This Privacy Policy explains how Ceylon Apz ("we", "us", or "our") handles your information when you use the ExpensesBook mobile application (the "App"). By using the App you agree to the practices described below.
1. Information we collect
Account information
ExpensesBook uses Google Sign-In to authenticate you. When you sign in, we receive your basic profile information from Google — your name, email address, and profile picture URL. We do not receive or store your Google account password.
Content you create
The App stores the expense books, pages, entries, labels, and notes you enter, including:
- Book and page titles
- Expense and income entries (amount, label, note, date)
- Currency and locale preferences
- App settings such as theme and reminders
Purchase information
When you subscribe to a paid plan, the transaction is processed by Google Play Billing. We receive a purchase token and subscription status from Google but never see your card number, CVV, or billing address.
Diagnostic data
We may collect anonymous crash reports and basic usage statistics (e.g. app version, device model, OS version, anonymised event counts) to keep the App stable. This data is not linked to your name or email.
2. How we use your information
- To sign you in and sync your books across your devices.
- To store and display the expense data you have entered.
- To verify your subscription entitlement and unlock paid features.
- To diagnose crashes and improve performance.
- To send service-related notifications (e.g. reminders you have enabled).
3. Where your data is stored
Your account and book data are stored in Google Cloud Firestore, a managed database service provided by Google. Data in transit is encrypted with TLS, and data at rest is encrypted by Google's infrastructure. Each user can only read and write their own records, enforced by server-side security rules.
| Data | Where it lives | Retention |
|---|---|---|
| Profile (name, email) | Firebase Authentication | Until account deletion |
| Books, pages, entries | Cloud Firestore | Until you delete them or your account |
| Subscription status | Google Play + Firestore | Until you delete your account |
| Crash logs | Firebase Crashlytics | 90 days (rolling) |
4. Sharing with third parties
We share information only with the service providers required to run the App:
- Google (Firebase, Play Billing, Sign-In) — authentication, storage, payments, crash reporting.
- Law enforcement — only if required by a valid legal request.
We do not sell, rent, or trade your personal data.
5. Your choices and rights
- Access & export: view your data inside the App at any time.
- Edit & delete: change or remove any entry, page, or book from the App.
- Delete account: from Settings → Account → Delete account, or by emailing us. This removes your profile and all associated books.
- Manage subscription: manage or cancel anytime via your Google Play account.
6. Children's privacy
ExpensesBook is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us information, contact us and we will delete it.
7. International users
The App is offered worldwide. Your data may be processed in countries other than your own, including the United States, where Google operates infrastructure. By using the App you consent to this transfer.
8. Security
We use industry-standard safeguards — TLS in transit, encryption at rest, and per-user Firestore rules — to protect your data. No system is perfectly secure, so we cannot guarantee absolute security, but we work to keep the App safe and to notify you of any material breach as required by law.
9. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, surface a notice inside the App. Your continued use of the App after the change means you accept the updated policy.
10. Contact us
Questions, requests, or data deletion enquiries:
ceylonapz@gmail.com