Privacy Policy
Plain English summary: This is a personal expense tracking app. We collect only the information you enter yourself (expenses, invoices). If you connect Google Drive, we only access files that this app creates — nothing else in your Drive. We don't sell your data, share it with third parties, or use it for advertising. Your financial data stays yours.
1. About this app
Expense Tracker ("the app", "we", "our") is a personal web application built and operated by kvmade, accessible at kvmade.app. The app allows users to log work-related expenses for tax purposes and optionally upload invoice files to their own cloud storage (Dropbox or Google Drive).
This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
2. Information we collect
We collect only the information you directly provide when using the app:
| Data type | What it is | Why we collect it |
|---|---|---|
| Account information | Email address and password (hashed) | To authenticate your account and keep your data private |
| Expense records | Date, description, category, amount, GST, file name | Core functionality — to track your work expenses |
| Storage settings | Your chosen storage provider and connection tokens | To upload invoices to your Dropbox or Google Drive |
| Invoice files | PDF or image files you upload | Sent directly to your own cloud storage — not stored by us |
We do not collect location data, device identifiers, browsing history, or any information beyond what you enter into the app.
3. Google Drive access
If you choose to connect Google Drive, the app requests the drive.file scope only. This means:
- The app can only access files it creates itself (invoice files uploaded via this app)
- The app cannot read, modify, or access any other files in your Google Drive
- The app cannot access your Gmail, Google Calendar, or any other Google services
- Files are uploaded directly from your browser to your own Google Drive — they do not pass through our servers
You can disconnect Google Drive at any time from the app's Storage Settings. To fully revoke access, visit myaccount.google.com/permissions.
Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
4. Dropbox access
If you connect Dropbox, you provide a personal access token which is stored in your account's settings in Firebase. The app uses this token solely to upload invoice files to a designated folder in your Dropbox (/Apps/Tax invoices/). The token is specific to your account and accessible only to you when logged in.
You can disconnect Dropbox and clear your token at any time from the app's Storage Settings.
5. How we store your data
Your account and expense data is stored in Google Firebase Firestore, a cloud database service provided by Google LLC. Data is stored in Google's secure data centres and protected by Firebase's security rules, ensuring only you can access your own data.
Invoice files are uploaded directly to your chosen storage provider (Dropbox or Google Drive) and are not stored on our servers or in Firebase.
We implement the following to protect your data:
- Authentication required for all data access
- Firestore security rules ensuring each user can only access their own records
- HTTPS encryption for all data in transit
- Passwords are hashed by Firebase Authentication — we never store plain-text passwords
6. How we use your data
We use your data solely to provide the app's functionality:
- Displaying your expense records when you log in
- Calculating GST and expense totals
- Uploading invoice files to your connected storage
- Generating CSV exports of your expense data
We do not use your data for advertising, profiling, analytics, or any purpose beyond operating the app for you.
7. Data sharing
We do not sell, rent, or share your personal data with any third parties, except as necessary to operate the app:
- Google Firebase — stores your account and expense data (Google's privacy policy applies)
- Google Drive — if connected, receives your uploaded invoice files (Google's privacy policy applies)
- Dropbox — if connected, receives your uploaded invoice files (Dropbox's privacy policy applies)
No other third parties receive your data.
8. Data retention and deletion
Your data is retained for as long as your account exists. You can:
- Delete individual expense entries at any time from within the app
- Request full deletion of your account and all associated data by contacting us at the email below
Upon account deletion, all expense records stored in Firebase will be permanently deleted. Files already uploaded to your Google Drive or Dropbox will remain there and must be manually deleted from those services.
9. Your rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of your data (your expense records are always visible in the app)
- Correction — update or correct your data at any time in the app
- Deletion — request deletion of your account and all data
- Portability — export your expense data at any time using the CSV export feature
To exercise any of these rights, contact us using the details in Section 11.
10. Children's privacy
This app is intended for adults managing their own financial records. We do not knowingly collect data from anyone under 18 years of age.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
12. Contact us
If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact:
kvmade
Website: kvmade.app
Email: hello@kvmade.app