01 Our Commitment to Your Privacy
XpenseAIQ is a local-first application. All your expense data — receipts, amounts, vendors, categories, and financial records — is stored and processed entirely on your own device. Jicama does not collect, access, or store your expense or financial data.
We strictly comply with the Personal Data Protection Act (PDPA) and applicable data protection laws. We collect only the minimum personal data necessary to operate the app.
02 What We Collect (Authentication Only)
The only personal data collected by Jicama is what you provide through Google Sign-In:
- Name — to personalise your app experience.
- Email address — for account identification, subscription management, and service communications.
- Google account identifier — to authenticate you securely.
This information is used solely for: verifying your identity, managing your subscription and plan entitlements, and aggregated anonymous user statistics to improve the service.
We do not collect, store, or process any of your expense data, receipt images, financial records, or spending information.
03 Your Expense Data Stays on Your Device
All expense and receipt data you create in XpenseAIQ is stored locally on your device only:
- Receipt images, extracted text, amounts, vendors, categories, and analytics are processed and stored on your device.
- This data never leaves your device to Jicama's systems.
- If you enable Google Drive sync, your data is backed up directly to your own personal Google Drive — Jicama does not receive or store a copy.
- You have complete control over your data. Deleting the app removes all locally stored data.
04 AI Processing (Receipt Scanning)
When you scan a receipt, the image is sent to a third-party AI service to extract expense details. You can choose your AI provider in Settings → AI Configuration:
- Alibaba Cloud Qwen — image sent to Alibaba Cloud's API.
- Google Gemini — image sent to Google's API.
- Mistral AI — text sent to Mistral's API.
Each provider processes the image solely to return extracted data. Images are transmitted securely over HTTPS and are not retained by these providers beyond their standard API processing policies. Jicama does not receive or store these images.
05 Google Drive Integration
Google Drive sync is entirely optional. If you enable it:
- Data is backed up directly from your device to your own Google Drive account.
- Jicama does not access, store, or process your Drive files.
- We access only the dedicated XpenseAIQ folder created in your Drive.
- You can revoke Drive access at any time through Google Account settings or within the app.
06 Data Security
- All communication between the app and authentication services uses HTTPS/TLS encryption.
- Your Google credentials are never stored by Jicama — authentication is handled entirely by Google.
- Only your name and email (from Google Sign-In) are stored by us, solely for account and subscription management.
- We implement appropriate technical and organisational measures to protect the limited personal data we hold.
07 Your Rights Under PDPA
Under the Personal Data Protection Act (PDPA) and applicable laws, you have the right to:
- Access — Request details of the personal data (name, email) we hold about you.
- Correction — Update your name or email via Settings → Profile.
- Withdrawal of Consent — Revoke Google Sign-In access at any time.
- Deletion — Request deletion of your account and authentication data by contacting us at support@jicama.tech. We will action this within 30 days.
Since your expense data is stored only on your device, it is fully under your control and can be deleted at any time within the app.
08 Data Retention
- Authentication data (name, email): Retained while your account is active. Deleted within 30 days of an account deletion request.
- Expense data: Stored only on your device. Deleted when you remove the app or use the in-app purge function.
- Google Drive backups: Managed entirely by you in your own Google Drive. Jicama has no control over this data.
09 Children's Privacy
XpenseAIQ is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently done so, please contact us at support@jicama.tech and we will promptly delete the information.
10 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date above and, where appropriate, through an in-app notification. Continued use of XpenseAIQ after changes constitutes your acceptance of the updated policy.
11 Contact Us
For any privacy-related questions, requests, or concerns:
Company: Jicama
Email: support@jicama.tech
Website: https://xpenseaiq.jicama.tech