Privacy policy

Plain-language privacy. The legal version won't say less.

Status: My Expense Control is in development; this page states the commitments the product is being built to, and functions as our privacy policy for this website and the waitlist. The app's full policy — reviewed by Indian data-protection counsel — publishes before the first beta user onboards, and can only be stricter than what's below.

"We will never sell your data. We will never show you ads. Your data exists to serve you — nobody else. If we ever recommend a financial product, it will be explicitly opt-in, clearly labeled, and fully disclosed — including what we earn from it."

This website & the waitlist

The app: what we will collect, and why

DataPurposeRetention
Bank-alert emails (read-only Gmail)Detect and parse transactionsRaw text purged at 30 days; the parsed ledger remains yours
Bank statements you uploadBuild your history instantlyParsed rows kept; PDF passwords never stored or logged
Location (opt-in only)Suggest the merchant you're standing atRounded to ~1 km before storage; raw coordinates are not kept
Card statement summariesDues, utilization, remindersIssuer + last-4 only — never a full card number (RBI card-on-file rules)
Your corrections ("that was Medicines")Teach your personal categorizerKept as your private merchant memory; deleted with your account

Where AI is involved — full disclosure

Most transactions (about 4 in 5) are parsed by deterministic rules and never touch AI. When local parsing fails, the transaction's narration text is sent to our AI providers (currently Anthropic and OpenAI, whose servers are outside India — a cross-border transfer under the DPDP Act that we disclose here explicitly). Before any such call: account numbers, card numbers, email addresses and phone numbers are masked out; your name, identity, and location are never included; and every result is cached so the same text is never sent twice. We are additionally building the option to run all AI inference on our own India-resident hardware.

Anonymous community learning

When you confirm a merchant's category, an anonymous vote (a salted, monthly-rotating hash — not your identity) improves a shared merchant registry so the next user near that shop gets a better suggestion. The shared registries contain no user identifiers by design, and your transactions themselves are never shared, aggregated views included, below strict minimum-population thresholds.

Your rights (DPDP Act 2023)

Contact & grievance

Data questions, requests, or complaints: hello@myexpensecontrol.com. We answer within 72 hours. Grievance-officer details will be published here alongside the app's launch policy.

Version 0.9 (pre-launch) · Last updated July 2026 · Material changes will be announced to waitlist members by email, never silently.