Privacy Policy

Last updated: September 21, 2026

1. Overview

EXP is a personal expense and notes application. This policy explains what information is processed when you use EXP.

2. Information we process

When you sign in with Google, EXP receives the Google account identifier, email address, name and profile image made available by Google. EXP also stores the expense records, notes, folders and preferences that you choose to save.

3. Where your data is stored

Your EXP application data is stored in the application's MySQL database on the EXP hosting server. Browser storage may be used for interface state or optional offline functionality, but it is not the permanent source of truth for your account data.

4. Google authentication

Google is used as the identity provider for sign-in. EXP does not receive or store your Google password. Authentication requests are handled through Google's authorization system.

5. Cookies and sessions

EXP uses necessary authentication cookies. Normal website sessions are shorter-lived. An installed PWA may use a longer-lived device session so that you do not need to sign in every time. Sessions can be revoked from your account controls.

6. Data security

EXP is designed to use HTTPS, secure authentication cookies, server-side authorization, prepared database statements and scoped user records. No security system can guarantee absolute security.

7. Export and deletion

You can export your account data. Account deletion is intended to remove your account data and associated records from the application database, subject to backup retention and operational requirements.

8. Third parties

Google processes authentication information under Google's own policies. EXP does not sell personal data.

9. Changes

This policy may be updated when the application architecture or features change. The effective date will be updated when material changes are made.

10. Contact

For privacy questions, use the contact method published by the EXP operator.