Data Safety & Security Disclosures
Google Play Data SafetyEffective Date & Last Revision: November 6, 2026
This document provides complete transparency regarding the specific data categories collected, stored, encrypted, and processed by XPense Manager (xmanager.bizzra.com), operated by Bizzra, adhering strictly to the Google Play Store Data Safety guidelines.
Encrypted in Transit
All client-server requests are protected via industry-standard TLS 1.3 / HTTPS encryption.
Zero Third-Party Sale
We do not sell, rent, or trade your personal or financial records to data brokers or advertisers.
Instant Account Deletion
Self-serve in-app deletion and public web deletion portal to purge all cloud entries permanently.
Google Play Data Safety Declaration Table
| Data Category | Specific Data Field | Collection / Sharing | Primary Purpose |
|---|---|---|---|
| Personal Information | Name, Email Address, Profile Picture | Collected (Not Shared) | Account creation, secure authentication, and workspace participant identification. |
| Financial Information | Income logs, Expense amounts, Budgets, Goals, Bill Splits | Collected (Not Shared) | Personal expense ledger, budgeting alerts, multi-currency conversion, and shared workspace accounting. |
| Device or Other IDs | Hashed Hardware ID (SHA-256), Device Model, Android OS version | Collected (Not Shared) | Enforcing subscription tier device seat quotas, fraud prevention, and session binding. |
| App Activity & Performance | App version, Sync timestamps, General error logs | Collected (Not Shared) | System reliability, delta sync resolution, and diagnostic service health. |
Storage & Encryption Standards
On your Android device, XPense Manager stores your records in a private Room SQLite database protected by Android OS-level application sandboxing. Other apps installed on the device cannot read or access this database.
Backend databases reside in secured environments protected by modern firewalls and access controls. Passwords are never stored in plaintext—only salted BCrypt hashes are maintained. Sensitive session tokens are rotated continuously.
Data Deletion Mechanisms
We strictly honor your right to be forgotten. When an account deletion is executed:
- All user credentials, profile pictures, and active device sessions are purged.
- All personal transactions, budget caps, and savings goals linked to your account are permanently erased.
- If you are the sole administrator of a workspace, the workspace is decommissioned and its shared split ledger is purged.