Privacy Policy
Last updated: April 3, 2026. Replace placeholders with your final legal text and effective date before production.
1. Introduction
SpendWhat (“we,” “our,” or “us”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our mobile application and related services (collectively, the “Service”). By using the Service, you agree to this policy.
2. Information we collect
We may collect information such as:
- Account data: email address, display name, and authentication identifiers when you sign up or sign in (including via email, Apple, or Google).
- Financial usage data: transactions, categories, budgets, income sources, and other data you enter in the app.
- Device & diagnostics: device type, OS version, app version, crash logs, and performance data (e.g., via error reporting tools such as Sentry—configure your deployment to match your actual vendors).
- AI processing: when you use bill scan or chat, content you submit may be processed by our backend or third-party AI providers to generate responses. Update this section with your actual data flows, retention, and subprocessors.
3. How we use information
We use information to:
- Provide, maintain, and improve the Service;
- Authenticate users and sync data across devices when enabled;
- Provide AI-powered features you request;
- Communicate about the Service, security, or legal notices;
- Comply with law and enforce our Terms of Service.
4. Storage and security
We implement reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure. Describe where data is stored (e.g., region, cloud provider) and your retention practices here.
5. Third-party services
The Service may integrate third parties such as Apple Sign In, Google Sign-In, app stores for subscriptions, analytics, or error reporting. Their use is governed by their respective privacy policies. List the services you actually use.
6. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, or export your data, or to object to certain processing. Contact us at the address below to exercise applicable rights. You may also control some data through in-app settings (e.g., account deletion where offered).
7. Children
The Service is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.
8. International transfers
If you access the Service from outside the country where our servers operate, your information may be transferred across borders. Describe your approach and safeguards (e.g., standard contractual clauses).
9. Changes
We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date. Continued use after changes constitutes acceptance unless otherwise required by law.
10. Contact
Questions about this policy: [email protected]. Replace with your real support or privacy contact.