VexBill (“the app”, “we”, “us”) is an expense and bill-tracking application for Indian users. This page explains what data we collect, why, where it goes, and how to delete it.

By using VexBill you agree to this policy. If you do not agree, do not use the app.

§ 01Who we are

VexBill is operated by Abhyuday Banshtu, an independent developer based in India. For any privacy-related question, write to abhy@vexbill.com.

§ 02What we collect

We collect only what's necessary to run the app's features.

Account data

  • Email address — required to create your account and sign you in.
  • Display name — optional; lets the app greet you and decorate your avatar.
  • Profile photo — optional; you choose whether to upload one.

Financial / bill data

  • Bill details you enter or scan — vendor name, GSTIN, invoice number, date, items, amounts, tax breakdown.
  • Scanned receipt images — when you tap “Scan a bill” we take a photo (or pick one from your gallery), compress it, send to Google's Gemini AI for OCR (§4), and save a copy on your bill record.

Diagnostic data

  • Approximate device info (Android version, manufacturer) that Firebase records by default for service reliability.
  • Crash reports if the app crashes (no personal info — stack trace + device model only).
We do not collect phone number, contacts, location, browsing history, advertising identifiers, or biometric data.

§ 03Where your data is stored

Your data is stored in Google Firebase services, under your account identifier only:

  • Firebase Authentication — your email and auth tokens.
  • Cloud Firestore — your bills, vendors, assets, items, preferences. Stored encrypted at rest by Google.
  • Firebase Cloud Functions — runs server-side OCR; doesn't store anything itself.

Data is hosted in Google's data centers. You can read Google Cloud's own privacy commitments at cloud.google.com/terms/data-processing-addendum.

§ 04Third-party services

Three Google services touch your data:

Google Gemini (Generative AI)

  • What we send: scanned receipt images, your list of vendor names and GSTINs (so the AI can match the receipt to an existing vendor), your list of item categories.
  • Why: to extract bill information from the receipt.
  • Retention: governed by Google's Generative AI terms. See ai.google.dev/gemini-api/terms.

Firebase Authentication, Firestore, Cloud Functions

  • What we send: everything in §2 above.
  • Why: app accounts, data storage, server-side OCR.
  • Retention: indefinitely, until you delete your account (see §6).

Google Play Services (ML Kit Document Scanner)

  • The on-device camera/scanner library Google ships in Play Services. Image processing happens on the device; nothing is sent to Google as part of this step.
We do not sell your data to anyone. We do not use it for advertising. We do not share it with any other third party.

§ 05Permissions

  • Internet — required to talk to Firebase and Gemini.
  • Camera — required only when you tap “Scan a bill”. You can decline; the rest of the app continues to work with manual entry.
  • Storage / media access — required only when you pick an existing photo from your gallery to scan. We use Android's modern PickVisualMedia API, which doesn't grant the app broad storage access — only the single photo you choose.

§ 06Account deletion

You can delete your account and all your data from inside the app:

  1. Open the side drawer → Profile.
  2. Scroll to the Danger zone section at the bottom.
  3. Tap Delete my account.
  4. Confirm twice (we ask you to type DELETE to prevent accidents).

When you confirm, the app permanently removes:

  • All your bills, payments and scanned receipts
  • All your vendors and assets
  • Your profile photo, display name and preferences
  • Your Firebase Authentication record

This action is not reversible. After deletion completes you are signed out and returned to the login screen.

If you cannot reach the in-app delete (lost phone, etc.), email abhy@vexbill.com from the account's email address and we will delete your data within 14 days.

§ 07Children

VexBill is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, email us and we'll delete it.

§ 08Changes to this policy

If we make material changes to this policy we'll update the “Updated” date at the top and, where reasonable, notify existing users via the app. Continued use after a change means acceptance.

§ 09Your rights under Indian law

Under the Digital Personal Data Protection Act, 2023 (DPDPA) you have rights to:

  • Access the personal data we hold about you.
  • Correct or update inaccurate data.
  • Erase your data (the in-app delete flow in §6 is the primary way; email us if it doesn't reach completion).
  • Withdraw consent at any time by deleting your account.

To exercise any of these rights write to abhy@vexbill.com.

§ 10Contact

For any privacy-related question, complaint or request:

◆ Data Controller
Abhyuday Banshtu