Your money data belongs to you
Expenses Report holds sensitive financial information, so here is a plain description of what is stored, who can see it, and how you can take it back or remove it.
What we store
Your account email and display name, the accounts, categories and budgets you create, the transactions you enter or import (amount, date, merchant, notes, category), and any financial health assessment you complete. Everything is stored in a managed Postgres database.
Who can see it
Every table enforces row-level security, so a signed-in account can only read the rows it owns, plus rows explicitly shared with its household. Transactions marked private are never visible to anyone else. People who operate and maintain the service have technical administrative access to the database for support, debugging and backups — no product feature exposes your data to other users.
Household sharing
When you join a household, your partners can see the accounts and categories you marked as shared and the non-private transactions inside them. Private transactions, and anything in an account or category you did not mark as shared, stay yours alone. Leaving or deleting the household stops that sharing immediately.
AI analysis
The optional AI analysis sends aggregated figures for the period you selected — totals, category sums, budgets and comparison numbers — to Google Gemini 2.5 Flash (via the Lovable AI gateway). It runs only when you ask for an analysis, and the result is shown to you rather than stored as a profile. We do not send your data to advertisers and we do not sell it.
Exporting your data
From Settings you can download a complete copy of everything your account holds — profile, accounts, categories, budgets, recurring rules, merchants, financial health answers and every transaction — as a single file. Transactions can also be downloaded as a spreadsheet-friendly CSV from the Transactions page.
Deleting your account
From Settings you can permanently delete your account. This removes your profile, accounts, categories, budgets, recurring rules, merchants, transactions and any financial health assessment, and deletes households you own. Data that belongs to other people is never deleted — where their transactions referenced you as a split partner, the reference is simply cleared. Deletion cannot be undone.
Why we use your data
Each activity below exists in the app today. Nothing else is done with your information.
Creating and running your account, signing you in, sending account emails.
Email address, sign-in identity, display name, chosen currency and language.
Needed to provide the service
Providing the budgeting, reporting and dashboard features you signed up for.
Accounts, categories, budgets, recurring rules, merchants and transactions you enter or import.
Needed to provide the service
Letting a partner you invited see the entries you chose to share.
Household name, membership, and the entries you explicitly mark as shared.
Only when you choose it
Looking up a merchant name, address and logo so entries are easier to recognise.
The merchant name you type while searching (no amounts, no account or transaction details).
Only when you choose it
Producing the optional written analysis of a reporting period.
Aggregated totals for the period you selected: category and group names, sums, budgets and transaction counts. No merchant names, no individual transactions, no email address, no account identifiers.
Only when you choose it
Calculating and re-opening your Financial Health report.
The answers you give in the Financial Health questionnaire and the resulting score.
Needed to provide the service
Understanding how the product is used, which features are adopted, and where sign-ups drop off.
Website and app activity only: pages viewed, product actions such as sign-up or report viewed, device and browser type, approximate location from the IP address. No amounts, no merchants, no balances, no email address.
Only when you choose it
Measuring how our advertising performs and improving it.
The same product-behaviour signals, used to attribute a registration to a campaign. Never the contents of your finances.
Only when you choose it
Diagnosing crashes so the app can be fixed.
Technical error details: message, stack trace and the page it happened on.
To keep the app working
Who else touches your data
These companies process data because of how the app is built. They act on our instructions and are not allowed to use your data for their own purposes.
Lovable Cloud (Supabase infrastructure)
Hosting, database, authentication and email delivery. Everything stored in your account, because the app runs on it.
Lovable AI gateway
Passes the optional AI analysis request to the model provider. Only the aggregated period totals described above, and only when you press Analyse.
Google (Analytics 4, Ads conversion measurement)
Analytics and advertising measurement. Runs only after you allow analytics or advertising in Privacy choices. Product-behaviour events and standard web/device data. No transactions, amounts, balances, budgets, scores or email addresses.
Meta (Meta Pixel)
Advertising measurement. Runs only after you allow advertising in Privacy choices. Page views and a registration-completed signal. No financial information.
Google (Gemini model, Google Places)
Generates the AI analysis text; returns merchant name, address and logo results. The aggregated period totals, or the merchant name you typed.
The hosting region and the paperwork with these providers have not been published here yet, so we make no claim about where servers are located.
How long it is kept
- Your accounts, transactions, categories, budgets, merchants and reports: Until you delete them, or until you delete your account. Nothing expires on its own.
- Files you import: Never stored. The file is read in your browser and only the entries you confirm are saved.
- AI analysis requests: Not stored by the app. The text is shown to you and disappears when you leave the page.
- Household invitations: They stop working after 14 days and can be removed at any time.
- Your account: Deleted immediately when you delete it. Backups held by the hosting provider may lag behind.
Your rights
You can see and correct your information in the app, download a full copy at any time, stop household sharing whenever you want, and delete your account permanently from Settings. You can also ask us to do any of these for you, or object to how your data is used, by writing to the address below. We answer within one month.
Analytics and advertising
With your permission we use analytics to understand how the product is used — pages visited, feature adoption, performance and sign-up funnels — and advertising technologies to measure how our marketing campaigns perform and to attribute registrations. Where these are used, the providers are Google (Google Analytics 4 and Google Ads conversion measurement) and Meta (Meta Pixel). Google Search Console, which shows how the site appears in search results, is not an advertising tracker and places nothing in your browser. We do not intentionally send the contents of your financial transactions, account balances, income, budgets, financial health scores or AI analysis to advertising or analytics platforms. Those systems only receive product actions such as "a registration was completed" or "a report was viewed". We do not sell your financial data.
Cookies and similar technologies
Necessary technologies keep you signed in, protect the service and remember settings such as your language, theme and privacy choices. They cannot be switched off without breaking the app. Analytics technologies are only used if you allow analytics. Advertising technologies are only used if you allow advertising. Both stay off until you choose, and you can change or withdraw your choice at any time through Privacy choices — in the footer of the public site and in Settings.
Security and problems
Access is protected by sign-in and per-row database rules that we test. No system is perfect: if something goes wrong that affects your data, we will tell affected users and, where required, the supervisory authority. Report a suspected problem to the contact address below.
Questions or requests
Expenses Report is responsible for this service. For privacy questions or data requests, write to privacy@expensesreport.com
Last reviewed 2026-09-07