation.
Where data is stored and who processes it
We use Supabase to provide authentication, cloud storage, database and server-side functions. Your app data is stored in Supabase when cloud sync is enabled or required by a feature; a local copy may also remain on your device for offline use. We use row-level access controls designed to restrict app records to the relevant authenticated user.
Depending on the features you choose, data may also be processed by the following service providers: Google for Google Sign-In and Gemini AI; OpenAI for GPT AI; RevenueCat for subscription-entitlement management; Apple and Google Play for in-app purchases; and Resend to send opted-in monthly financial reports. These providers process data to provide their services and may process data in countries other than yours under their own agreements and safeguards.
AI features and your choices
AI is optional. When you submit an AI request, the relevant prompt and limited financial context are sent to the selected Gemini or OpenAI model to generate a suggested structured result. Review every suggestion before saving it. AI output may be inaccurate and is not financial, tax, investment, legal, or other professional advice.
You may use a personal Gemini or OpenAI API key. The app stores a key you provide in your device’s secure storage. It is not stored in our database; to fulfil a request it is transmitted through our secure function to the selected AI provider. Do not submit information you do not want processed by that provider. You can clear a saved key in AI Settings at any time.
Premium subscriptions
Some features are available only to Premium users. RevenueCat receives a user/app identifier and purchase-entitlement information to validate purchases and restore access. Your subscription is billed and managed by the store through which you purchased it. Deleting your Expense Hunt account does not cancel an active App Store or Google Play subscription; cancel it in the relevant store before or after deletion to prevent future charges.
Sharing, sale and advertising
We do not sell personal information, use your financial data for behavioural advertising, or share it with data brokers. We disclose data only to the providers described above, when you direct us to do so, to comply with law, or to protect the rights, safety and security of users and the service. We may share de-identified or aggregated information that does not reasonably identify you.
International transfers
We and our providers may process data outside your country, including in the United States and other jurisdictions. Where required, we use appropriate transfer mechanisms and safeguards, such as contractual protections, and take account of applicable data-protection law.
Retention and deletion
We retain personal data only for as long as needed to provide the service, meet the purposes in this notice, resolve disputes, enforce agreements, and comply with law. You may delete your account in the app. This deletes the Supabase account and associated app data subject to any legally required retention. Locally stored data and secure-storage items on a device are removed by uninstalling the app or using in-app controls as applicable. Our detailed deletion route is available at Account & data deletion.
Your privacy rights
Depending on where you live, you may have the right to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, and information about our processing. EEA/UK users may also lodge a complaint with their local data-protection authority. California and other US-state residents may have additional rights to know, delete, correct, opt out of certain sharing, and not be discriminated against for exercising rights. We do not sell or share personal information for cross-context behavioural advertising.
To exercise a right, email support@expensehunt.thinkercart.com with the subject “Privacy Request”. We may need to verify your identity before acting. If you use an authorised agent, we may require proof of authority and verification.
Children
Expense Hunt is not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate.
Security and changes
We use reasonable technical and organisational measures, including encryption in transit and access controls. No system is completely secure. We may update this notice when our practices or legal obligations change; the effective date above will be updated, and material changes will be communicated where required.
Contact
Privacy questions, complaints, and requests: support@expensehunt.thinkercart.com
Controller: ThinkerCart, publisher of Expense Hunt: AI Money Tracker.