Who we are
ExpenSpace is operated by Aliph Marketing Studio. Privacy questions can be sent to asadmalik.pk@gmail.com or aliphmarketingstudio@gmail.com. You can also reach us on +92332588801.
This draft covers the ExpenSpace website and the Android app. It needs the operational confirmations listed below before publication as a final notice.
Information you send through this website
The contact form asks for your name, email address and message. We use these details to receive your request, understand it and reply. Your message is delivered to our configured inbox through our email service. Your email address is used as the reply address.
Do not include passwords, payment-card details or unnecessary private financial information. The form is not a place to upload expense records.
The website also uses basic request information for security and abuse prevention, including limiting repeated contact attempts. Hosting and email services can process technical information needed to deliver the website and messages. The final notice must identify the selected providers and their retention settings.
Optional website analytics
With your permission, this website loads Google Analytics to help us understand which pages people visit, whether they follow a Google Play link and whether a contact submission succeeds. Analytics may process device and browser information, page activity and online identifiers.
Our website event configuration excludes contact-form names, email addresses and message text. It also excludes arbitrary URL query values. We do not need your expense records to measure website use.
You can accept or reject analytics. Use Cookie preferences in the footer to change that choice. Rejecting analytics does not prevent you from browsing the website or contacting us. Your choice is saved in your browser; clearing browser storage or changing browsers may require you to choose again.
Read Google's Privacy Policy for information about Google's processing. The website's final analytics settings and retention period must be reviewed before publication.
Your ExpenSpace account
ExpenSpace uses account authentication, including Google sign-in, to identify the person using the app and control access to Spaces. Account and profile information, membership status and invitations support the features associated with your account.
Using a Local Space does not mean that account authentication or all app services operate only on your phone. The distinction below concerns where your expense records are kept.
Free Local expense records
Free Local Spaces store their expense records on your device and do not sync those records to the cloud. They are private and do not support other members.
Records can include the date, amount, currency, category, payment method and description you enter. Protect your device and account access. Clearing app data, uninstalling the app or losing the device can affect access to Local records; signing in again does not provide a Cloud copy of them.
Premium Cloud expense records
Premium Cloud Spaces use cloud storage to make records available to authorized members. This includes expenses and related Space information, such as membership, roles and budgets. The app may keep a local cache to support its operation.
People with access to a Space can see information according to their role. Consider who is in a Space before adding personal details. Where export is permitted, members may create copies outside ExpenSpace. Removing a member cannot erase copies they have already exported.
Google Firebase supports app services such as authentication and Cloud storage. See Privacy and Security in Firebase for Google's description of its services. The final policy must list the specific services enabled in the released app, including any analytics and crash reporting, and their relevant settings.
How information is used and shared
Information is processed to provide the features you choose, manage access, deliver shared records, respond to requests and protect the service from misuse. Cloud information is shared with the members you authorize through the app's access controls.
Hosting, authentication, cloud storage, analytics and email providers may process information to deliver their respective services. Their locations and contractual arrangements must be confirmed before the final policy describes international processing or transfers.
We may need to respond to lawful requests or protect rights and security in accordance with applicable law. The final notice must identify the legal grounds that apply to the operator and the markets it serves.
Retention and deletion
Local record availability depends on the data stored on your device. Cloud records, account information, support messages, analytics and technical logs have different operational needs. Their specific retention schedules, deletion processes and backup handling are pending confirmation; this draft does not promise a retention period.
For a privacy or deletion request, contact us. We may need to confirm your identity and authority over a shared Space. Deleting shared information can affect other members, while deleting an account may involve separate records and service providers. The available app controls and request procedure must be verified before this notice becomes final.
Your choices and rights
You can choose whether to permit website analytics, what information to put in a message and whom to invite to a Cloud Space. Choose a Free Local Space when you want private expense records stored on your device.
Depending on the law that applies to you, you may have rights concerning access, correction, deletion or other handling of your personal information. Contact us to make a request or raise a concern. We will explain the next steps relevant to the request rather than assume the same rules apply everywhere.
Security and updates
No online service or device can promise absolute security. Use a secure account, protect your device and share access carefully. Let us know if you suspect a privacy or security issue.
We will update the date shown on this page when this policy changes. Operator details, children's privacy provisions, legal grounds, retention schedules, deletion handling and provider information still need review before publication.