Status: My Expense Control is in development; this page states the commitments the product is being built to, and functions as our privacy policy for this website and the waitlist. The app's full policy — reviewed by Indian data-protection counsel — publishes before the first beta user onboards, and can only be stricter than what's below.
"We will never sell your data. We will never show you ads. Your data exists to serve you — nobody else. If we ever recommend a financial product, it will be explicitly opt-in, clearly labeled, and fully disclosed — including what we earn from it."
| Data | Purpose | Retention |
|---|---|---|
| Bank-alert emails (read-only Gmail) | Detect and parse transactions | Raw text purged at 30 days; the parsed ledger remains yours |
| Bank statements you upload | Build your history instantly | Parsed rows kept; PDF passwords never stored or logged |
| Location (opt-in only) | Suggest the merchant you're standing at | Rounded to ~1 km before storage; raw coordinates are not kept |
| Card statement summaries | Dues, utilization, reminders | Issuer + last-4 only — never a full card number (RBI card-on-file rules) |
| Your corrections ("that was Medicines") | Teach your personal categorizer | Kept as your private merchant memory; deleted with your account |
Most transactions (about 4 in 5) are parsed by deterministic rules and never touch AI. When local parsing fails, the transaction's narration text is sent to our AI providers (currently Anthropic and OpenAI, whose servers are outside India — a cross-border transfer under the DPDP Act that we disclose here explicitly). Before any such call: account numbers, card numbers, email addresses and phone numbers are masked out; your name, identity, and location are never included; and every result is cached so the same text is never sent twice. We are additionally building the option to run all AI inference on our own India-resident hardware.
When you confirm a merchant's category, an anonymous vote (a salted, monthly-rotating hash — not your identity) improves a shared merchant registry so the next user near that shop gets a better suggestion. The shared registries contain no user identifiers by design, and your transactions themselves are never shared, aggregated views included, below strict minimum-population thresholds.
Data questions, requests, or complaints: hello@myexpensecontrol.com. We answer within 72 hours. Grievance-officer details will be published here alongside the app's launch policy.
Version 0.9 (pre-launch) · Last updated July 2026 · Material changes will be announced to waitlist members by email, never silently.