Privacy Policy

What we collect

• Account info — name, email address, and password (we store a one-way hash, never the password itself). Also a preset icon you choose to represent your account.
• Google sign-in — if you use “Continue with Google” instead of a password, we receive your name, email, and whether Google has verified that email. We never see your Google password.
• Financial data you enter — accounts, transactions, categories, budgets, goals, and recurring rules you create, or restore from a backup file. This is manually entered by you; Spent has no bank or card integration and doesn't fetch this from anywhere else.
• Preferences — your primary currency, theme (light/dark), and similar settings.

How we use it

Solely to run the app for you: showing your data back to you, sending account emails you've triggered (email verification, password reset, email-change confirmation), and calculating things like balances, budget progress, and reports. We don't use your data for advertising, and we don't build any profile of you beyond what the app needs to function.

Who else sees it

A few service providers process data on our behalf, strictly to run the app:

• Supabase — hosts our database (in Seoul, South Korea), where your account and financial data live.
• Vercel — hosts the app itself.
• Resend — delivers our transactional emails (verification, password reset).
• Google — only if you choose to sign in with Google.
• Frankfurter (ECB exchange rates) — when you record a transfer between accounts in different currencies, we look up a reference rate by currency code only; no personal or account data is sent.

We don't sell or rent your data to anyone, for any reason.

Cookies

Spent sets one essential cookie to keep you signed in. There are no advertising or analytics cookies, and no cross-site tracking.

Security

Passwords are hashed (never stored in plain text), all traffic is encrypted in transit (HTTPS), and access to the database is restricted to the app itself. No system is perfectly secure, but we don't take shortcuts on the basics.

Your data, your choices

• Export — download a full backup of your data anytime from Backup & restore in Profile.
• Correct — edit your name, email, currency, and entries directly in the app.
• Delete — email us at help@spentonline.in to have your account and all associated data permanently deleted. There's no self-serve delete button yet — we process these by hand.

Data retention

We keep your data for as long as your account is active. If you ask us to delete your account, we remove it (and everything linked to it — accounts, transactions, categories, and so on) from our production database; backups age out on their normal schedule afterward.

Children

Spent isn't directed at children, and we don't knowingly collect data from anyone under 16.

Changes

If this policy changes materially, we'll update the date above. Continuing to use Spent afterward means you accept the revised policy.

Contact

Questions, requests, or concerns about your data: help@spentonline.in.