Privacy Policy

1. Introduction

Welcome to Spendary ("we," "our," or "us"). Spendary is operated by an independent developer based in Slovakia. The developer acts as the data controller responsible for processing personal data under this Privacy Policy. Spendary is a mobile expense tracking application that helps you scan, upload, and manually enter receipts and invoices. We use AI-powered technology to extract and categorize expense items automatically.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application. Please read this policy carefully to understand our practices regarding your data.

2. Information We Collect

2.1 Account Information

When you sign in using Google OAuth, we collect:

• Your email address
• Your name (if provided by Google)
• Your profile picture (if provided by Google)

2.2 Receipt and Invoice Data

When you scan, upload, or manually enter receipts and invoices, we collect:

• Images of receipts and invoices
• Extracted text from receipts (via OCR)
• Merchant names, dates, amounts, and item details
• Categories and tags you assign to expenses
• Any notes or additional information you add

2.3 Usage Data

We may collect information about how you use the application, including:

• Features you access and use
• Time and date of your activities
• Device information (type, operating system)

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the expense tracking service
• Process and extract data from receipts using AI technology
• Categorize and organize your expenses
• Authenticate your account and manage your session
• Improve our AI extraction and categorization algorithms
• Respond to your inquiries and provide customer support
• Ensure the security and integrity of our service

We do not sell your personal data to third parties. Your data is used solely to provide and improve the Spendary service.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contractual necessity – to provide the Spendary service and process receipts
• Legitimate interests – to improve the functionality and security of the service
• Consent – when you voluntarily provide certain data

5. AI and Third-Party Services

5.1 AI Processing

We use third-party AI services to process your receipts:

• OpenAI: For extracting and categorizing items from receipts
• Google Cloud Vision API: For optical character recognition (OCR) to read text from receipt images

When you upload a receipt, the image and extracted text may be sent to these services for processing. These services are bound by their own privacy policies and data processing agreements.

Some third-party services we use may process data outside the European Economic Area (EEA). In such cases, we rely on appropriate safeguards such as standard contractual clauses to ensure adequate protection of personal data.

5.2 Authentication and Storage

We use the following services for authentication and data storage:

• Google OAuth: For user authentication
• Supabase: For secure data storage and user management

6. Data Storage and Security

Your data is stored securely using Supabase, which provides:

• Encrypted data transmission (HTTPS)
• Encrypted data at rest
• Access controls and authentication
• Regular security audits and updates

While we implement reasonable security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. You can delete your account and all associated data at any time through the application settings.

When you delete your account, we will delete your personal information and receipt data from our systems, subject to any legal retention requirements.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request transfer of your data
• Objection: Object to certain processing activities

To exercise these rights, please contact us using the information provided in the Contact section below.

9. Cookies and Tracking

We may use cookies or similar technologies on our website to maintain authentication sessions and improve user experience. You can control cookies through your browser settings, but this may affect the functionality of the service.

10. Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top
• Notifying you via email or in-app notification for material changes

You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: