Privacy Policy

1. Overview & Architecture

Welcome to Spendy ("we," "our," or "the App"). We are committed to safeguarding your privacy and ensuring you have complete dominion over your personal financial data.

Unlike conventional personal finance applications that require linking bank logins and syncing transaction histories to remote corporate cloud servers, Spendy is built upon an offline-first architecture. Your financial figures, budgets, transaction notes, and attached receipts are stored strictly on your local physical device.

2. Data We Do & Do Not Collect

2.1 What We NEVER Collect

• No Banking Credentials: We never ask for your bank usernames, passwords, credit card numbers, or PINs.
• No Cloud Financial Records: We do not store copies of your transaction amounts, notes, balances, or debts on our servers.
• No Location Tracking: We do not gather or track your physical GPS coordinates.
• No Identity Profiling: We do not build marketing profiles based on your shopping behavior.

2.2 What You Store Locally

All inputs you record in Spendy stay on your local device within an encrypted SQLite database:

• Transaction records (amount, currency, timestamp, vendor, category).
• Monthly and category budget configurations.
• Savings targets and milestone goals.
• Locally stored photo attachments of physical receipts.
• Locally created recurring transaction schedules and custom templates.

3. Local Storage & Encryption

Spendy utilizes your device's isolated application sandbox and standard SQLite database storage engines. Operating system sandboxing ensures that other installed applications on your mobile device cannot inspect or access Spendy's database.

When you enable the Biometric App Lock feature within Spendy Settings, the application gates interface access behind Apple Face ID / Touch ID or Android BiometricPrompt APIs. The cryptographic verification is handled strictly by the Secure Enclave / Android Keystore hardware on your device; Spendy never sees or stores your biometric fingerprints or facial scans.

4. Device Permissions

Spendy requests only the minimum device permissions required to provide its features:

• Microphone: Used solely when you explicitly tap the Voice Logging microphone button to record and parse transactions via on-device speech recognition. The microphone is never activated in the background.
• Camera / Photo Library: Used solely when you choose to photograph or attach an image of a paper receipt to a specific transaction. Selected images are stored inside your app's private sandbox folder.
• Biometric Sensors (Face ID / Fingerprint): Used solely to authenticate you upon opening the app when App Lock is activated.
• Local Notifications: Used solely to schedule local on-device alerts for your budget limits and recurring bill reminders. No data leaves the device to generate notifications.

5. Third-Party Service Providers

To maintain app stability and facilitate store purchases, we interact with a limited set of verified industry providers:

5.1 In-App Purchases (RevenueCat & Official App Stores)

When purchasing Spendy Pro (monthly, annual, or lifetime subscriptions), payments are handled directly by Apple (App Store) or Google (Google Play). Spendy never receives or stores your credit card details.

We utilize RevenueCat Inc. (300 Euclid Avenue, San Francisco, CA 94118, USA) solely to manage subscription entitlement tokens and restore past purchases across your devices. RevenueCat receives an anonymous app user identifier and receipt tokens to confirm active entitlements under strict data processing agreements.

5.2 Anonymous Diagnostics & Crash Reporting (Firebase Crashlytics)

To troubleshoot software bugs and improve stability, Spendy may collect anonymous diagnostic logs (such as device manufacturer, OS version, stack trace, and crash timestamps) via Google Firebase Crashlytics.

6. Data Retention & Deletion

Because your data is stored locally, you have complete authority over its lifecycle:

• Immediate Deletion: You can purge specific transactions, categories, or perform a total factory reset via the "Data Cleanup" screen within Spendy settings.
• App Uninstall: Uninstalling the Spendy app removes all local database files and attached receipts permanently from your handset.
• Portable Exports: You can export complete PDF bank statements or raw CSV files at any time to preserve an offline backup under your personal control.

7. Your Legal Privacy Rights (GDPR & CCPA)

Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you are entitled to comprehensive data subject rights:

• Right to Access (GDPR Art. 15): You have immediate access to all personal data inside the app.
• Right to Rectification (GDPR Art. 16): You may edit any transaction, account name, or budget anytime.
• Right to Erasure (GDPR Art. 17): You can delete all recorded data instantly using the in-app Data Cleanup tool.
• Right to Data Portability (GDPR Art. 20): You can export your data in structured PDF and CSV formats.
• No Sale of Personal Data: We do not sell your personal information as defined by CCPA.

8. Children's Privacy

Spendy is not directed to individuals under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect or solicit personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Contact & Governance

If you have any questions, suggestions, or concerns regarding this Privacy Policy or Spendy's privacy architecture, please contact us: