Privacy policy

Spendly is a personal spending tracker. This page says, plainly, what it stores about you, why, how it is protected, and how to get rid of it.

What we store

• Your account: your name, email address and a hash of your password. Your authenticator secret is stored encrypted.
• What you enter: accounts, transactions, categories, people, tags, goals, loans, budgets, recurring payments and any receipts you attach.
• Sign-in records: when you signed in and from which browser and operating system (for example “Chrome on Windows”), so you can review and revoke your sessions.
• Security events: a log that something happened (a login, a password change, an export) with a timestamp. It holds no amounts, names or notes.

We do not store your IP address, we do not connect to your bank, and we do not read your SMS or contacts.

How it is protected

• Everything that describes your money, such as amounts, balances, names of accounts and people, notes, merchants, goal and loan details, is encrypted with a key that is unique to you before it is saved. Receipts are encrypted the same way before they are written to disk.
• What stays readable so the app can work: dates, whether an entry is an expense or income, and internal ids. Someone looking at the database could see that an entry exists on a date, not what it was or how much.
• Your password is stored only as a salted hash. Signing in needs your password and a code from your authenticator app. All traffic uses HTTPS.
• Your key is itself protected by a master key kept outside the database. The person who runs Spendly can reach your data in the same way any hosted service can, so we keep access to a minimum and never use it to look at your finances.

What we do not do

• No advertising, no analytics or tracking scripts, no selling or sharing of your data.
• One cookie, used only to keep you signed in. It is needed for the app to work, so there is no cookie banner.

Emails

We send emails only for your own account: your sign-up code, password reset codes, a welcome message, security notices such as a new sign-in, and the reminders you switch on in Settings. They go through an email delivery provider that only sees the message being delivered. Email codes are never sent as links.

How long we keep things

• Things you delete in the app are kept for a while so you can undo it. Transactions, templates, budgets and recurring payments are removed for good after 30 days.
• When you delete your account, everything is erased at once, including receipts. See how to delete your account. A copy may remain in a backup until that backup expires; backups are encrypted, and a deleted account is not restored from them.
• Security event records stay after deletion but are stripped of any link to you.

Your choices

• Export your transactions at any time (Settings → Import & export).
• Review and sign out your devices (Settings → Security).
• Correct your name in Settings → Profile.
• Delete everything (Settings → Security → Delete account).

Changes

If this policy changes in a way that matters, the date above changes and we tell you inside the app before it applies.