XPenseManager

Privacy Policy

Google Play Compliant

Effective Date & Last Revision: November 6, 2026

At XPense Manager (“we,” “our,” “us,” or the “Application”), operated by Bizzra (bizzra.com), your personal privacy and the confidentiality of your financial logs are fundamental principles. This comprehensive Privacy Policy describes how we collect, store, synchronize, and protect your information when utilizing our Android mobile application and web ecosystem (xmanager.bizzra.com).

1 Scope & Offline-First Architecture

XPense Manager is engineered with an offline-first architecture. This means your primary financial entries, including expenses, income logs, budgets, category tags, and savings goals, are written directly to your local on-device SQLite database. When network connectivity is established, our intelligent delta sync worker coordinates bi-directional cryptographic synchronization with our secured cloud database to keep your authorized devices and collaborative workspaces aligned.

2 Categories of Information We Collect

A. User Account Credentials

Full name, registered email address, preferred system currency (e.g., INR, USD, EUR), profile avatar URL, and hashed password strings (secured via multi-round salted BCrypt hashing). We never store raw, readable passwords.

B. Financial Logs & Workspace Ledger

Transactional records created by you, including expense/income titles, numeric values, custom categories, transaction dates, budget expenditure targets, savings goal balances, deposit increments, and shared workspace bill split allocations.

C. Technical Device Identifiers

Irreversible cryptographic hashes derived from hardware parameters (SHA-256), device model name, manufacturer, Android OS version, IP address, system locale, and timezone. These are utilized solely for multi-device session enforcement, seat limit quotas according to your subscription tier, and session hijacking prevention.

3 Financial Data & Google Play Policy Compliance

In compliance with Google Play Financial Services & Personal Loans Policies:

  • Non-Banking Status: XPense Manager is a personal bookkeeping, manual expense tracking, and workspace ledger utility. We are not a licensed credit institution, money transmitter, bank, or payment processor.
  • No Fund Transmission: The application does not move, withdraw, hold, or execute automated bank wire transactions. All bill split balances and settlements are recorded as manual accounting ledgers among consenting users.
  • Zero Credit Bureau Reporting: We never transmit, sell, or report your financial entries or budget history to credit bureaus, credit rating agencies, or collection entities.

4 How We Process & Synchronize Data

We process your information strictly for legitimate application purposes:

  • Synchronizing changes between your local Android Room database and cloud backup.
  • Facilitating multiplayer workspace shared expenses, proposals, and democratic vote counts.
  • Delivering real-time in-app budget threshold breach notifications and system announcements.
  • Authenticating authorized access via stateless rotating JSON Web Tokens (JWT).

5 Multi-Device & Hardware Tokens

Users on different subscription tiers (Free, Gold, Platinum) have seat limits regarding the number of concurrently registered devices. Device data (model, hashed hardware ID, last seen timestamp) allows you to inspect active login sessions in your profile and remotely revoke any lost or decommissioned device at any time.

6 Zero Sale & Third-Party Providers

We do not sell, rent, monetize, or trade your personal or financial data to data brokers, third-party marketers, or commercial advertisers. We utilize trusted, industry-vetted SDK partners strictly to facilitate app operation:

Google Play Billing: Manages subscription validation and auto-renewals. We do not store or process credit/debit card numbers on our servers.
Google AdMob: Serves non-intrusive banner advertisements for Free Tier users. Paid Gold and Platinum users enjoy an entirely ad-free environment.
Secure SMTP Relay: Transmits 6-digit cryptographic OTP codes for account registration, email change confirmation, and password recovery.

7 User Rights, Deletion & Retention

Under international data protection legislation including GDPR and CCPA, you retain full rights to access, export, rectify, or erase your personal information:

Self-Serve In-App Deletion: You can permanently delete your account, cloud data, and avatar records anytime within the application under Settings → Delete Account.

Web-Based Deletion Portal: If you have uninstalled the app or lost access to your device, you can trigger full account purge at our public web portal: xmanager.bizzra.com/delete_account.php.

Upon confirmation, your data is irrevocably removed from active databases. Local SQLite data on your device is discarded whenever you clear app storage or uninstall the application.

8 Security Safeguards & Contact Details

All network traffic between the mobile application and API servers is protected by HTTPS with TLS 1.3 protocol encryption and modern 256-bit cipher suites. If you have questions regarding this policy or data processing practices, please reach out to our Data Privacy Officer:

Bizzra Security & Privacy Office
XPense Manager Operations • xmanager.bizzra.com
support@bizzra.com
Contact Support
© 2026 XPense Manager. Operated by Bizzra. All rights reserved.