Privacy Policy

Account information

Your name and email address, collected when you create an account.

Financial data you enter

Transactions, income, expenses, investments, savings goals, and country/currency preferences. This data is private to your account.

Receipt images

Photos or images you upload for AI-powered receipt scanning. These are sent to our AI provider for processing and are NOT stored permanently — they are deleted immediately after processing.

Device information and usage analytics

Browser type, operating system, app version, and general usage patterns (e.g. features used, session duration). Used solely to improve the service. No advertising identifiers are collected.

To provide the ExpatPocket service

Your financial data powers your personal dashboard, reports, and insights.

AI-powered CFO insights

Financial summaries and insights are processed by the Anthropic API (Claude). Only the data needed to generate the insight is sent — no data is used to train AI models.

Payment processing

Subscription payments are handled exclusively by Stripe. We never see or store your full card details.

We never sell your data

Your personal and financial data is never sold, rented, or traded to any third party, ever.

We never use your data for advertising

Your financial data is never used for advertising, profiling, or marketing purposes by us or any third party.

Secure servers

All data is stored on Base44 infrastructure, hosted in the USA, with industry-standard physical and logical access controls.

Encryption in transit

All communication between your device and our servers uses HTTPS/TLS encryption.

Encryption at rest

Sensitive financial fields (such as account numbers and income figures) are encrypted at rest using AES-256 encryption.

Payment data

Payment card data is handled exclusively by Stripe, which is PCI DSS Level 1 compliant. We never store raw card numbers.

Access your data

You can view all your financial data directly in the app at any time. We will provide a full data export within 30 days of a written request.

Correct your data

You can edit any information in your profile and financial records directly within the app at any time.

Delete your data

Deleting your account (Settings → Danger Zone) permanently removes all your personal and financial data within 30 days.

Data portability

You can export all your transactions to Excel at any time via the All Transactions page.

Withdraw consent

You can cancel your subscription and delete your account at any time. Cancellation takes effect at the end of the current billing period.

Active accounts

Your data is kept for as long as your account is active or your subscription is active.

Cancelled accounts

If you delete your account, all personal data is permanently deleted within 30 days of the deletion request.

Receipt images

Receipt images are deleted immediately after AI processing. They are not stored on our servers.

Privacy email

privacy@expatpocket.com

Response time

We respond to all data subject requests within 30 calendar days.