Expanto — last updated 29 July 2026
Expanto ("the app") is an expense-tracking application published by MaGa ("we", "us"). This policy explains what the app collects, why, and what control you have. We have tried to keep it in plain language.
| Data | Why | Where it goes |
|---|---|---|
| Email address, and display name if you provide one | To create and secure your account, and to let you reset your password | Firebase Authentication (Google LLC) |
| Your expenses: amount, description, date, and the categories you assign | This is the core function of the app — recording and reporting your spending | Cloud Firestore, in a private area scoped to your user ID |
| Your custom macro-categories and sub-categories | So your categorisation follows you across devices | Cloud Firestore, scoped to your user ID |
| Subscription status and monthly scan count | To apply the free-tier limit and unlock premium features | Cloud Firestore, scoped to your user ID |
| Anonymous usage events (for example: a screen was opened, a purchase completed) | To understand which features are used, so we can improve the app | Firebase Analytics |
| Crash diagnostics: error messages, stack traces, device model, OS version | To find and fix crashes | Firebase Crashlytics |
When you scan a receipt, the app uses Google ML Kit's on-device text recognition. The photo is processed locally on your phone and is not uploaded to us or to any third party. We do not store the image. Only the values you confirm and save — the amount and description — are written to your account.
The app asks for camera and photo-library permission solely for this purpose. You can decline, and the rest of the app continues to work normally.
Expanto does not track you as the term is defined by Apple. Specifically: we do not link your data with third-party data for advertising, we do not share your data with data brokers, we contain no advertising SDKs, and we do not access your device's advertising identifier (IDFA).
Premium subscriptions are purchased and billed through the app store you installed the app from. We never see or receive your payment card details. The store tells the app only whether a subscription is active.
We use Google Firebase (Authentication, Cloud Firestore, Analytics, Crashlytics) as our infrastructure provider. Google processes this data on our behalf as a data processor. Data is stored in the European Union (europe-west1).
We do not sell your personal data. We do not share it with anyone else, except where we are legally required to do so.
Your data is kept for as long as your account exists. When you delete your account, your authentication record and the expense, category, and subscription data associated with it are deleted. Backups and aggregated, non-identifying analytics may persist for a limited period afterwards.
If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access, correct, export, delete, or restrict processing of your personal data, and to object to it. Two of these are built directly into the app:
For any other request, contact us at the address below. You also have the right to lodge a complaint with your national data protection authority.
Expanto is not directed at children under 13, and we do not knowingly collect their personal data.
If we change this policy materially, we will update the date at the top of this page and, where appropriate, notify you in the app.
Questions about this policy or about your data:
MaGa
Email: info@duckma.com
In sintesi. Expanto è un'applicazione per la gestione delle spese personali pubblicata da MaGa. Le tue spese e categorie sono conservate in un'area privata del nostro database, accessibile solo dal tuo account. Le foto degli scontrini non lasciano mai il tuo dispositivo: il riconoscimento del testo avviene interamente offline. Non vendiamo i tuoi dati, non li condividiamo con broker di dati e non li utilizziamo per finalità pubblicitarie.
Dati raccolti. Indirizzo email ed eventuale nome visualizzato (per creare e proteggere il tuo account); le tue spese, con importo, descrizione, data e categorie; le tue categorie personalizzate; lo stato dell'abbonamento e il conteggio mensile delle scansioni; eventi di utilizzo anonimi; dati diagnostici sui crash. Il trattamento avviene tramite Google Firebase, con archiviazione nell'Unione Europea (europe-west1).
Pagamenti. Gli abbonamenti sono gestiti e addebitati dallo store da cui hai installato l'app. Non vediamo mai i dati della tua carta di pagamento.
Tracciamento. L'app non effettua tracciamento secondo la definizione di Apple: nessun SDK pubblicitario, nessun accesso all'IDFA, nessuna condivisione con broker di dati.
I tuoi diritti (GDPR). Hai diritto di accedere, rettificare, esportare, cancellare o limitare il trattamento dei tuoi dati e di opporti ad esso. Puoi cancellare integralmente il tuo account dall'app (Profilo → Elimina Account) ed esportare i tuoi dati in formato CSV o PDF. Puoi inoltre proporre reclamo al Garante per la protezione dei dati personali. Per ogni altra richiesta scrivi a info@duckma.com.
Conservazione. I dati sono conservati finché esiste il tuo account. Alla cancellazione dell'account i dati associati vengono eliminati.