Last updated: [20-07-2026]
EmberPath ("the app", "we", "us") is an expense-tracking app for Android. This policy explains what data the app collects, why, and how you can control or delete it.
When you create an account (email/password or "Continue with Google"), we collect: - Email address - Full name (if provided) - A profile avatar/initials (derived from your name)
This data is what makes the app work — it is not used for anything beyond displaying it back to you (dashboards, reports, exports).
If you create or join a group to split expenses, we store the group name, its members, shared expense records, who paid, how costs were split, and settlement records — visible only to members of that group.
When you scan a receipt, the photo is processed entirely on your device using Google's ML Kit text recognition. The photo itself is never uploaded, stored, or transmitted anywhere — only the amount/date/note values you choose to keep are saved as a normal transaction.
If you enable biometric app lock, authentication is handled entirely by Android's own Biometric API. We never receive, see, or store your fingerprint, face, or any biometric data — your device tells the app only "yes" or "no."
Subscriptions are purchased through Google Play Billing. We receive confirmation that you have an active subscription and its expiry date — we never see or store your payment card details; that is handled entirely by Google.
We do not sell your data. We do not use your financial data for advertising.
Your data is stored using Supabase (our backend database/authentication provider) and cached locally on your device so the app works offline. Push notifications are delivered via Google's Firebase Cloud Messaging.
| Service | Purpose | What it receives |
|---|---|---|
| Supabase | Database, authentication, backend | Account & financial data you enter |
| Google (Sign-In) | Optional sign-in method | Your Google account email/name, if you choose this sign-in method |
| Google Play Billing | Subscription payments | Handled entirely by Google; we never see payment details |
| Firebase Cloud Messaging | Push notification delivery | A device token, if push notifications are enabled |
We do not share your data with any other third party, and we do not use third-party advertising or analytics SDKs.
We retain your data for as long as your account is active. If you delete your account, your data is permanently removed from our systems (see Section 5).
EmberPath is not directed at children under 13, and we do not knowingly collect data from children under 13.
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this policy or your data: shashank999n@gmail.com