No bank login.
Just the numbers you enter.
ExpenseSumo is built on a simple promise. We collect the minimum, share none of it, and let you take it away whenever you want. This page tells the full story, with no fine print.
Your Data Profile
What we hold about you
Bank credentials
NeverCard numbers
NeverAd tracker data
NeverWhat we do have
Only what you type: accounts, transactions, budgets.
Stored in Germany (EU) · Encrypted in transit
The things other money apps quietly take.
We don't.
Most personal finance apps need a wide pipe of your data to work. ExpenseSumo doesn't. Here's the full list of what we deliberately leave alone.
Bank login credentials
We never ask for your bank username, password, or any access token. We don't support bank linking by design.
Card numbers
Payment for Pro goes through Paddle. They handle your card details. We never see them, ever.
Transaction feeds
No connection to Plaid, no bank-feed APIs, no "anonymized transaction streams" sold by data brokers.
Third-party trackers
No advertising networks, no Facebook pixel, no cross-site tracking. The only analytics is Google Analytics and you can decline it.
Just enough to run the app.
Nothing more.
We don't pretend to collect zero data that would be a lie. Here's the full list of everything we actually store, and why.
Your account info
Your name, email, and password so you can log in. Passwords are hashed using a one-way algorithm; even we can't read them.
The data you type in
Accounts, transactions, budgets, categories, and any notes you add. Everything in your account is something you put there yourself.
Standard server logs
IP address and timestamps when you make requests. Used for security and debugging. Not tied to advertising.
Anonymized usage data
We use Google Analytics to understand which pages are used most and where the app needs work. Cookies for this are opt-in, decline them in the consent banner if you'd rather not.
On a server we operate.
Not in a partner's data lake.
Your data is stored in a PostgreSQL database on a server we run ourselves, hosted in Germany (EU). It is not shared with any analytics partner, advertising network, or data broker.
The only outside services that touch your account are Paddle (for billing, if you upgrade) and Google Analytics (anonymized usage data only). Both are disclosed in the privacy policy.
Database
PostgreSQL, operated by us
Region
Germany (EU)
Transport
HTTPS (TLS) for every request
Access
Scoped to your account only
Commitments we won't break.
Not even quietly.
Some of these are technical limits we've designed in. Others are promises we're putting in writing here.
- We will never sell, license, or syndicate your data to any third party.
- We will never anonymize and aggregate your transactions for advertising partners.
- We will never insert third-party trackers, advertising networks, or social pixels into the app.
- We will never require a bank connection. Manual entry is the product, not a fallback.
- We will never sell ExpenseSumo to a company that doesn't honor these commitments. If we ever shut down or get acquired, we'll tell you first.
Your data is yours.
Take it back anytime.
Reset, export, or delete your data entirely, all from your account settings.
Delete your account
You can delete your account anytime from your account settings.
Request a copy of your data
Same channel, email us and we'll send you everything we hold about you. Full CSV export is coming as part of a planned feature on the roadmap.
Built independently.
Built to stay independent.
Most personal finance apps are funded by venture capital, which means they eventually need to make a lot of money. The easiest way to do that is to monetize your data. Your spending habits, your income, your patterns.
ExpenseSumo is built by one person, funded by people who pay for Pro. That's the whole business model. It means we don't have investors pushing us to find "data monetization opportunities," and we don't have a growth chart that requires breaking our promises.
If we can't be a sustainable indie business without selling your data, then the answer is to not be that business at all.
Questions,
answered
The short version of what people ask most.
More built in.
More on the way.
Privacy is the foundation. Here's what's built on top of it.
Tracking
Log every dollar across every account. Search, filter, and categorize your full history.
Multi-Currency
Track accounts in multiple currencies. No bank linking, no premium fee, just clear numbers in any currency.
And more on the way, see the roadmap
Start tracking today.
Stay private.
Two minutes to sign up. No bank login. Your data, your awareness, yours from day one.
Try Pro Free →No bank login · Cancel anytime · Free plan available