xpentrax privacy policy

Effective Date: July 5, 2026

Xpentrax (“we,” “our,” or “us”), a mobile application developed by Leke Tech, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “App”).

By downloading, installing, or using Xpentrax, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access or use the application.

1. Information We Collect

A. Personal Data

When you create an account to use the cloud synchronization features of Xpentrax, we collect certain personally identifiable information, which may include:

• Account Credentials: Your email address and authentication details provided during sign-up or login via Firebase Authentication.

B. Financial and Transaction Data

Xpentrax is a manual-entry budgeting and planning utility tool. We collect the data you explicitly input into the App to manage your finances, including:

• Income and expense amounts, currencies, categories, dates, transaction recurrences, and optional notes or text descriptions.

• Custom category configurations and budget target limits.

Important Note: Xpentrax operates on a manual-entry model. We never request, collect, or store your active online banking passwords, bank account credentials, or credit card PINs.

C. Device and Usage Data

We may automatically collect certain technical information when you use the App to monitor performance and stability, including:

• Device information (model, operating system version, and unique device identifiers).

• App performance logs, crash report diagnostics (via independent SDKs such as Firebase Crashlytics), and basic usage statistics.

2. How Your Data is Stored and Protected

Xpentrax employs a secure, hybrid offline-first architecture to ensure maximum control over your data:

• Local Encryption: All your financial and transaction records are stored locally on your device inside an encrypted SQLCipher database. This data is unreadable to other apps or unauthorized parties on your device.

• Cloud Synchronization: When an active internet connection is detected, your locally encrypted data syncs securely with our cloud infrastructure (backed by Firebase Firestore) to prevent data loss and enable account recovery.

• No Third-Party Financial Aggregators: Because we do not connect to external banking APIs or transactional data brokers, your raw financial profiles are never exposed to external networks or financial aggregators.

3. How We Use Your Information

We use the collected information solely to operate, maintain, and improve your experience with Xpentrax, specifically to:

• Authenticate your identity and enable secure cloud backups across devices.

• Generate your in-app interactive analytics, charts, net flow calculations, and budget progress bars.

• Deliver localized settings, currency formats, and daily push notification reminders when toggled on by the user.

• Identify software bugs, track crashes, and deploy application performance patches.

4. Sharing and Disclosure of Information

We do not sell, trade, rent, or distribute your personal or financial data to third-party advertisers, data brokers, or commercial networks. We may only disclose information under the following limited circumstances:

• With Service Providers: We utilize trusted backend infrastructure services, specifically Google Firebase (for cloud sync, authentication, and crash reporting analytics). These providers are bound by strict confidentiality agreements to use your data only to perform specified technical infrastructure services for us.

• For Legal Compliance: We may disclose your information if required to do so by applicable law, regulation, or enforceable governmental request, or to protect the safety, rights, and security of our users and the public.

5. Data Retention and Deletion

Your local data remains on your device as long as the App is installed. Your cloud-synchronized data is retained for as long as your account remains active.

You maintain absolute control over your data. If you wish to delete your account or permanently wipe your synchronized data from our cloud servers, you can initiate a deletion request directly within the App settings or contact us using the information below. Upon account deletion, your cloud data will be permanently purged from our active databases.

6. Children’s Privacy

Xpentrax does not knowingly collect or solicit personal data from anyone under the age of 13 (or the applicable legal age in your jurisdiction). If we discover that a child under the minimum age requirement has provided us with personal information, we will delete that data from our servers immediately.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect modifications in our operational practices or legal requirements. We will notify you of any changes by updating the “Effective Date” at the top of this page and, where necessary, prompting a notification within the App interface. We encourage you to review this policy periodically.

8. Contact Us

If you have any questions, concerns, or data erasure requests regarding this Privacy Policy, please contact the development and strategy team at Leke Tech:

• Website: www.leke.tech