Trust center
Security and data controls
ExpenseTracking is designed to keep local use simple and minimize the amount of financial information that leaves your device.
What we do
- Serve the public portal over HTTPS.
- Keep local-first use available without a Facware account.
- Request Google permissions only for an enabled backup or restore feature.
- Do not sell transaction data or use Google Drive data for advertising.
- Provide export, deletion, and Google access-revocation paths.
What you should do
- Keep your device, browser, and Google Account protected with a strong password and multi-factor authentication.
- Review the Google consent screen before enabling Drive.
- Keep an independent export of important records.
- Revoke Drive access if you no longer use backup.
Report a vulnerability
Please report suspected security issues privately to [email protected]. Include the affected URL or feature, steps to reproduce, impact, and a safe way to contact you. Do not include real financial records, access tokens, passwords, or other sensitive data in a report.