Privacy policy
Expense Sync · last updated 4 November 2026
Who uses it
Expense Sync is a personal tool with one user, its owner. It isn't offered to anyone else.
What it reads
With read-only Gmail access on the owner's own account, it looks for statement emails that carry a CSV attachment and reads those attachments. It can't send, change or delete email, and it doesn't read anything else.
Where the data goes
- The transactions go into an encrypted spreadsheet on the owner's laptop.
- An end-to-end encrypted copy is kept in the owner's own cloud database so the owner's phone app can sync. Only the owner's devices can decrypt it.
- Attachments are read in memory and aren't saved anywhere else.
- Nothing is sold, shared, used for advertising, or shown to anyone but the owner.
Access
Google's sign-in token is stored in Windows Credential Manager on the owner's laptop. The access can be removed at any time in Google Account › Third-party connections.
Google API data
Expense Sync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.