Our promise
Spend Sense is funded by App Store subscriptions — not ads, data brokers, or investors. We make money when you find the app valuable, not by selling information about you.
This Privacy Policy explains what limited information we process for the website and waitlist, what we never collect, and the rights you have over your data.
We will never
- Sell your financial data.
- Share data with advertisers or data brokers.
- Train AI models on your personal transactions.
- Access your financial data without your explicit permission.
- Retain data longer than necessary to provide the service or meet legal requirements.
What we collect — app vs. website
Spend Sense has two surfaces: the iOS app and this marketing website. They behave very differently when it comes to data.
| Data | iOS App | Website |
|---|---|---|
| Transactions, budgets, accounts | Stored locally on device only. | Never collected. |
| Analytics | None — the app does not send usage analytics to us. | Vercel Analytics for aggregate page views and Web Vitals — no financial data, no raw transaction content. |
| Performance metrics | None. | Vercel edge and runtime metrics (e.g., response times, error rates) in aggregated form. |
| Crash reports | Anonymised error logs (no financial fields, no full receipt content). Used only to debug crashes. | N/A. |
| IP address | Not stored by the app. | Processed transiently by Vercel for routing and security. Retained in edge logs for up to 7 days, then rotated and aggregated. |
What we do not collect
For the iOS app, Spend Sense is designed to keep your information local to your device. For the website, we keep collection to the bare minimum required to operate the waitlist and understand aggregate usage.
✗ Your financial picture
- • Full transaction histories or merchant line-items from receipts
- • Bank account or routing numbers
- • Credit/debit card numbers or CVVs
- • Net worth, full budget history, or savings goal balances on our servers
✗ Sensitive identity data
- • Government IDs, Social Security Numbers, or tax IDs
- • Biometric templates — Touch ID / Face ID stay with iOS
- • Personal contacts, address book, or message content
- • Precise GPS history used to build movement profiles
GDPR data subject rights
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights over any personal data we process about you (typically limited to website and waitlist data):
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — correct inaccurate or incomplete personal data.
- Right to erasure — ask us to delete your personal data in certain circumstances.
- Right to restriction — ask us to limit how we process your personal data.
- Right to portability — receive your data in a portable format where applicable.
- Right to object — object to certain types of processing (e.g., direct marketing).
- Right to lodge a complaint with a supervisory authority.
To exercise any of these rights, email privacy@spendsenseapp.com. We aim to respond within 30 days.
California privacy rights (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:
- Right to know what categories of personal information we collect and how we use it.
- Right to request deletion of personal information, subject to certain exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information (we do not sell data).
- Right to non-discrimination for exercising your CCPA/CPRA rights.
To exercise these rights, email privacy@spendsenseapp.com with the subject line "California Privacy Request". We aim to respond within 45 days.
Nevada & children's privacy
Nevada residents. We do not sell covered information as defined under Nevada law. If our practices change, Nevada residents may still email privacy@spendsenseapp.com to request that we do not sell their personal information in the future.
COPPA (children under 13). Spend Sense is not directed to children under 13 and we do not knowingly collect information from children. If you believe a child has provided us personal information, please email privacy@spendsenseapp.com so we can delete it.
Data retention
We keep information only as long as we need it to provide the service, comply with law, or resolve disputes.
| Data type | Retention |
|---|---|
| Local app data | Stored on your device until you delete the app or clear data. |
| Cloud sync (if enabled in future versions) | Deleted within 30 days after you delete your account or request erasure. |
| Support conversations | 1 year after our last interaction with you. |
| Crash logs | 30 days in anonymised form. |
| Website analytics (Vercel) | Up to 2 years in aggregated form (no raw financial content). |
Questions about privacy?
We're committed to transparency. If you have questions about this policy or how we handle data, email our privacy team:
privacy@spendsenseapp.com