ExpenseHub Privacy Policy
Last updated: 16 October 2026 · Applies to ExpenseHub for Android (com.kanastudio.expensehub) version 1.3.0 and later
ExpenseHub does not collect your data. There is no account, no sign-up, and no ExpenseHub server. Everything you record stays on your phone unless you choose to back it up to your own Google Drive.
What we collect
Nothing. KanaStudio operates no server for this app and receives no data from it — not your transactions, not your bank alerts, not analytics, not crash reports, not an advertising identifier. We could not look at your spending if we wanted to.
The only records KanaStudio can see are the ones Google Play keeps for any paid app: if you buy ExpenseHub Plus, the Google Play Console shows us the order (order number, product, date, country and status) so we can handle refunds and taxes. We never see your card or payment details. See "ExpenseHub Plus and payments" below.
What the app stores, and where
| Data | Where it lives |
|---|---|
| Transactions, categories, spaces, accounts, budgets, goals, plans, loans, recurring rules, splits, settings | In the app's private storage on your device, readable only by ExpenseHub. |
| Payments detected from bank alerts, waiting for you to add or dismiss them | On your device only, in the same private storage. Dismissed ones are deleted. |
| A Google Drive access token, if you connect Drive | On your device only. It is excluded from Android cloud backup so it never leaves the phone. |
| Your ExpenseHub Plus status | Checked with Google Play on your device and kept on your device. |
| App lock and Hide Amounts preferences | On your device only, deliberately per-device and never synced. |
Bank alerts and notification access (optional, off by default)
ExpenseHub can add payments for you from the alerts your bank apps and SMS app show as notifications. This only works if you turn on auto-capture and grant ExpenseHub Notification access in Android's settings — the app cannot switch it on by itself.
- ExpenseHub reads notifications only from the apps you pick in its settings. Notifications from every other app are ignored and never stored.
- From those apps it looks only for payment alerts, and takes the amount, merchant, date and which app it came from. Each detected payment waits on your Dashboard until you tap to add it or dismiss it.
- Everything is processed on your phone. Nothing it reads is sent anywhere.
- ExpenseHub cannot read your SMS inbox. It does not have the SMS permission; it only sees a notification while Android shows it.
- You can stop it at any time: turn off auto-capture in ExpenseHub, or remove ExpenseHub from Settings → Notifications → Notification access (the exact path varies by phone).
Google Drive backup (optional, off by default)
If you connect Google Drive, ExpenseHub writes a single backup file to your own Drive account. It uses the drive.file scope, which grants access only to files this app itself creates — ExpenseHub cannot see, read, or list any other file in your Drive.
That backup goes from your phone to Google over HTTPS. It does not pass through, and is not visible to, KanaStudio. Disconnecting Drive in Settings removes the app's access; the backup file remains yours to keep or delete from Drive. You can also remove access at Google Account Security Third-party connections.
Google Drive backup is part of ExpenseHub Plus.
ExpenseHub Plus and payments
ExpenseHub is free to use with some limits. ExpenseHub Plus is an optional monthly or yearly subscription that removes them and adds Google Drive backup.
- Purchases are made and processed entirely by Google Play under the Google Play Terms of Service and Google's Privacy Policy. ExpenseHub uses Google Play Billing; it never handles your card or payment details.
- Your subscription status is checked with Google Play on your device. You do not need an ExpenseHub account.
- You can cancel at any time in Google Play → Profile → Payments & subscriptions → Subscriptions. Refunds are handled under Google Play's refund policy.
- Nothing you have entered is hidden or deleted, whether or not you subscribe.
Google Play services in the app
ExpenseHub includes Google's own libraries for Google Play Billing, in-app updates and in-app reviews. When you buy Plus, update the app from inside it, or leave a rating, these talk to Google Play on your device, and Google may log technical information about those requests under Google's Privacy Policy. None of it is sent to, or visible to, KanaStudio. ExpenseHub contains no advertising, analytics or crash-reporting SDKs.
Android backup
Your ledger is included in Android's own backup and device-transfer, so a new phone can restore it. That is handled by Google under your Google account's terms, not by us. The Drive access token is explicitly excluded.
Permissions
| Permission | Why |
|---|---|
Notification access (BIND_NOTIFICATION_LISTENER_SERVICE) | Optional bank-alert auto-capture, only for the apps you pick. You grant it yourself in Android's settings. |
INTERNET, ACCESS_NETWORK_STATE | To back up to your Google Drive when you have connected it, and for Google Play purchases, updates and reviews. ExpenseHub has no server of its own to talk to. |
com.android.vending.BILLING | To buy and check ExpenseHub Plus through Google Play. |
POST_NOTIFICATIONS | Bill reminders, budget alerts and the weekly summary, if you turn them on. Requested at that moment, never at launch. |
RECEIVE_BOOT_COMPLETED, WAKE_LOCK, FOREGROUND_SERVICE | To keep scheduled reminders and recurring entries working after your phone restarts, and to finish a backup you started. |
USE_BIOMETRIC / USE_FINGERPRINT | The optional App Lock. Authentication is performed by Android; ExpenseHub never sees your fingerprint, face or PIN. |
VIBRATE | A light buzz when you save an entry. |
ExpenseHub does not request access to your SMS messages, call log, contacts, location, camera, photos or files, or the list of apps installed on your phone, and does not use an advertising ID.
Children
ExpenseHub is a general-audience budgeting tool and is not directed at children under 13. Since it collects no data, it collects none from children either.
Your control over your data
- Export everything to a file at any time, from Settings → Export Data.
- Delete everything with Settings → Factory Reset, which clears the ledger, its snapshots, detected payments and any local backup copy.
- Uninstalling removes all on-device data. Any file already in your Drive stays there until you delete it.
- Notification access can be removed at any time from Android's settings.
There is no deletion request to send us, because there is nothing held on our side to delete. Purchase records kept by Google Play are managed through your Google account.
Security, stated plainly
Data is stored in the app's private sandbox, which other apps cannot read on a non-rooted device. Traffic to Google Drive and Google Play uses HTTPS. The optional App Lock adds a biometric or device-credential check when opening the app.
To be straightforward about the limit: the ledger itself is not separately encrypted at rest beyond the protection Android gives app-private storage and full-disk encryption. Anyone who can unlock your phone and open the app can see your transactions, which is why App Lock exists.
Changes
If this policy changes in a way that affects how your data is handled, the updated date above will change and the new version will be published here before the release that relies on it.
Contact
KanaStudio — design.kanastudio@gmail.com