Ctrl Xpenses privacy policy

Last updated: October 18, 2026

Ctrl Xpenses is a personal finance app that runs on your device. We do not have user accounts or our own servers holding your finances. We do not sell personal information or use it for advertising or tracking across apps. Some features rely on external providers for purchases, usage analytics, diagnostics, exchange rates and market quotes; they receive only the necessary data described in this policy.

Data we handle

All information you enter (transactions, accounts, categories, budgets, receipts, tags, investments and settings) is stored locally on your device. We cannot access, view or recover that financial content. When you use an online feature, only the specific data listed under “Network connections” is transmitted.

System permissions and features

• Camera / Photos: only when you choose to attach a receipt photo. The image is saved in the app’s private storage on your device.
• Microphone / speech recognition: optional, when you choose voice input. Audio is transcribed on your device only when the operating system supports on-device recognition for your language. It is not sent to our servers or a cloud transcription service. You can revoke these permissions in system Settings and continue typing or entering transactions manually.
• Notifications: for local reminders you configure. They are generated on your device; we do not send notifications from a server.
• Face ID / biometrics: optional, to lock the app. Your operating system handles authentication; we never see your biometric data.
• Shortcuts (iOS): if you create an automation to record purchases, the action runs on your device and the transaction is saved locally.

Reading receipts

Receipt text recognition runs on your device: Vision on iOS and ML Kit on Android. The photo is not sent to an OCR service. The Android OCR models are included with the app. Some optional language-recognition features may require model downloads through system services or provider SDKs; availability depends on the device and language. Check the detected fields before saving.

In-app purchases (Ctrl Xpenses Pro)

Ctrl Xpenses is free; Ctrl Xpenses Pro is an optional upgrade (monthly or annual subscription, or a one-time lifetime purchase). Purchases are processed by your store —Apple App Store or Google Play— and managed with RevenueCat, which acts as a purchase processor. These services may process purchase history and status, the store receipt, a pseudonymous purchase or installation identifier and basic technical information (device model, operating system, app version and store country) to validate and restore Pro access. We do not use this data for advertising or tracking. We never receive or store your card or payment method details.

Privacy policies: RevenueCat · Apple · Google.

Crash reporting

We use Firebase Crashlytics (Google) to find and fix errors. It may receive crash reports and other diagnostic data, such as device model, operating system and app versions, a pseudonymous installation identifier and technical traces. This information is used only to keep the app stable. The traces we add identify the operation type without recording investment symbols or amounts, transactions, balances, account names, budgets or receipts. See Firebase privacy information.

Network connections

In addition to the purchases and diagnostics described above, the app makes optional network requests for specific features:

• Exchange rates: the public service open.er-api.com receives only your base currency code (for example, MXN); no transaction or amount is sent.
• Investment prices: if you use the portfolio, query1.finance.yahoo.com receives the symbol or search term you request (for example, VNQ) to return public quotes. Quantities, costs, balances, account names and position details are not sent.

The app continues to work when you are offline or do not use these features.

Backups

You can export a backup (JSON file) or CSV from Settings. You control the file and decide where to share it (Files, email, etc.). We do not receive a copy.

Analytics and advertising

We use TelemetryDeck to understand which features are used and improve the app. Events about opening the app, navigation and interactions with features and Pro screens are sent, along with technical information such as app version, operating system and identifiers transformed through hashing by the SDK. We do not send your transactions, amounts, balances, account names, receipts or text you enter to analytics.

This data is used to analyze product usage, identify difficulties and prioritize improvements. We do not include advertising or use analytics for advertising tracking across apps. See TelemetryDeck’s privacy policy and its data handling explanation.

Retention and deletion

Local financial data remains on your device until you delete it in the app or delete Ctrl Xpenses. Exported files remain under your control. RevenueCat, Apple, Google, Firebase, TelemetryDeck and Yahoo retain the technical data they process under their own policies. See Privacy and deletion options to delete local data or request help regarding technical and purchase data.

Provider policies

See also the policies of Apple, Google, RevenueCat, Firebase, TelemetryDeck and Yahoo.

Children

The app is not directed at children under 13 and does not intentionally collect their data.

Changes

If we update this policy, we will publish the new version at this address with its date.

Contact

Privacy questions: [email protected]. For access or deletion requests, use the privacy options guide.