Skip to content

Privacy and Security

Jump to bottom
patilyashh edited this page Aug 6, 2026 · 1 revision

Privacy & Security

This page summarizes the full Privacy Policy (also in the repo as PRIVACY.md) and the in-app security features. If anything here and the policy disagree, the policy is authoritative.

The short version

XPENC stores everything on your phone and nothing anywhere else. No server, no user accounts, no analytics, no crash reporting, no ads, no third-party SDKs that collect data. Release builds don't request the INTERNET permission at all — the app is technically incapable of transmitting your data anywhere.

What's stored, and where

Accounts and balances, transactions (income/expense/transfer) with amounts, dates, categories and notes, budgets and alerts, persons and their dues, reminders and calendar entries, and app settings — all in a private SQLite database inside the app's private storage area, sandboxed by Android from other apps. It is never transmitted to the developer or anyone else; the developer has no way to see, access, or recover it.

Permissions XPENC requests

Permission Why
POST_NOTIFICATIONS (optional, runtime) Budget alerts and the reminders you set. Deny it and the app still works, just silently.
RECEIVE_BOOT_COMPLETED Re-schedule your local reminders after a restart.

That's it. No SMS, location, camera, microphone, contacts, storage, or internet permission. (VIBRATE is also present — a standard permission pulled in by the notifications library so alerts can vibrate; it gives no access to your data.)

In-app security features

  • Passcode lock (Settings → Security, since 1.3.0): a 4–6 digit PIN gates the app on open, with optional biometric (fingerprint/face) unlock layered on top. It's device-local — restoring an older backup never silently disables a passcode you've since set, and the passcode itself isn't touched by backup/restore.
  • Screenshot blocking (Settings toggle, v1.3.1 beta): blocks screenshots and screen recording and blanks the app's recent-apps thumbnail, via Android's native FLAG_SECURE.
  • Calendar privacy: the day-wise calendar shows a plain dot per direction (income/expense), not the amount — safe for a glance if someone else sees your screen.

Backups and exports are your responsibility once they leave the app

In-app JSON/CSV exports are created only when you tap the button and are handed to the Android share sheet — you choose where they go. They contain your financial records in readable form, so treat an exported file the way you'd treat a bank statement. The developer never receives them, but if you email or upload one yourself, that's outside XPENC's control.

Automatic backups (since 1.3.0) live in the public Download/BACKUP XPENC folder on your device — accessible to any app you've granted broad storage access to, same as any other file in Downloads.

Data retention and deletion

Your data stays until you remove it:

  1. Delete individual records inside the app.
  2. Settings → Clear all data — wipes the ledger to fresh-install defaults (after an automatic safety backup); preferences and backup history are left alone.
  3. Clear the app's storage in Android Settings, or uninstall it entirely.

There's no server-side copy, and no account to close.

Open source, independently verifiable

XPENC is MIT-licensed. Every claim above can be checked by reading the code, and F-Droid builds the app from this exact source tree — nobody has to trust a binary someone uploaded.

Reporting a vulnerability

Use private vulnerability reporting on GitHub rather than a public issue — see SECURITY.md in the repo.

See also

Home

Using XPENC

Project

Elsewhere

Clone this wiki locally