Privacy Policy – WebExpenses

1. Overview

WebExpenses ("we", "our", or "the app") is a personal expense tracking application. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

When you sign in with Google, we receive:

Google profile information: your name, email address, and profile picture — used solely for authentication and displaying your identity in the app.
OAuth tokens: used to read and write data to your own Google Spreadsheet on your behalf.

3. Your Financial Data

We never see, store, or have access to your financial data. All expense and income entries are stored directly in a Google Spreadsheet in your own Google Drive. The app reads and writes to this spreadsheet using your authenticated Google account. We do not operate any database that stores your transactions.

4. How We Use Your Data

Authentication: We use Google Sign-In to verify your identity and authorize access to your spreadsheet.
App functionality: OAuth tokens are used in server-side API routes to interact with the Google Sheets API on your behalf.

We do not sell, share, or transfer your data to any third parties.

5. Cookies & Sessions

We use a session cookie to keep you signed in. This cookie is encrypted, HTTP-only, and contains only session identifiers. We do not use any tracking cookies, analytics, or advertising scripts.

6. Third-Party Services

Google APIs: We use Google OAuth 2.0 and Google Sheets API. Your use of these services is governed by Google's Privacy Policy.
Vercel: The app is hosted on Vercel. See Vercel's Privacy Policy.

7. Data Retention

We do not store your data on our servers. Session tokens are temporary and expire automatically. Your financial data resides entirely in your Google Drive and is subject to Google's retention policies.

8. Your Rights

You can at any time:

Revoke WebExpenses' access to your Google account via Google Account Permissions.
Delete the "WebExpenses" spreadsheet from your Google Drive to remove all financial data.
Sign out of the application to end your session.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with the updated date.

10. Contact

If you have any questions about this privacy policy, please open an issue on our GitHub repository or contact us at the email address listed in the app settings.