Privacy Policy

• Your financial data lives on your device. Accounts, transactions, budgets, categories and settings are stored in the app on your phone. We don't receive a copy.
• Smart Capture works on your device. Bank texts it reads are encrypted on your phone, deleted within days, and never sent to us.
• Backups go where you choose: a file you save, or your own Google Drive.
• We use basic, anonymous app analytics in store-installed versions of the app, and never your financial data or messages.
• No ads, no tracking across apps, no selling data.

Everything you enter or confirm in Spenday (accounts and balances, income, expenses and transfers, budgets, categories, recurring payments, salary and savings settings, notes and your preferences) is stored locally in the app's private storage on your device.

This information is not uploaded to Spenday servers; we don't operate servers that hold your financial data. Your device's operating system may include app data in its own device backups (for example iCloud or Android backup) according to your device settings.

Smart Capture can suggest transactions from the text alerts your bank sends you. It is off until you turn it on, and nothing is recorded until you review and confirm each suggestion.

• On Android, Smart Capture uses Notification Access, which you grant in your phone's settings. It only looks at notifications posted by your default messaging (SMS) app. It does not read your SMS inbox.
• On iPhone, iOS doesn't let apps read messages. Instead, you can set up a Shortcuts automation that passes a bank text to Spenday when it arrives.
• Only bank-format messages are kept. A message is stored only if it matches a bank message format you set up in the app. Everything else (chats, one-time passwords, promotions) is ignored and not stored.
• Kept briefly and encrypted. Captured messages are encrypted on your device with a key held in your phone's secure key store. The original message text is deleted within 3 days; unconfirmed suggestions expire after 30 days. If you choose to save sample messages to help set up a new bank format, those are kept for up to 7 days.
• Never sent to us. Reading, understanding and matching messages all happens on your device.

You can stop Smart Capture at any time by turning off Notification Access for Spenday in your phone's settings (Android) or deleting the Shortcuts automation (iPhone). Turning it off clears captured messages and pending suggestions.

• File backups. You can export a backup file and choose where to save it. Only you decide where that file goes.
• Google Drive backups. If you choose to back up to Google Drive, you sign in with Google and the backup is saved to your own Drive. Spenday asks only for access to files it creates (Google's drive.file permission), so it cannot see your other Drive files. Your backup is stored by Google under Google's terms; we can't access it.

To understand which features are used and to find problems, versions of Spenday installed from the App Store or Google Play use Google Analytics for Firebase. It records events such as screens opened and features used, along with general device and app information (for example device model, operating system and app version), an app-instance identifier and your approximate region.

Analytics never includes your balances, transactions, categories, budgets or the content of any message. We don't use analytics for advertising and we don't track you across other companies' apps or websites. Google processes this information under the Google Privacy Policy.

• Exchange rates. To show amounts across currencies, the app downloads public exchange rates from a content delivery network (jsDelivr). The request includes only currency codes. As with any web request, the provider can see your device's IP address.
• Private AI (optional). If you turn on Private AI insights, the app downloads an AI model once from Hugging Face. After that, analysis runs entirely on your device. Your transactions are not sent to an AI server.
• Purchases. Subscriptions and one-time purchases are handled by Apple or Google. We receive confirmation of what you've purchased so we can unlock features; we never receive your payment card details.

• Notifications for reminders you choose, such as bill, budget and card due-date reminders. These are scheduled on your device.
• Notification Access (Android, optional) for Smart Capture, as described above.

Your data stays on your device until you delete it. You can erase everything from within the app (Settings → Backup & Export → Reset All Data), or by uninstalling Spenday. Backups you exported or saved to Google Drive remain wherever you put them until you delete them. Because we don't hold your financial data, we can't recover it for you. Please keep a backup.

Analytics data is kept by Google for a limited period under our Google Analytics retention settings and is then deleted automatically.

We design Spenday so your financial data never needs to leave your device. Smart Capture messages are encrypted with keys protected by your phone's secure hardware, and connections to the services above use encrypted HTTPS. No method of storage or transmission is perfectly secure, so we also recommend keeping your phone locked and its software up to date.

Depending on where you live, you may have rights to access, correct, delete or export your personal data, or to object to its use. Since your financial data is stored on your device, you can view, change, export and delete it directly in the app. For analytics data or any other privacy request, contact us at emmito.contact@gmail.com and we'll respond within 30 days.

Spenday is not directed to children under 13, and we don't knowingly collect information from them.

If we change how Spenday handles data, we'll update this page and the date at the top. For significant changes, we'll also let you know in the app.

Emmito (Pvt) Ltd., Sri Lanka · emmito.contact@gmail.com