AnyXpense is a personal expense-tracking app. This page explains what data the app accesses, why, and how it is stored.
What data we access
Bank/UPI SMS messages (Android only) — read from your device's SMS inbox, with your explicit consent, to automatically detect and log transactions from bank and payment-app alerts.
Gmail, read-only, if you choose to connect it — used only to find bank/credit-card alert emails so their transactions can be imported the same way SMS alerts are. We request the gmail.readonly scope, which allows reading messages but never sending, deleting, or modifying anything in your mailbox.
Account information — email address and any profile details you enter (name, phone), used only to operate your account.
Transaction, budget, and account data you create in the app — stored so the app can show your spending history, budgets, and reports.
How your data is used
Data is used solely to provide the app's core functionality: detecting and categorizing your transactions, and showing you spending insights. We do not sell your data or share it with advertisers.
Where your data is stored
App data is stored in a Supabase-hosted database with row-level security, meaning only your own account can read your data. Email account credentials (OAuth tokens), when you connect Gmail, are stored using Supabase Vault, an encrypted secret store — never as plain text.
Third-party services
Supabase — database, authentication, and serverless backend functions.
Google (Gmail API, Google Sign-In) — only used if you explicitly connect Gmail or sign in with Google.
An AI provider, via OpenRouter — used only as a fallback to help categorize transactions or parse SMS/email text the app's built-in rules couldn't understand. No data is used to train third-party models.
Your controls
SMS scanning and Gmail connection are both fully optional and can be disconnected at any time from the app's Settings.
You can delete your account and all associated data at any time from Profile → Delete Account.