Privacy Policy
Last updated: February 19, 2026
1. Introduction
Welcome to Traxpense Flow ("we", "our", or "us"), available at traxpense.app. Traxpense Flow is a personal finance tracking application that helps you record income, track expenses, manage budgets, and estimate tax withholding — all from a single dashboard.
This Privacy Policy explains what information we collect when you use Traxpense Flow, how we use that information, how we protect it, and what rights you have over it. Please read this policy carefully. By using Traxpense Flow, you agree to the practices described here.
2. Information We Collect
a) Account Information
- Email address — used to create and identify your account.
- Password — hashed and stored securely by Supabase Auth. We never store your password in plain text and cannot read it.
b) Financial Data (user-entered only)
- Income entries: amounts, sources, descriptions, dates, and categories you manually log.
- Expense entries: amounts, merchants, descriptions, dates, and categories you manually log.
- Budget targets: names, budget amounts, and associated transactions.
- Important: We do NOT connect to your bank accounts, credit cards, or any financial institution. All financial data in Traxpense Flow is entered manually by you. We do NOT store credit card numbers, bank account numbers, or any payment credentials.
c) Usage Data
- Pages visited and features used within the app (collected via Vercel Analytics).
- Error reports and crash logs (collected via Sentry) to help us fix bugs.
- Session duration and general interaction patterns — aggregated and anonymised.
d) Device & Technical Data
- Browser type and version.
- Operating system.
- Screen resolution.
- IP address (used for security and fraud prevention; not linked to your financial data).
- These are standard data points collected by most web services.
3. How We Use Your Data
We use the data we collect for the following purposes:
- To create and maintain your account and provide access to the Traxpense Flow service.
- To display your dashboard, calculate summaries, and generate financial reports.
- To calculate tax withholding estimates based on the rate you configure in Settings.
- To improve the app — understanding which features are used most helps us prioritise development.
- To identify and fix bugs through error tracking (Sentry).
- To send essential account emails (password reset, account confirmation). We do not send marketing emails without your explicit consent.
What we will never do:- ✗ Sell your data to third parties
- ✗ Share your financial data with advertisers
- ✗ Use your data to train AI or machine learning models
- ✗ Show you targeted ads based on your financial activity
4. Data Storage & Security
- Data is stored on Supabase, which runs on AWS infrastructure in secure, SOC 2-compliant data centres.
- Row-Level Security (RLS) is enforced at the database level, meaning your data is cryptographically isolated and can only be accessed by your authenticated account — not by other users and not by our team in the normal course of operations.
- All connections between your browser and our servers are encrypted via HTTPS/TLS.
- Passwords are salted and hashed using industry-standard algorithms. They are never stored in plain text.
- We use automated backups to protect against data loss.
5. Your Rights
You have the following rights over your data at all times:
- Access: All of your data is visible to you within the app. You can browse every transaction, budget, and setting you have ever created.
- Export: You can export all your transaction data as a CSV file at any time from the Transactions page using the Export button.
- Correction: You can edit or update any transaction, budget, or setting at any time directly within the app.
- Deletion: You can permanently delete your account and all associated data from the Settings page. Deletion is irreversible and your data will be removed within 30 days.
- Portability: Your exported CSV data is in a standard format that can be imported into spreadsheet software or other finance tools.
6. Cookies
We use a minimal set of cookies necessary to operate the service:
- Authentication cookies: Set by Supabase to keep you logged in securely. These are essential and cannot be disabled without logging out.
- Error tracking: Sentry may set a session identifier to correlate error reports. This does not track you across websites.
We do not use advertising cookies, third-party tracking pixels, or any cookies from ad networks. There are no social media tracking cookies on Traxpense Flow.
7. Third-Party Services
Traxpense Flow uses the following third-party services. Each has its own privacy policy:
8. Children's Privacy
Traxpense Flow is not intended for children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us at support@traxpense.app and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time as the service evolves. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email or through a notice in the app. Your continued use of Traxpense Flow after changes are posted constitutes your acceptance of the revised policy.
10. Contact
If you have questions about this Privacy Policy, want to exercise any of your rights, or want to submit a data deletion request, please contact us:
- Email: support@traxpense.app
- In-app: Account deletion and data export are available directly from the Settings page.