Tesora Privacy Policy

App: Tesora: Expense Tracker (tesora.app) · Developer: Redfoxappstudio · Effective 12 October 2026

Tesora is a personal expense tracker that keeps your records on your phone. This policy explains what the app stores, what it accesses, and the few cases in which anything leaves your device.

Summary

What is stored on your phone

Everything you enter in Tesora (transactions, accounts and wallets, categories, budgets, goals, bills, debts, recurring entries, tags and notes) is saved in a database inside the app's private storage on your phone, together with your settings. This database is not encrypted by the app; it is protected by Android's app sandbox and your phone's own lock and storage encryption.

Exchange rates

To convert between currencies, the app downloads a public table of exchange rates from open.er-api.com at most once a day. The request contains no information about you or your records. As with any internet request, that service can see your IP address. If you are offline the app uses the last rates it saved.

Google Drive backup (optional)

If you choose to connect Google Drive in Settings, you sign in with Google and the app saves backup files to a "Tesora" folder in your own Drive, and can restore from them. The app asks only for access to files it creates itself; it cannot see the rest of your Drive. Backup files travel directly between your phone and Google under Google's privacy policy. We never receive them. You can disconnect in Settings, and delete the backup files from your Drive, at any time.

Backup and export files

You can save a backup file or export your records as Excel, PDF, CSV or JSON. These files are created on your phone and go only where you send them through Android's share sheet or file picker. A backup or export contains your financial records in readable form, so keep it somewhere you trust.

Camera and photos

The camera is used only when you scan a receipt or a payment QR code. Receipt text is read on your phone with Google's on-device ML Kit; the picture is not uploaded by Tesora. If you pick a receipt photo from your gallery, only that picture is read. ML Kit may send Google technical usage and diagnostic information about the scanning feature itself (not your pictures or their contents), as described in Google's ML Kit terms.

Microphone

Tesora does not request the microphone permission and records no audio.

App lock and biometrics

If you turn on the app lock, your PIN is stored on your phone only as a salted hash in Android's secure storage. Fingerprint or face unlock is handled by Android; Tesora never sees your biometric data.

Notifications and widget

Reminders are scheduled on your phone and are not sent through any server. By default reminders use generic wording, and the home-screen widget hides amounts.

Android backups

Tesora excludes all of its data from Android cloud backup and device-to-device transfer, so your records are not copied to your Google account backup. To move to a new phone, use a backup file or Google Drive backup.

Children

Tesora is not directed at children under 13 and does not knowingly process data from them.

Data deletion

Because we hold no data on servers, there is nothing for us to delete on request. You can delete individual records in the app, or remove everything by clearing the app's storage in Android settings or uninstalling the app. Backup and export files you saved or shared, and backups in your Google Drive, are ordinary files under your control; delete them where you stored them.

Changes

If this policy changes, the updated version will be posted at this address with a new effective date.


Contact

Questions about this policy: redfoxappstudio@gmail.com