Privacy notice

Plain language. Last updated 2 October 2026.

What stays on your phone

ControlExpense reads bank, card and wallet SMS on your phone (Android) to record transactions. The message text is processed on the phone and is never uploaded. Messages from people are only checked for fake bank alerts and their text is never stored. On iPhone, ControlExpense only sees what you send it through your own Shortcuts automation, screenshots or files.

What reaches our servers

• Your email address and sign-in sessions, to let you sign in.
• If you turn on sync (Pro): your ledger, encrypted on your phone before upload. We cannot read it. We see only random record ids, sizes and timestamps.
• Your subscription status from the app store, through RevenueCat.
• Crash reports without message text, amounts, UPI IDs or phone numbers. You can turn these off.

Voice

Voice entries are turned into text on your phone. If you download the optional offline speech model, recognition and translation run entirely on the phone. Without it, your phone's own speech service is used (on-device when its language pack is installed; otherwise the phone maker's service may process the audio under its own policy). ControlExpense never uploads your recordings, and read-back uses your phone's built-in voices.

What we never do

We don't sell or share your data, run ads, or analyse your finances on our servers. ControlExpense does not offer loans.

Your rights (DPDP Act, 2023)

You can export everything from Settings, delete your account in the app or at /delete-account, and withdraw consent for SMS reading at any time in Settings → Auto-capture. If Pro lapses, sync pauses, your encrypted data stays available to restore for 30 days and is deleted 180 days after the lapse, after two in-app warnings and an email.

Outside India (GDPR, UK GDPR, CCPA/CPRA)

Legal bases: contract (your account, sync and subscription) and consent (SMS reading, crash reports; both can be turned off in Settings). You have the right to access, correct, export and delete your data, to object or restrict processing, and to complain to your local data protection authority. We do not sell or share personal information as defined by the CCPA. Servers are hosted by our provider in the region named in our sub-processor list; transfers outside your country rely on standard contractual clauses. Sub-processors: hosting provider, email delivery (sign-in codes), RevenueCat (subscriptions), Sentry (scrubbed crash reports).

Grievance officer

privacy@controlexpense.com. We reply within 7 days.

हिंदी में सार

ControlExpense आपके फ़ोन पर ही बैंक SMS पढ़ता है; संदेश का टेक्स्ट कभी अपलोड नहीं होता। सिंक चालू करने पर आपका डेटा फ़ोन पर ही एन्क्रिप्ट होकर जाता है, जिसे हम पढ़ नहीं सकते। हम आपका डेटा न बेचते हैं, न साझा करते हैं। आप कभी भी अपना खाता हटा सकते हैं।