Privacy policy
Last updated: October 1, 2026
This policy explains what personal information WisExpense collects, why, who it's shared with, how long it's kept, and how you can control it. It covers the website at wisexpense.ca, the web app at app.wisexpense.ca, and the WisExpense apps for iPhone and Android.
In short
- We collect what you give us to track your expenses and budgets, and what we need to run the service safely.
- We don't sell your personal information, we don't show ads, and we don't use your data to train AI models.
- Your data is stored mainly in Canada. Some services we rely on process it in the United States.
- You can see, correct, export or delete your data at any time by writing to jhahn.gp@gmail.com.
- The website sets no cookies and has no analytics.
Who is responsible
WisExpense is operated by Julio Hahn, an individual based in Quebec, Canada ("we", "us").
The person in charge of the protection of personal information is Julio Hahn, who you can reach at jhahn.gp@gmail.com. Write to this address for any question, request or complaint about your personal information.
What we collect
Your account. Your name and email address when you sign up, and a profile photo if you add one. Sign-in is handled by Microsoft's sign-in service (Azure AD B2C): we never see or store your password. To keep you signed in, the web app keeps a sign-in token in your browser's storage, and the sign-in service sets its own cookies. Both are strictly necessary, and neither is used to track you.
Your preferences. Language, theme, default currency, number format, and the categories you've hidden.
The records you enter. Wallets, transactions (amounts, currencies, dates, descriptions, categories, tags and merchants), budgets, recurring items and savings goals. WisExpense doesn't connect to your bank: it only knows what you enter or scan.
Receipts you scan. The image of the receipt, and what's read from it: the merchant, total, currency and date.
Friends and sharing. Your friends list, the invitations you send and accept, and the wallets you share or that are shared with you.
Alerts. Your alert settings. Your phone number, if you turn on text message alerts. Email alerts go to your account's email address.
Your devices. For the mobile apps, a notification token and the type of device (iPhone or Android), so we can send you notifications.
Your subscription. Your plan, its status and billing dates, and the identifiers Stripe gives your customer record and subscription. Your card details go straight to Stripe. We never see or store your card number.
Technical information. When you use the app, our servers record technical information such as your IP address, the requests made and any errors. We use it to keep the service secure and working.
On the website. The website has no account, no forms, no analytics and no advertising, and it sets no cookies. It only keeps your theme, language and guide choices in your browser, as listed on the cookie page. Our hosting provider processes your IP address to deliver the pages.
Why we use it
- To provide WisExpense: store your records, convert amounts between currencies, calculate budgets and share wallets with the people you choose.
- To read the receipts you scan and fill in the expense for you to check.
- To send you the alerts and notifications you turn on.
- To manage your subscription and payments.
- To keep the service secure: detect abuse, apply usage limits and fix problems.
- To answer you when you contact us.
- To meet our legal obligations, for example keeping payment records for tax purposes.
We only use your information for these purposes, or for another purpose you consent to. We don't make decisions about you based only on automated processing. Receipt scanning is automated, but you review the result before it's saved.
Your consent
By creating an account, you consent to the collection and use of your information for the purposes above. Text message, email and push alerts are sent only if you turn them on. You can withdraw your consent at any time by changing your settings, or by deleting your account. Some information is needed for the service to work, so withdrawing consent to it means we can no longer provide the service.
Who we share it with
We share your information only with the service providers that help us run WisExpense, and only as much as they need. They're bound by contract to protect it and to use it only to provide their service to us.
| Provider | What they do for us | Where |
|---|---|---|
| Microsoft (Azure) | Hosting, database and file storage, sign-in, receipt reading (Azure AI Document Intelligence), email and text messages, notification delivery, and server logs | Canada and the United States |
| Stripe | Payments and subscriptions | Canada, the United States and other countries where Stripe operates |
| Google (Firebase Cloud Messaging) | Delivering notifications to the mobile apps | United States |
| Apple (Apple Push Notification service) | Delivering notifications to iPhone | United States |
Microsoft reads your receipt images only to return the result to us, and its terms don't allow it to use them to train its models.
We also share information:
- With the people you share a wallet with. They see the shared wallet's records and your name.
- When the law requires it, for example in response to a valid court order.
- If WisExpense is transferred to another operator. We'd tell you first, and the new operator would have to respect this policy.
Where it's stored
Your records, receipt images and the app's servers are in Microsoft Azure's Canada Central region (Toronto). Some services run in the United States: sign-in, alert processing and notification delivery, subscription processing, and the messaging between our services. Stripe, Google and Apple may process information in other countries.
So your information may be processed outside Quebec and Canada, where it may be accessible to authorities under local law. Before sending information outside Quebec, we assess whether it will be adequately protected, and we only use providers bound to protect it.
How long we keep it
| Information | How long |
|---|---|
| Your account and records | As long as your account exists. Deleted immediately when you delete your account in the app or on the web, and within 30 days when you ask support to do it |
| Receipt images | Deleted automatically 400 days after upload, or with your account if sooner |
| Database backups | Up to 8 hours |
| Server logs | 30 days |
| Record that an account was deleted (dates and outcomes only, nothing that identifies you) | 1 year |
| Payment records and invoices | As long as tax law requires, generally 6 years |
The account deletion page explains what's deleted and what's kept when you close your account.
How we protect it
Your information is encrypted in transit (HTTPS) and at rest. Access is limited to what each part of the service needs, and our services use managed identities rather than stored passwords. If a confidentiality incident creates a risk of serious injury, we'll notify you and the Commission d'accès à l'information du Québec, as the law requires.
Your rights
You can ask us, free of charge, to:
- see the personal information we hold about you;
- correct it if it's inaccurate or incomplete;
- delete it, and close your account;
- receive it in a structured, commonly used format, or have it sent to another organisation;
- withdraw your consent to a use of your information.
Write to jhahn.gp@gmail.com from your account's email address. We'll answer within 30 days. We may ask you to confirm your identity first.
If you live in the European Union, the United Kingdom or Switzerland, you also have the right to restrict or object to some processing. We process your information to perform our contract with you (providing the service), for our legitimate interests (security and logs), with your consent (optional alerts), and to meet legal obligations (payment records). Transfers outside your country rely on Canada's adequacy decision or on our providers' standard contractual clauses.
Complaints
Please contact us first at jhahn.gp@gmail.com, and we'll do our best to resolve your concern. You can also complain to:
- the Commission d'accès à l'information du Québec;
- the Office of the Privacy Commissioner of Canada;
- in the European Union, the United Kingdom or Switzerland, your local data protection authority.
Children
WisExpense isn't intended for anyone under 16, and we don't knowingly collect their information. If you think a child has given us personal information, write to us and we'll delete it.
Changes to this policy
When we change this policy, we update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.