Privacy Policy

Last updated: September 22, 2026

1. Overview

BillTracker is a personal bill-tracking application. This policy explains what data it collects, why, and how it's handled.

2. Information We Collect

• Account data: email address and a hashed password. We never store your plaintext password.
• Gmail data (via Google OAuth): with your explicit consent, BillTracker requests:
  • gmail.readonly — to scan your inbox for bill-related emails (statements, due-date notices) and extract vendor, amount, and due date.
  • gmail.send — used only to send reminder emails that BillTracker itself composes. This scope is never used to read, modify, forward, or delete any of your existing email.
  Your Gmail OAuth token is stored so you don't have to re-authenticate every session.
• Financial data you or the app create: bills, incomes, and recurrence schedules you enter or that are extracted from scanned emails.
• Operational data: which reminders were sent and when, and which scanned messages you rejected as false matches (we store only the Gmail message ID for rejected messages, not their content).

3. How We Use Your Information

• To detect and track recurring bills and income.
• To send you reminder emails ahead of due dates.
• To authenticate you and keep your data scoped to your account.

We do not use your data for advertising, profiling, or any purpose beyond running the app for you.

4. Data Sharing

We do not sell, rent, or share your data with third parties. The only external service involved is the Google Gmail API, used solely as described above under Google's own API Services User Data Policy, including the Limited Use requirements.

5. Data Storage & Security

Data is stored in a private database on infrastructure we control. Passwords are hashed, never stored in plaintext. OAuth tokens are stored server-side and never exposed to the client.

6. Data Retention & Deletion

Data is retained as long as your account exists. To request deletion of your account and all associated data (bills, incomes, Gmail tokens, logs), contact us at the email below. Revoking BillTracker's access from your Google Account permissions page immediately invalidates our stored Gmail token.

7. Children's Privacy

BillTracker is not directed at children under 13, and we do not knowingly collect data from them.

8. Changes to This Policy

We may update this policy as the app evolves. Material changes will be reflected here with an updated "Last updated" date.

9. Contact

Questions or deletion requests: [email protected]

← Back to login