Your data is yours. Period.

• Expense data (local only): amounts, dates, notes, categories, and user attribution are stored exclusively on your device. The App does not upload your expense data to our servers.
• Receipt photos (local only): if you scan or attach a receipt, the photo is stored privately on your device, where other apps can’t reach it. It never leaves your device unless you turn on receipt sync in Settings.
• Past choices for each store (local only): when you save an expense that came from a scan, BillPlex remembers the notes and category you kept so the next scan of the same store pre-fills them. This learning stays on your device.
• Settings & preferences: language, UI options, and budget settings are stored locally on your device.
• Information we do not collect: names, email addresses, account credentials, precise location data, advertising identifiers, usage analytics, or behavioral tracking data.

Data stored on your device is processed locally to provide the App’s core functionality, including expense tracking, insights, statistics, and optional import/export or local device-to-device sync initiated by you.

• Files (Import & Export): when you choose to import or export data, the App accesses only the files you explicitly select to read or write an encrypted backup.
• Local Network / Nearby (optional): for Wi-Fi sync between your own devices, BillPlex may use local connectivity frameworks. You control when syncing starts, which devices pair, and when it stops.
• Microphone & Speech Recognition (optional): used only when you choose voice input. The conversion of speech to text is performed by your device’s system speech recognition — Apple Speech on iOS and Google’s speech recognizer on Android. Depending on the device and language, this may send the audio to Apple’s or Google’s servers for processing, under their own privacy policies. BillPlex does not record, store, or send your audio to our own servers, and only the resulting text is used in the App.
• Camera (optional): used only when you tap the receipt-scan button on the amount field. We never run the camera in the background.
• Photo library / Picker (optional): used only when you choose to attach an existing receipt from your library instead of scanning a fresh one. We read only the photo you pick.
• On-device text recognition: receipt scanning runs Apple Vision on iOS and Google ML Kit on Android, entirely on your device. The receipt image and the recognised text never leave the device for our servers. Google ML Kit is a third-party SDK by Google; per Google ML Kit Terms, Google may receive anonymous diagnostic and usage statistics about ML Kit (not the image, not the text, not your expenses).

We do not collect your expense data on remote servers and do not sell, rent, or share it with third parties. If you export a backup or use local sync, the data you choose to transfer moves directly between your devices, or through a file you control, never through our servers. Receipt photos are not shared with other household devices by default; you can opt in via Settings → “Share receipt photos”, and even then the image only travels over the same encrypted local-network sync channel, only to devices you have paired. The App does not embed third-party analytics or advertising SDKs. Apple and Google may collect diagnostic or usage information at the platform level, including the limited ML Kit telemetry mentioned in Section 3, in accordance with their own privacy policies. We do not have access to this information.

• On-device storage: data is stored in the App’s local database on your device.
• Backups: exported backup files are encrypted and protected with a PIN chosen by you. Keep your PIN safe — we cannot recover it.

All expense data remains under your control on your device. You can delete entries within the App, uninstall the App to remove local data, and delete any exported files you have created.

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable. Because we do not host or process your personal data on our servers, rights such as access, correction, deletion, restriction, or portability are exercised directly by you within the App by managing or deleting your data on your device.

BillPlex is designed for general household use and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time to reflect improvements, legal requirements, or changes in the App’s functionality. The “Last updated” date will be revised accordingly.