Privacy Policy

SpendInsights (“we”, “us”, or “our”) is a personal finance tracking application that helps you understand and manage your spending. We are committed to protecting your personal information and being transparent about the data we collect and how we use it.

This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and the choices you have regarding your data. By using SpendInsights, you agree to the practices described here.

Account information: When you sign up, we collect your name, email address, and password (stored as a secure hash). If you sign up via Google OAuth, we receive your name and email from Google.

Financial data: Expense entries, receipt images, budget limits, and spending categories that you create or upload within the app.

Email forwarding content: If you use our email forwarding feature, the content of emails you forward to your SpendInsights address is processed to extract transaction data (merchant, amount, date).

Usage data: Basic information about how you interact with the app, such as pages visited and features used, to help us improve the product.

Device and session data: IP address, browser type, and session tokens for authentication and security purposes.

Your data is stored in a PostgreSQL database hosted on Neon, a secure serverless database platform. Data is encrypted at rest and all data in transit is protected using HTTPS/TLS.

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. However, no system is completely secure, and we cannot guarantee absolute security.

SpendInsights uses the following third-party services to operate:

• Neon — Database hosting (PostgreSQL)
• Google OAuth — Optional sign-in via Google account
• OpenAI & Anthropic — AI models used to generate spending insights; transaction data may be sent to these APIs for analysis
• Postmark — Inbound email processing for the email forwarding feature

Each of these services has its own privacy policy. We only share the minimum data necessary for each service to function.

You have the right to:

• Access — Request a copy of the data we hold about you
• Correction — Update or correct inaccurate information in your account settings
• Deletion — Request deletion of your account and associated data
• Opt-out — Unsubscribe from weekly digest emails at any time via Settings

To exercise any of these rights, please contact us at the address below.