Privacy Policy

This policy applies to everyone who uses Spenzo — the website at spenzo.co, the app at app.spenzo.co, and the Spenzo iOS app. In this policy, “Spenzo”, “we”, “us” and “our” refer to the provider of the Spenzo service; “you” means the person using it.

We collect only what we need to run Spenzo for you:

• Account details you provide — your name, email address, and (for email/password accounts) a password, which is stored only as a secure one-way hash.
• Financial data you add — transactions, categories, budgets, income sources, savings goals, and your preferences.
• Receipt images — only if you scan a receipt and have receipt storage enabled; otherwise the image is used to extract the details and is not stored.
• Bank data — if you choose to connect a bank, the transactions imported through our open-banking provider. We never receive or store your bank login credentials.
• Payment information — handled by our payment processors (Stripe on the web, Apple on iOS). We store only your subscription status and processor reference IDs — never your card number.
• Technical and security data — your IP address and device/browser information, used to keep your account secure, apply rate limits, manage your signed-in devices, and diagnose errors.
• Communications — messages you send us for support.

We use your information to:

• Provide the service — show your dashboard, compute budgets and your daily “safe to spend”, and power Goals and Analytics.
• Deliver features you use — receipt scanning, the AI Coach, and voice logging.
• Send notifications you have opted into — budget, bill and summary alerts by email, and (on iOS) push notifications.
• Process payments and manage your subscription.
• Keep Spenzo secure — authenticate you, prevent abuse and fraud, and investigate problems.
• Provide support and respond to your requests, and comply with our legal obligations.

We do not sell your personal data, rent it, or share it with advertisers.

Where data-protection law applies, we rely on: performance of our contract with you (to provide the app you signed up for); your consent (for optional features and marketing emails, which you can withdraw at any time); our legitimate interests (to secure the service and improve the product); and compliance with legal obligations.

Spenzo's AI features — the AI Coach, receipt scanning and voice logging — are powered by Anthropic (Anthropic PBC), a third-party AI service that operates Claude. When you use one, the relevant information is sent to Anthropic solely to produce your result: your budget summary and recent transactions for the AI Coach, the receipt image you scan, or the text you enter for voice logging.

AI features are off until you turn them on. The first time you use one, the app asks your permission and discloses what is shared and that it goes to Anthropic — nothing is sent to any AI service before you agree, and you can turn AI features off at any time in Settings → Data & Privacy. Anthropic processes this content solely to produce your result; it does not use it to train its models or to target advertising to you, and handles it under its commercial terms, which provide protections equivalent to those described in this policy.

When AI features are off, Spenzo uses on-device calculations only and nothing leaves the app for AI.

Connecting a bank is optional and available in supported European regions through our open-banking provider, Tink. You authorise the connection directly with your bank; Spenzo never sees your bank login. Access is read-only — Spenzo can import transactions but can never move money. We store the access token in encrypted form, and you can disconnect at any time from Settings.

We share data only with the providers that help us run Spenzo, each for a specific purpose and under contract:

• Vercel — application hosting and delivery.
• Neon (PostgreSQL) — the database that stores your data.
• Vercel Blob — private storage for receipt and avatar images.
• Resend — sending and receiving email (verification, alerts, support).
• Stripe — card payments and subscriptions on the web.
• Apple and RevenueCat — in-app purchases on iOS.
• Tink — bank connections (if you use them).
• Anthropic (Anthropic PBC) — the AI Coach, receipt scanning and voice logging (only when you enable AI features).
• Apple (APNs) — push notifications on iOS.
• Sentry — error diagnostics (configured to exclude your personal and financial data).
• Google, Microsoft or Apple — only if you choose to sign in with them.

We may also disclose information if required by law, to protect our rights or users’ safety, or as part of a business transfer — in which case this policy continues to apply.

Spenzo uses an essential, secure session cookie to keep you signed in; it is http-only, so scripts in your browser cannot read it. We use privacy-friendly product analytics to understand how the app performs. We do not use third-party advertising or cross-site tracking cookies.

We keep your data for as long as your account is active. When you delete your account, we delete your associated data, except where we must retain limited records (for example, payment or legal records) for as long as the law requires.

Passwords are hashed with bcrypt and never stored in plain text. Sessions use http-only, same-site, secure cookies (or a token held in the iOS Keychain on the app). Traffic is encrypted with HTTPS/HSTS, bank tokens are encrypted at rest, and each device has its own revocable session. No method of storage or transmission is 100% secure, but we work hard to protect your information.

You are in control of your data. From your settings you can:

• Export all of your data (JSON, CSV, Excel or PDF).
• Correct or update your information.
• Erase your ledger while keeping your account, or permanently delete your account and all associated data.
• Choose whether receipt images are stored, and turn Private mode on to hide income.
• Control every notification, and unsubscribe from marketing email at any time.

If you are in the EEA or UK, you also have the rights to access, rectify, erase, restrict, port and object to processing, to withdraw consent, and to lodge a complaint with your local data-protection authority.

Spenzo and some of our providers operate in different countries, so your data may be processed outside your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

Spenzo is not intended for children under 16 (or the age of digital consent in your country). We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will remove it.

We may update this policy from time to time. We will change the “last updated” date and, for material changes, provide additional notice. Continuing to use Spenzo after an update means you accept the revised policy.

Questions or requests about your privacy? Email us at support@spenzo.co and we’ll help.