Loading...
AI Expense
Effective Date: 2026-07-31
App AI Expense
Website: https://ai-expense.emuinbox.com
Contact: [email protected]
For public policy access, AI Expense may publish this Privacy Policy on https://ai-expense.emuinbox.com and may also provide access within the app where supported.
This Privacy Policy explains how AI Expense collects, uses, stores, transfers, and protects personal information when you use the AI Expense mobile application and related services.
This version is drafted based on the current AI Expense product scope reflected in the app, including account registration and sign-in, email verification and MFA, Google sign-in, invoice or receipt upload, AI/OCR-based document recognition, duplicate checking, export of CSV or ZIP files, system sharing, billing and in-app purchase flows, and limited mailbox workflow features where enabled.
Current product documents also describe a trial-first model with limited introductory benefits, subscription-based paid access, separately purchased credit top-ups, potential future rewarded-ad reward-unit features for eligible users, and a limited export-result retention window. If the live product, store listing, or in-app disclosures present different operational details at the relevant time, those live disclosures control for that flow.
For storefront and in-app purchase disclosures, AI Expense distinguishes between:
This Privacy Policy is intended to support compliance with applicable privacy requirements in Australia, the European Union, the United States, and the People's Republic of China. Final published language should still be reviewed by legal counsel together with the actual production deployment, vendor contracts, and data retention settings.
This Privacy Policy applies to personal information processed through:
This Privacy Policy does not govern third-party services that you access independently, such as Apple App Store, Google Play, Google OAuth, device operating system features, or external apps you choose when sharing exported files. Those third parties process data under their own privacy notices.
Where AI Expense provides links in the app to this Privacy Policy, Terms and Conditions, subscription management, or account deletion resources, those resources form part of the user-facing privacy and account control experience but do not expand the purposes of processing beyond what is described in this Privacy Policy.
Where the live product displays store-facing price strings, those displays may include a currency code such as USD together with the store price in order to reduce ambiguity where different currencies share the same symbol.
We collect only the limited account information needed to provide sign-in and account security features. This may include:
If you choose Apple sign-in, we may also receive and process limited Apple account sign-in data such as:
Where Apple provides only a relay address, AI Expense may treat that relay address as account-related sign-in data rather than as your preferred public contact address.
We do not intentionally collect or require your personal residential address, date of birth, government-issued identification number, passport number, or similar personal identity details in order for you to use AI Expense.
When you upload invoices, receipts, or similar expense documents, we may collect and process:
When you create an export task, we may process:
If you use the device share function, the exported file is first prepared locally on your device and then passed to the operating system share sheet or selected app.
If you subscribe or purchase credits, we may process:
We do not receive your full payment card number from Apple or Google for in-app purchases handled by their stores.
We may collect or generate:
If AI Expense offers optional rewarded advertisements, we may collect or receive limited advertising-related information needed to request ads, measure delivery, prevent abuse, and determine whether a reward should be granted. This may include:
Where reasonably possible, AI Expense aims to configure ad delivery controls so that third-party ads align with the app's applicable platform age rating and policy requirements. However, ad content is delivered by third-party advertising partners, and actual ad availability or ad creatives may still vary by platform, region, device, privacy choice, applicable law, and advertising inventory.
If you enable biometric quick unlock on a supported device:
If mailbox workflow features are enabled for your account, we may process:
These features are optional and may not be enabled for all users.
Some information processed through AI Expense may be considered sensitive personal information or sensitive personal data under applicable law, including:
We process sensitive information only where necessary to provide the service, protect security, comply with law, or with consent or separate consent where required by applicable law.
We use personal information to:
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
For Apple relay-address accounts, we may also limit how certain account fields are displayed inside the app. For example, the app may hide the relay email address or nickname in account-information screens where showing those values could incorrectly suggest that the relay address is a normal editable contact email.
Depending on your location, we rely on one or more of the following legal bases:
If we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully before withdrawal.
AI Expense uses automated tools, including OCR and related recognition logic, to identify and structure information from uploaded expense documents. This may affect how records are categorized, summarized, flagged for duplicate risk, or prepared for export.
Important points:
AI Expense is not intended to make solely automated legal, employment, credit, or insurance decisions about individuals through this app.
AI Expense may offer eligible users optional rewarded advertisements. Where this feature is available, a user may choose to watch a rewarded ad in order to receive a limited in-app promotional reward unit or similar usage entitlement.
Rewarded ads may be delivered by third-party advertising, mediation, analytics, fraud-prevention, or measurement partners. Depending on the app version, device, platform, region, and applicable law, these partners may process limited data such as device and app identifiers, IP address, coarse location derived from IP, app version, operating system, language, ad request and response data, impression data, reward-verification events, and anti-fraud or diagnostics data.
Where reasonably possible, AI Expense uses platform and advertising-provider controls intended to limit ad content so that it aligns with the app's applicable platform age rating and policy requirements. Even with such controls, AI Expense does not individually review every ad creative, and the specific ads shown may vary based on platform, region, inventory, device, privacy choices, and applicable law.
We use this information to:
Depending on your jurisdiction, platform, and privacy choices, ads may be contextual or non-personalized.
Where required by applicable law or platform rules, AI Expense will provide in-app disclosures, consent flows, and privacy options for advertising-related data processing.
AI Expense may use OpenAI or other third-party AI, OCR, document processing, cloud, or security service providers to process uploaded invoices, receipts, images, PDFs, extracted fields, and related metadata solely for the purposes described in this Privacy Policy.
You should not upload information that is not necessary for expense recognition or expense management. This includes, where possible, government identification numbers, full payment card numbers, health information, precise home address details, personal information about unrelated individuals, confidential business information that you are not authorized to submit, or other sensitive information that is not needed for the requested feature.
If you choose to upload documents or files that contain personal information, sensitive information, third-party personal information, or confidential information, you are responsible for ensuring that you have the required rights, permissions, notices, and consents to submit that information for processing by AI Expense and its service providers.
Third-party AI and OCR service providers may process submitted content under their own applicable service terms, privacy notices, data processing agreements, security controls, abuse-monitoring requirements, retention settings, and legal obligations. We use reasonable efforts to select service providers with appropriate privacy and security commitments, but we do not control every independent processing activity, legal obligation, security review, or provider-side retention practice that applies within those providers' own systems.
For users in the European Union, the United States, and Australia, our use of such service providers is intended to be handled consistently with applicable privacy requirements, including appropriate transparency, service-provider or processor arrangements where required, reasonable security measures, and cross-border transfer safeguards where applicable.
We may share personal information with:
We require service providers to process personal information only on authorized instructions and to apply appropriate confidentiality and security measures.
We do not sell personal information and do not disclose personal information to data brokers.
AI Expense may process or make information accessible across borders where this is necessary to operate the service, support users, store files, validate purchases, or secure infrastructure.
The primary cloud infrastructure for AI Expense is hosted on Amazon Web Services in Sydney, Australia.
If you are in a jurisdiction with transfer restrictions, we will use measures appropriate to the transfer, which may include:
| Region | Privacy approach |
|---|---|
| European Union / EEA / UK | GDPR-based transparency, legal basis controls, transfer safeguards, and data subject rights |
| Australia | Privacy Act 1988 and Australian Privacy Principles, including cross-border handling obligations |
| California and other applicable US states | state privacy rights, notice, deletion/correction access processes, and no sale / no sharing for cross-context behavioral advertising |
| China | PIPL-aligned notice, purpose limitation, necessity, separate consent where required, and cross-border handling controls |
If future production architecture introduces additional regions, disaster recovery locations, or third-party subprocessors outside Australia, we may update this Privacy Policy accordingly.
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including service delivery, account maintenance, billing, security, dispute resolution, backup, and legal compliance.
Retention may vary by data type:
Under the current app behavior reflected in this repository:
3 months, after which they may expireWhen retention is no longer necessary, we delete, anonymize, or de-identify data unless continued retention is required by law.
Before publishing, replace this section with the actual operational retention schedule if one has been formally approved.
We use reasonable technical, administrative, and organizational safeguards designed to protect personal information, which may include:
No method of transmission, storage, or processing is completely secure. You are responsible for maintaining the confidentiality of your credentials and for using the share function carefully when exporting files to external apps or recipients.
On supported devices, certain credentials or session materials may be stored using operating-system-backed secure storage in order to support sign-in continuity, biometric quick unlock, or similar account security features.
Depending on where you are located and subject to applicable law, you may have the right to:
If the GDPR applies, you may have the rights of access, rectification, erasure, restriction, portability, objection, and the right not to be subject to certain solely automated decisions with legal or similarly significant effects.
If applicable state law grants you these rights, you may request:
AI Expense does not sell personal information and does not share personal information for cross-context behavioral advertising.
If Australian privacy law applies, you may request access to and correction of your personal information, subject to applicable exceptions.
If the PIPL applies, you may have rights to know, decide, restrict or refuse processing, access, copy, correct, supplement, delete, and request explanation of processing rules, and to withdraw consent where consent is the processing basis.
To exercise privacy rights, request account deletion, or ask a privacy question, contact us at:
We may need to verify your identity before fulfilling a request. We may also decline or limit a request where permitted by law, such as when the request is manifestly unfounded, excessive, would adversely affect others' rights, or falls within a legal exemption.
If you request deletion of your app account, we will delete or de-identify the personal information and AI Expense business data associated with that account unless we are required or permitted by law to retain certain records for security, fraud prevention, accounting, tax, dispute resolution, or legal compliance purposes.
This deletion is intended to include the user-visible AI Expense data associated with that account, such as:
Where retention is not legally required, we do not intend to continue keeping your recognized expense history as ordinary reusable business data after account deletion.
Where the live product supports later re-registration or restoration of the same AI Expense account identity after an account deletion request, we may retain and later re-associate limited account records that are reasonably necessary to:
Examples of records that may be retained on this limited basis include:
This does not mean we keep all deleted content indefinitely. We will still delete, de-identify, or restrict personal information when retention is no longer necessary for these purposes or when applicable law requires deletion.
If your AI Expense account uses Apple sign-in with a relay or "Hide My Email" address, deletion of the AI Expense account does not itself delete or change your Apple account, your Apple relay-address configuration, or your Apple sign-in settings outside AI Expense.
Where supported by the live product, AI Expense may provide:
Submitting an account deletion request does not by itself cancel an Apple App Store or Google Play subscription. Subscriptions are managed through the applicable platform billing account unless local law or platform rules require otherwise.
Deleting an AI Expense account and later re-registering the same underlying account identity does not by itself create a new introductory trial. If the live product supports reactivation, we may continue to recognize prior trial status, remaining trial balance, prior purchases, and subscription history for that same account identity.
AI Expense is designed for business and productivity use and is not directed to children.
We may update this Privacy Policy from time to time to reflect changes in the service, law, security practices, vendors, or business operations.
If a change is material, we will provide notice through the app, website, email, or another appropriate channel where required by law. The updated version becomes effective on the date shown at the top of the policy unless a different date is stated.
Privacy Contact
Website: https://ai-expense.emuinbox.com
Email: [email protected]
General Support
Email: [email protected]
Account Deletion Requests
Website: https://ai-expense.emuinbox.com/account-deletion
Email: [email protected]