Security & privacy: how Spenzo protects your money data
5 min read · Updated 2026-07-15
Your financial data is some of the most personal information there is, and Spenzo is built to keep it that way. Here’s a plain-language look at how Spenzo protects your data and the controls you have over it.
What you’ll learn
- Secure, http-only authentication
- We never sell your personal data
- Export or delete your data anytime
- Bank connections are read-only
- Private mode hides sensitive figures
Secure sign-in
When you sign in, Spenzo uses a secure, signed, HttpOnly session cookie to keep you logged in. HttpOnly cookies cannot be accessed by browser JavaScript, which helps reduce the risk of session theft from script-based attacks. Passwords are securely hashed and are never stored in plain text.
We don’t sell your data
Spenzo makes money the honest way — a simple subscription. We do not sell your personal or financial data, and we don’t run an ad business that depends on profiling you. Your numbers are yours.
You’re in control of your data
You can export your data whenever you like, and you can delete or fully erase your account on your terms. You also choose whether receipt images are kept — if you’d rather Spenzo didn’t store them, it won’t.
Bank connections are read-only
If you connect a bank via Tink (available across Europe, starting with Ireland), Spenzo never sees your bank login and the access is read-only — it can import transactions but can never move money. You can disconnect at any time.
Private mode
For times when someone might glance at your screen, Private mode hides your income and sensitive figures across the app with a single tap of the eye icon. It’s display-only — your data isn’t changed — and the setting syncs across your devices.
Frequently asked questions
Does Spenzo sell my financial data?
No. Spenzo runs on a simple subscription and never sells your personal or financial data.
Can I delete my Spenzo data?
Yes. You can export your data anytime, and delete or fully erase your account whenever you choose.
Is connecting my bank safe?
Yes. Bank connections through Tink are read-only — Spenzo never sees your bank login and can never move money — and you can disconnect at any time.
How does Spenzo keep my login secure?
Sessions use signed, http-only cookies that scripts in the browser can’t read, and passwords are hashed, never stored in plain text.