The short version: your financial data is yours. We don't sell it, we don't show ads, we don't use third-party trackers, and you can export or delete everything at any time from inside the app.
What we collect
Your email address, an optional display name, and the financial information you choose to enter: transactions, wallets, budgets, savings goals, and receipt photos. We also store your preferences (base currency, language, theme) and anonymous first-party usage events (such as "paywall viewed") that contain no advertising identifiers and are never shared with anyone.
What we never do
We never sell your data, share it with advertisers or data brokers, embed third-party tracking SDKs, or read your financial data for any purpose other than operating Spendly for you.
Payments
Subscriptions are billed entirely by Apple or Google; Spendly never sees your card details. Our subscription partner, RevenueCat, processes store purchase receipts solely to manage your subscription status.
Security
Data is encrypted in transit (TLS) and at rest. Passwords are hashed with Argon2id and cannot be recovered by anyone, including us. Receipt images live in private storage reachable only through short-lived expiring links.
Your rights
Export everything (Settings → Export my data) or delete your account (Settings → Delete account) at any time. Deletion revokes access immediately and permanently erases your data within 30 days. You may also request deletion at this page or by emailing support@joinspendly.com.
Service providers
We use a small set of processors strictly to run the service: our hosting provider, RevenueCat (subscriptions), Sentry (crash reports, with personal data collection disabled), Firebase Cloud Messaging (push delivery — device token only), and a public exchange-rate service (which receives no personal data).