EXXTRA

EXXTRA

Privacy Policy for EXXTRA

This Privacy Policy explains how IntoInWorks accesses, uses, stores, shares, and protects information when you use the EXXTRA mobile application and related services.

Effective date
September 26, 2026
Last updated
September 26, 2026

EXXTRA is an expense-management application that helps users identify and organise financial transactions. EXXTRA is not a bank, payment processor, or financial institution.

1. Information We Handle

Phone number and account information

EXXTRA uses phone-number authentication. When you create or access an account, we process:

  • Your phone number
  • Firebase authentication identifiers
  • Account creation information
  • Authentication and security information

Authentication is provided through Google Firebase Authentication.

SMS information

With your permission, EXXTRA accesses SMS messages stored on your Android device to identify and categorise eligible financial transactions.

EXXTRA uses SMS access only for its core expense-management functionality.

  • SMS messages are processed on your device.
  • Non-financial messages are ignored.
  • Raw SMS message content is processed temporarily.
  • Raw SMS content is not copied to our cloud database.
  • Raw SMS content is not sold, shared for advertising, or used for marketing.
  • EXXTRA does not send SMS messages on your behalf.

You can deny or revoke SMS permission at any time through your device settings. If permission is denied, automatic transaction detection from SMS will not work, but other available features may continue to function.

Transaction and expense information

EXXTRA may extract or process transaction information such as:

  • Transaction amount
  • Transaction date and time
  • Credit or debit type
  • Merchant or biller name
  • Bank or message sender
  • Account reference or masked account information
  • Transaction category
  • Bill due dates
  • User-created categories and budgets

Parsed transaction records are stored locally on your device. Raw SMS message bodies are not included in those stored records.

Profile and budget information

When you create profiles, select bank accounts, or configure budgets, EXXTRA may store information including:

  • Profile names
  • Bank names
  • Bank SMS sender identifiers
  • Account references
  • Expense categories
  • Budget amounts
  • Monthly expenditure summaries

Some profile, budget, and aggregated expenditure information may be stored in Google Cloud Firestore so it can be associated with your authenticated account.

Information you provide to us

If you contact us, we may receive information such as your name, email address, phone number, message, and any other details you choose to provide.

Technical and security information

EXXTRA uses Firebase App Check and related security services. Google may process limited device, application, and integrity information to verify that requests come from a legitimate installation of EXXTRA and to protect the service from abuse.

2. How We Use Information

We use information to:

  • Create and authenticate user accounts
  • Detect eligible financial transactions from SMS messages
  • Organise and categorise expenses
  • Display transaction history and spending summaries
  • Manage profiles, categories, and budgets
  • Synchronise supported account information
  • Maintain application security
  • Prevent fraud, misuse, and unauthorised access
  • Diagnose technical problems
  • Respond to support and privacy requests
  • Comply with applicable laws and Google Play requirements

We do not use SMS or financial information for advertising.

3. Local and Cloud Storage

Raw SMS messages are read and processed on your device and are not uploaded to our cloud database.

Parsed transaction records and application preferences may be stored locally on your device. Clearing EXXTRA’s application data or uninstalling the application may remove locally stored information.

Phone numbers, account identifiers, profile information, selected bank-account references, budgets, and aggregated expenditure information may be stored using Google Firebase services.

Uninstalling EXXTRA does not automatically delete information connected to your Firebase account.

4. Service Providers and Data Sharing

We use Google Firebase services to provide authentication, cloud storage, and application security. These services may process information on our behalf according to Google’s applicable privacy and security terms.

We may disclose information:

  • To service providers required to operate EXXTRA
  • When you request or authorise the disclosure
  • When required by law or a valid legal process
  • To investigate fraud, security threats, or misuse
  • To protect the rights and safety of users, EXXTRA, or others

We do not sell personal information, SMS information, or financial information.

We do not share personal or sensitive information with advertising companies for targeted advertising.

You can review Google’s Privacy Policy.

5. Data Retention

Raw SMS message content is processed temporarily and is not retained by EXXTRA.

Parsed transaction records stored locally are generally limited to the application’s supported transaction-history period, currently up to six calendar months.

Cloud account, profile, budget, and aggregated expenditure information may be retained while your account remains active. When an account-deletion request is completed, we delete or anonymise associated information unless retention is required for security, fraud prevention, legal compliance, or dispute resolution.

Support communications may be retained for as long as reasonably necessary to respond to requests and maintain appropriate records.

6. Account and Data Deletion

You may request deletion of your EXXTRA account and its associated cloud data.

To request deletion:

Your request should include the phone number associated with your EXXTRA account. We may need to verify that you own the account before completing the request.

Deleting your account will delete the account information and associated cloud data that EXXTRA is not legally required to retain.

Uninstalling the app by itself does not delete your cloud account or cloud data.

Local data can be removed by clearing EXXTRA’s application data or uninstalling the application.

7. Data Security

We use reasonable administrative and technical safeguards designed to protect information, including:

  • Encrypted network connections
  • Firebase authentication
  • Access controls
  • Firebase App Check
  • User-scoped data storage
  • Data minimisation
  • Avoiding the cloud storage of raw SMS message content

No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

Depending on applicable law, you may have the right to:

  • Access information associated with your account
  • Correct inaccurate information
  • Request deletion of your account and data
  • Withdraw SMS permission
  • Object to or restrict certain processing
  • Contact us with privacy questions or complaints

You can revoke SMS access through your Android device settings. Revoking permission prevents future SMS scanning by EXXTRA.

9. Children’s Privacy

EXXTRA is an expense-management application and is not designed for children.

We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us so that we can investigate and take appropriate action.

10. Changes to This Privacy Policy

We may update this Privacy Policy when EXXTRA’s features, data practices, or legal obligations change.

The revised policy will be published on this page with an updated “Last updated” date. Where appropriate, we may also provide notice within the application.

11. Contact Us

For questions, privacy requests, or complaints, contact:

Developer
IntoInWorks
Application
EXXTRA