XpenseWhat we can do
Read your mail to find bank and card statements, and transaction-alert emails.
Security and privacy
Your inbox access,
explained simply.
You're trusting us with access to your Gmail. Here's exactly what that does and doesn't mean.
Gmail access
What we can never do
Send mail, delete mail, or change anything in your inbox. Google blocks those actions outright for the access we request — it's not just a policy, it's technically impossible.
Your Gmail password never reaches us. You always sign in directly through Google's own consent screen — we never see or handle your password.
Your data, kept private
Your accounts and transactions
Private to you — nobody else can see them.
Statement PDFs
Not kept. We read a statement once to pull out the transactions, then it's gone.
Your review queue
Saved with your account so it follows you between devices and survives signing out.
You're always in control
-
Disconnect Gmail
One button in Track. Fetching stops immediately. Statements already imported stay — they're your transactions now, not Gmail's.
-
Revoke from Google directly
You don't have to take our word for it. Remove XpenseAI at myaccount.google.com/permissions and access ends at the source, whatever the app does.
-
Delete your data
Delete your data any time and it's gone — not just from this device, everywhere.
One thing to be aware of. A statement naturally contains your name, account details and spending history — that's what we read to build your transaction list. If you're not comfortable with that, this app isn't the right fit.