Privacy & data protection

Privacy Policy

Effective date: November 1, 2026

xPense is a personal-finance web application created and maintained by one independent developer under the name Digital Accolades. It helps you record income and expenses using a spreadsheet in your own Google Drive. This policy explains which information xPense accesses, why it needs that information, where it is processed, and what choices you have.

1. Who operates xPense and how to contact me

I am the independent developer behind xPense, operating under the name Digital Accolades. I am responsible for the application and its privacy practices. For questions about privacy, access, deletion or this policy, email accolades.dev@gmail.com. Website: https://xpense.accolades.dev/.

2. Information xPense accesses or processes

• Google account information: Your Google account identifier, email address and basic profile information provided through Google Sign-In, to create or recognize your xPense account and display account information.
• Google Drive and spreadsheet information: With your permission, xPense creates and works with its authorized spreadsheet file in your Google Drive. This includes the spreadsheet file identifier, the data you enter and the contents needed to display, update, archive, synchronize or export your records. The permission requested is drive.file, which is intended to limit access to files used with this application, rather than your entire Drive.
• Financial entries: Information you choose to enter, such as dates, amounts, categories, descriptions, income, expenses and archived entries. Please avoid entering bank passwords, full payment-card details or other information not needed for personal expense tracking.
• Account, connection and session data: Identifiers and technical status needed to maintain an account, connect it to its spreadsheet, authorize sessions, prevent cross-account access and diagnose authentication or synchronization problems. Google authorization tokens may be processed and securely stored by the application server so it can perform the Google operations you authorize.
• Device and technical data: Browser storage (including IndexedDB and service-worker caches) can hold app files and pending changes for offline use. Hosting and security infrastructure may process technical request information such as IP addresses, timestamps and diagnostic or security events when serving the site.

3. Why and how we use information

• To authenticate users through Google and maintain secure sessions.
• To create, locate and update the xPense spreadsheet that you authorize in your Google Drive.
• To display balances, transaction history, summaries and archived entries, and perform user-requested exports.
• To keep pending changes on your device while offline and synchronize them when a connection and valid authorization are available.
• To protect accounts, prevent unauthorized access, maintain reliability and respond to support or privacy requests.

I use information received from Google APIs only to provide and improve the user-facing features described here and in accordance with the Google API Services User Data Policy, including its applicable Limited Use requirements. I do not use Google user data to create advertising profiles or sell it to advertisers.

4. Where information is stored

Google Drive: The user's xPense spreadsheet is held within that user's Google Drive, subject to their Google account settings and Google's own data practices. xPense interacts with it only using the authorization granted to the application.

Cloudflare: The xPense backend runs on Cloudflare Workers, with a Cloudflare D1 database used for account, authorization/session and spreadsheet-connection metadata. Google access credentials can be processed by this backend. The transaction spreadsheet, rather than D1, is the intended persistent record of your financial entries.

Your browser/device: IndexedDB and app caches support offline use and may retain pending transaction changes and application data until synchronized, cleared or removed. Shared devices should be treated with care, particularly while signed in.

5. Sharing and third-party services

xPense relies on Google for authentication, Google Drive and spreadsheet functionality, and on Cloudflare for hosting, database, network delivery and security-related processing. These providers process information as necessary to deliver those functions under their respective terms and privacy documentation. Data may also be disclosed where legally required or to address abuse and security incidents.

xPense does not sell personal information. A voluntary donation link, when used, opens a third-party Stripe payment page; payment information entered there is handled by Stripe under its own policies and is not necessary to use xPense.

6. Data retention and deletion

Your Google Drive spreadsheet remains in your Google account unless you delete it or Google removes it under your account settings. Disconnecting xPense or revoking authorization does not automatically mean that your spreadsheet is deleted.

Account, session, connection and technical information is retained for as long as needed to operate the account, maintain security, meet applicable obligations and resolve legitimate support issues. Device-stored offline data may remain until it is synchronized, the app/browser data is cleared or the app is uninstalled. Cloudflare and Google may apply their own backup and log-retention schedules.

To request deletion of xPense-controlled account data, email accolades.dev@gmail.com from the email associated with your xPense account. I may need to verify that you control the account before acting on the request. You can separately remove the xPense spreadsheet from your Google Drive and clear this site's data in your browser.

7. Your choices and rights

• Access and export: View your transaction records in xPense or the associated Google spreadsheet, and use the application's export features where available.
• Correction and deletion: Edit or delete records within xPense or, where appropriate, in the Google spreadsheet; request assistance with account-related data.
• Revoke access: Disconnect the application in your Google Account's third-party connections settings. Revoking access stops future authorized Google API actions but does not necessarily delete previously created files or local offline data.
• Clear local storage: Clear this site's browser storage to remove device-local cached information and pending changes. Unsynchronized changes may be lost.
• Privacy requests: Contact us to request access, correction, deletion or other rights available under applicable data protection laws. Where applicable, you may also contact your data protection authority.

8. Security and international processing

xPense uses HTTPS, Google OAuth, authenticated application sessions and application-level checks intended to limit account access. Google authorization credentials are handled by the backend, not requested as your Google password. No web application can guarantee absolute security. Google and Cloudflare may process information in multiple countries under their service arrangements and applicable safeguards.

9. Children

xPense is intended for users able to consent to use an online personal-finance service under applicable law. It is not specifically directed to children. If you believe a child has supplied personal information inappropriately, contact us using the address above.

10. Changes to this policy

I may update this policy when xPense features, data practices or legal requirements change. The effective date above identifies the current published version. Material changes will be communicated through the website or application where appropriate.

11. Additional Google and provider information

Google account access is controlled by Google's permission screen and can be revoked through your Google settings. For more information, see the Google Privacy Policy, Cloudflare Privacy Policy and, for optional donations, Stripe Privacy Policy.

Questions? Contact xPense support.