Built for Trust.
Backed by Proof.
Financial tools should demonstrate security, not just claim it. Here is an exact, unvarnished disclosure of how your data is handled, stored, processed, and destroyed.
What We Never Ask For
The safest financial data is data we never hold. XPENSEDIARY is deliberately engineered so that your banking credentials never enter our system:
- ❌ Netbanking Passwords
- ❌ UPI PINs
- ❌ Debit / Credit Card CVVs
- ❌ Card Expiration Dates
- ❌ Bank Account Passwords
- ❌ One-Time Passwords (OTPs)
We operate on a user-initiated logging model. You text what you want to track (e.g., ₹250 coffee or forward an SMS notification). We never connect directly to your bank account or pull transactions automatically without your knowledge.
What Happens When You Send an Expense?
Here is the exact journey of a message sent to XPENSEDIARY:
1. You send a WhatsApp message
You text ₹450 dinner or send a bill photo to our verified WhatsApp Business number. WhatsApp encrypts the message en route using its Signal-protocol encryption.
2. Meta WhatsApp Business Cloud API
Meta delivers the webhook payload to our application server over an HTTPS connection verified with a secure webhook HMAC secret signature.
3. Processing & Normalization
Our server normalizes numerals, strips conversational noise, and identifies the transaction amount, merchant, and category.
4. Encrypted Database Storage
The structured record (e.g. Amount: 450, Category: Food & Dining, Date: Today) is written to your isolated user account. Your full chat history is not retained as a message archive.
5. Instant Confirmation
We dispatch an encrypted response back to your WhatsApp thread with updated budget percentages and an immediate undo option.
How AI Models Process Your Messages
We use AI for natural language parsing and receipt OCR. Because this involves third-party APIs, here are our exact contractual rules and protections:
| Question | Our Exact Policy |
|---|---|
| Which AI providers? | Google Gemini (Gemini 2.5 Flash for vision OCR) and Groq (Llama-3 & Whisper for text/voice). |
| Is personal identity sent? | No. Your phone number, name, and database ID are stripped before sending the message text or image to the AI prompt. The model sees only the transaction text. |
| Is data used to train AI models? | No. We operate exclusively under paid commercial enterprise API agreements. Both Google Cloud and Groq enterprise terms explicitly state that customer API data is never used to train or refine public foundation models. |
| Are receipt photos stored by AI? | No. Images sent for OCR are processed in-memory by the Vision API and discarded once the JSON output is returned. |
| What happens to voice notes? | Audio clips are transcribed via the Whisper API in temporary memory and converted to text. The audio file is not permanently stored. |
Infrastructure & Access Controls
Security is built into our server architecture, code deployment pipeline, and database management:
🔒 Transit & Rest Encryption
All traffic to our web dashboard and WhatsApp webhooks is enforced over TLS 1.3 / HTTPS with modern cipher suites. Databases and object storage are encrypted at rest using industry-standard AES-256.
🛡️ Database Isolation
The production database does not listen on public internet ports. It is restricted to internal application network sockets with strict IP allowlisting.
👥 Employee Access Control
Only verified technical founders have administrative access to production systems. Access requires hardware-level SSH keys and multi-factor authentication (MFA).
🔄 Automated Backups
Encrypted database backups are performed daily and replicated to isolated, read-only offsite cloud storage for disaster recovery.
Retention Periods & Permanent Deletion
You retain complete ownership of your personal finance data. We never trap your data or make deletion difficult:
| Data Category | Retention Period | Deletion Mechanism |
|---|---|---|
| Expense & Income Records | Retained while your account remains active. | Delete individually on chat with delete, on dashboard, or wipe account. |
| Raw WhatsApp Messages | Ephemeral in-transit processing only. | Not archived as raw chats. Discarded immediately after parsing. |
| Uploaded Receipt Files | Retained in private storage for your audit records. | Deletable anytime or wiped upon account deletion. |
| Deleted Accounts | 0 days (immediate permanent wipe). | Click "Delete Account" in Settings. Expenses, receipts, and user mapping are immediately purged. |
Settings → Download My Data or texting export on WhatsApp.
Incident Response & Responsible Disclosure
We adhere to a strict incident response protocol:
- 72-Hour Notification Commitment: In the event of any verified security incident impacting customer data, we commit to notifying affected users via WhatsApp and email within 72 hours.
- Continuous Auditing: Application dependencies and server security packages are reviewed and patched regularly.
- Responsible Disclosure: If you discover a vulnerability or security flaw, please contact us immediately at security@xpensediary.com. We respond to all security inquiries within 24 hours.