Privacy Policy

Effective date

October 14, 2026

Information we collect

• Account and profile information, such as your email address, name, preferences, and authentication identifiers.
• Transaction information you enter, including merchant, date, amount, category, notes, tax-relief selections, and related records.
• Receipt images and information extracted from them, such as merchant, date, amount, line items, and suggested categories.
• Support communications and information you provide when asking us for help.
• Usage, device, diagnostic, and security information used to operate, protect, and improve the service.
• Google Drive identifiers and authorisation details when you choose to connect the optional integration.
• Information from supported Android financial-app notifications when you enable automatic capture, including notification-derived merchant, amount, currency, transaction type, description, provider, and time details.
• Referral codes, referral relationships, eligibility events, subscription and purchase identifiers, and email-delivery information where those features are used.

How we use your information

• Provide receipt storage, receipt scanning, transaction tracking, tax-readiness tools, and reports you request.
• Process receipt contents using automated receipt-reading tools to extract information and suggest records that may need review or may be claimable.
• Process selected Android notifications on your device to prepare transaction drafts. Raw notification text is discarded and is not uploaded by the Android capture flow; drafts require your review before becoming saved transactions.
• Provide AI Tax Chat, tax analysis, receipt extraction, and monthly insight features using automated models and the financial or tax information needed for the feature you request.
• Operate an optional Google Drive backup or export that you enable.
• Respond to support requests and communicate important service, security, or policy updates.
• Troubleshoot, maintain, secure, and improve Xpensight, and prevent fraud, misuse, or unlawful activity.
• Comply with applicable legal obligations and enforce our Terms of Service.

Android automatic transaction capture

Automatic capture is optional. If you enable Android Notification Listener access and select supported apps, Xpensight can inspect notifications from those apps while access remains enabled. Supported apps currently include Maybank / MAE, Touch ’n Go eWallet, CIMB OCTO MY, and MyPB by Public Bank, subject to availability and provider policy.

The Android app filters notifications on the device and ignores unsupported, promotional, balance, authentication, OTP/TAC, approval, failure, and security messages where they can be identified. A temporary processing envelope may contain the notification package, title, text, expanded text, subtext, timestamp, and Android notification key. Raw notification text and notification keys are not stored or uploaded by this flow.

Only a sanitized draft may be retained locally, including fields such as provider, merchant, amount, currency, transaction type, description, time, and a source-event fingerprint. Local drafts are limited to 50 records and are removed after up to 30 days, subject to the Android implementation. Each draft must be reviewed before it is saved as an Xpensight transaction. Disabling a provider or revoking notification access stops future capture but does not automatically delete existing local drafts or transactions already saved to your account.

AI and automated processing

When you use receipt extraction, AI Tax Chat, personal tax analysis, or AI-generated monthly insights, Xpensight may send the information needed for that feature—including receipt images or extracted text, questions, conversation context, transactions, tax-profile information, and related calculations—to AI service providers acting on our instructions. These providers process data to return the requested result and may process it outside Malaysia under their applicable terms and safeguards.

AI-generated results are suggestions and summaries, not official tax determinations or professional advice. Xpensight may keep limited usage and token counts to enforce plan allowances, operate billing, and maintain the service.

Billing, referrals, email, and analytics

• Google Play and, where enabled, Stripe process subscription and payment events. Xpensight receives and stores the identifiers and entitlement information needed to provide subscription access and reconcile billing.
• Referral features may process referral codes, account relationships, email-verification status, qualification events, and temporary entitlement grants.
• Service emails may include account, receipt-processing, payment, export, security, and monthly-summary messages. Optional communications and their controls depend on the feature and production configuration.
• Product, security, and diagnostic events may be recorded where analytics or monitoring is enabled to operate, secure, and improve the service. These events are subject to the retention and access controls of the applicable service providers.

Authorised access

Receipt images and related information are not publicly accessible. Access is restricted to authorised Xpensight personnel and service providers that require access to operate or support the service.

Xpensight personnel may access uploaded receipts only where reasonably necessary to respond to user-requested support, investigate technical or security incidents, prevent fraud or misuse, maintain the service, or comply with applicable legal obligations. Access is limited according to role and operational need and may be recorded for security and accountability.

Some providers process receipt information automatically through their systems without a person manually viewing a receipt.

Service providers and data sharing

We do not sell personal data. We disclose data only as reasonably necessary to operate Xpensight, at your direction, or where required by law.

• Cloud hosting, private receipt storage, database, and infrastructure providers, including AWS.
• receipt-processing providers that process receipt contents to provide scanning and smart-review features.
• Authentication, communications, customer-support, monitoring, and security providers.
• Google Drive when you enable its optional backup or export integration.
• Professional advisers, authorities, or other parties where reasonably necessary to protect rights, investigate misuse, comply with law, or respond to lawful requests.

Where data is stored and processed

• Receipt files stored directly by Xpensight are kept in private AWS storage in Malaysia.
• Receipt metadata is kept in Xpensight’s database infrastructure in Singapore.
• Receipt contents and other data may be processed through Xpensight’s application infrastructure and service providers, including receipt-processing providers, in other locations. Appropriate safeguards are applied where required.
• If you enable Google Drive, an additional copy is stored in your Google account and is subject to Google’s terms and privacy practices.

Google Drive usage

Google Drive is optional. When you enable backup or request an export, you authorise Xpensight to create or access the relevant files in your Google Drive for that feature.

You can revoke Xpensight’s access in your Google account settings. Revoking access stops future access but does not automatically delete files already created in your Drive. You can delete those files in Google Drive.

Retention and deletion

We retain personal data only for as long as reasonably necessary to provide the service, maintain security and business records, resolve disputes, and comply with applicable legal obligations. Retention periods depend on the type of information and why it is held.

When you delete a receipt stored by Xpensight, its receipt file and thumbnail are deleted from active receipt storage. A limited receipt record may remain marked as deleted so we can operate storage accounting, security, and deletion workflows. Residual copies may remain temporarily in backups or security records until they expire under normal retention processes, or longer where retention is required by law.

Deleting a receipt from Xpensight does not necessarily delete an additional copy in your Google Drive. You control and can delete that copy through Google Drive. Disconnecting Google Drive also does not automatically delete files already created there.

You may contact us to request access to or correction of your personal data, or to ask about account deletion. We may retain limited information where reasonably necessary or legally required and may need to verify your identity before completing a request.

Your choices

• Update transaction, receipt, tax-profile, and language information through available app controls.
• Delete receipts or transactions using available app controls.
• Choose whether to connect or disconnect the optional Google Drive integration.
• Contact us to request access, correction, or deletion, or to ask how your personal data is handled.

Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal data, including restricted access and private receipt storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

Xpensight is not intended for children under 18. If you believe a child has provided personal data without appropriate permission, contact us.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page, revise the effective date, and provide additional notice where appropriate.

Contact us

Questions or requests about privacy? Contact us at support@xpensight.my.

For the rules governing use of Xpensight, read our Terms of Service.