Privacy Policy

1. Data controller

The data controller, for the processing described in sections 9 and 10 only, is:

Digital Booster srl
Via Melzi d’Eril 3, 20154 Milan (MI), Italy
VAT and tax code 07932180966
Email: [email protected]
Phone: +39 02 871 96096

For the data you enter in the app, Digital Booster srl is neither controller nor processor, because it has no access to it: you manage it, on your device and in your Apple account.

2. Data handled by the app

toExpense lets you record personal and business expenses. To do so it may contain:

• images and PDFs of receipts, invoices and bills that you capture or import;
• data read from those documents: supplier, supplier VAT number, date, amounts, VAT, currency, document number, line items;
• information you add: category, notes, status, personal or business scope;
• optional details for the expense report header: full name, employee ID or role, company name and company VAT number.

This data is stored on the device and, if iCloud is on, in your iCloud account (see section 3). It is never sent to servers run by Digital Booster srl or anyone else, apart from the iCloud services of your Apple account described in section 3. Digital Booster srl cannot read, change or recover it.

The app contains no analytics, crash-reporting or advertising SDKs, does not use advertising identifiers and does not track you as defined by Apple’s App Tracking Transparency framework.

3. Where your data is stored

Your data is stored first of all on the device, in the app’s own space, protected by iOS data encryption. If you are signed in to iCloud, toExpense syncs it across your iPhones and iPads through your Apple account:

• expenses, that is the app’s database, in your private CloudKit database. toExpense’s CloudKit container only defines the structure of the database: the records holding your expenses live in your iCloud account and Digital Booster srl has no access to them. Amounts, dates, currency, supplier, VAT number, descriptions, notes and text read from documents are end-to-end encrypted fields, with keys kept in your iCloud Keychain that not even Apple can read. Only structural data such as document type, scope, status and category is not encrypted;
• original receipts and documents (images and PDFs), in your iCloud Drive, in the “toEXPENSE” folder that you also see in the Files app and in the Finder on Macs signed in to the same account. These files are protected by iCloud Drive encryption in transit and on Apple’s servers, and are end-to-end encrypted if you turn on Apple’s Advanced Data Protection;
• profile details for the expense report header (name, role, company and company VAT number), in the iCloud key-value store.

To let your other devices know about changes, iCloud uses silent notifications from the Apple Push Notification service: they show no content and are not used for promotional messages.

These services are provided by Apple, which runs them as an independent controller under its own Privacy Policy and the iCloud terms. They use the storage of your own iCloud plan.

If you are not signed in to iCloud or turn it off for toExpense, expenses and documents stay on the device only. To delete them permanently, delete your expenses in the app, then remove toExpense data in Settings > [your name] > iCloud > Manage Storage. Documents in the “toEXPENSE” folder of iCloud Drive can also be deleted from the Files app or the Finder on your Mac.

4. Document reading and on-device AI

Text recognition (OCR) and data extraction run entirely on the device, using Apple’s Vision and PDFKit frameworks. When the device supports it, the app can use on-device Apple Intelligence models to fill in missing fields. Also on the device, the app suggests the expense category from the words in the document. No document is sent to external AI services.

5. Optional AI model downloads

If, in the app’s settings, you choose an alternative AI model (for example Llama 3.2 or Qwen 2.5) or the automatic mode on a compatible device, toExpense first asks for your consent, showing its size and source, and only if you agree downloads the model file once from the Hugging Face platform (Hugging Face, Inc., United States). During the download Hugging Face receives the technical data needed for the connection, such as your IP address and client type, which it processes under its own privacy policy.

The download sends no documents, expenses or other app content. Once downloaded, the model runs on the device without a connection. The models offered depend on the device and on the country it is set to.

6. Device permissions

You can revoke permissions at any time in Settings > toExpense.

7. Export and sharing

When you export an expense report (PDF, ZIP or CSV), the file is created on the device and shared only with the destination you pick in the iOS share sheet, such as Mail, Files or another app. From then on, the service you chose governs its processing.

8. Purchases and subscription

Any free trials, purchases and subscriptions are handled entirely by Apple through the App Store. Digital Booster srl does not receive your payment details. Apple may provide the developer only with aggregated, anonymous sales information and the subscription status checked on the device.

9. Support requests

If you email us, for example at our support address [email protected], we process your email address, name and the content of your message to reply. The legal basis is taking steps at your request (Art. 6(1)(b) GDPR) or our legitimate interest in providing support (Art. 6(1)(f)). We keep the correspondence for as long as needed to handle the request and no longer than 24 months, unless the law requires otherwise. Please do not send us receipts or third-party data unless necessary.

10. Website and cookies

This website, available at the domains toexpense.app, toexpense.com and toexpense.ai, is hosted on Google Cloud Run by Google Cloud EMEA Limited (Ireland), in the europe-west1 region in Belgium. Google acts as processor. For security and operation, the server automatically logs technical request data: IP address, date and time, requested page, browser. The legal basis is our legitimate interest in protecting the site (Art. 6(1)(f) GDPR). These logs are kept for at most 30 days.

Cookies

This website uses no cookies or similar profiling or analytics technologies, and embeds no third-party content (fonts, videos, maps, social widgets). That is why no consent banner is shown. If we ever introduce cookies other than technical ones, we will update this section and ask for your consent before setting them, in line with the Italian Data Protection Authority’s guidelines of June 10, 2021.

11. Your rights

For the processing in sections 9 and 10 you may at any time exercise the rights under Articles 15–22 GDPR: access, rectification, erasure, restriction, portability and objection. Write to [email protected].

For the data stored in the app, you are in full control: you can edit, export or delete it directly in the app or in your iCloud account.

You also have the right to lodge a complaint with the Italian Garante per la protezione dei dati personali or the supervisory authority of your country of residence.

12. Children

toExpense is designed for managing personal and professional expenses and is not directed at children under 14.

13. Changes to this policy

We may update this policy, for example when we add features to the app. The current version is always published on this page with its last-updated date. Material changes will also be noted in the app’s release notes.