Privacy Policy for EmberPath

Last updated: [20-07-2026]

EmberPath ("the app", "we", "us") is an expense-tracking app for Android. This policy explains what data the app collects, why, and how you can control or delete it.

1. Information we collect

Account information

When you create an account (email/password or "Continue with Google"), we collect: - Email address - Full name (if provided) - A profile avatar/initials (derived from your name)

Financial data you enter

This data is what makes the app work — it is not used for anything beyond displaying it back to you (dashboards, reports, exports).

Shared/group expense data

If you create or join a group to split expenses, we store the group name, its members, shared expense records, who paid, how costs were split, and settlement records — visible only to members of that group.

Receipt scanning

When you scan a receipt, the photo is processed entirely on your device using Google's ML Kit text recognition. The photo itself is never uploaded, stored, or transmitted anywhere — only the amount/date/note values you choose to keep are saved as a normal transaction.

Device & notification data

Biometric app lock

If you enable biometric app lock, authentication is handled entirely by Android's own Biometric API. We never receive, see, or store your fingerprint, face, or any biometric data — your device tells the app only "yes" or "no."

Subscription/purchase information

Subscriptions are purchased through Google Play Billing. We receive confirmation that you have an active subscription and its expiry date — we never see or store your payment card details; that is handled entirely by Google.

2. How we use your information

We do not sell your data. We do not use your financial data for advertising.

3. Where your data is stored

Your data is stored using Supabase (our backend database/authentication provider) and cached locally on your device so the app works offline. Push notifications are delivered via Google's Firebase Cloud Messaging.

4. Third parties

Service Purpose What it receives
Supabase Database, authentication, backend Account & financial data you enter
Google (Sign-In) Optional sign-in method Your Google account email/name, if you choose this sign-in method
Google Play Billing Subscription payments Handled entirely by Google; we never see payment details
Firebase Cloud Messaging Push notification delivery A device token, if push notifications are enabled

We do not share your data with any other third party, and we do not use third-party advertising or analytics SDKs.

5. Your rights: export and deletion

6. Data retention

We retain your data for as long as your account is active. If you delete your account, your data is permanently removed from our systems (see Section 5).

7. Children's privacy

EmberPath is not directed at children under 13, and we do not knowingly collect data from children under 13.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact us

Questions about this policy or your data: shashank999n@gmail.com