Privacy Policy

SpndX is a personal finance app for tracking expenses, managing budgets, and sharing spending spaces. This Privacy Policy explains what information the app handles, how that information is used, and the choices available to you.

SpndX is designed to support local-first usage. You can use parts of the app without creating an account, and account-based sync is optional.

• Account information such as your email address and sign-in details when you use OTP or Google sign-in.
• Profile details you choose to provide, such as your name, profile picture, preferred currency, and onboarding preferences.
• Finance data you create in the app, including expenses, categories, budgets, notes, balances, settlements, shared-space activity, and analytics derived from that data.
• Shared-space member information, including names and email addresses used to invite or identify participants in a space.
• Imported data you choose to bring in, such as Splitwise CSV files and the mapped member details from those files.
• Technical and sync data such as a generated device identifier, event identifiers, timestamps, sync status, and basic request or authentication tokens needed to keep your data in sync.

• To create, store, edit, and display your expense and budgeting records.
• To sync your data across devices when you sign in and enable account-based usage.
• To let you create and manage shared spaces, split expenses, record settlements, and invite or join members.
• To generate dashboards, trends, financial insights, and currency-aware views based on the information you enter.
• To maintain app security, session management, backup and restore flows, and product reliability.

SpndX stores app data on your device using local database and preference storage so the app can work offline first. This may include your expense history, settings, recent members, cached currency data, and backup metadata.

Authentication tokens and the app-generated device identifier are stored using secure device storage where supported.

If you sign in, SpndX uses Supabase authentication and related backend services to verify your account and sync eligible data. Synced data can include your profile metadata, spaces, events, balances, and other records required for multi-device access and collaboration.

If you stay in local-only mode, your data remains on your device unless you actively export, back up, share, or otherwise send it outside the device.

SpndX uses these permissions only for the feature you choose to use.

• Camera access may be used to scan QR codes for joining spaces or payment-related flows.
• Photo or gallery access may be used when you choose an image containing a QR code.
• File access may be used when you import CSV files or restore a local backup file.
• Storage access may be used to create and restore local backup files on supported devices.

When you create or join shared spaces, information related to that space may become visible to the other members of that space. This can include names, email addresses, expenses, settlements, notes, and balance-related information needed for the group to function.

If you create a local backup, the backup file is stored on your device or selected storage location. Backup protection also depends on the security of your device and any location where you keep that file.

If you import a CSV file, SpndX processes that file to map members and create records inside the app. Imported content is handled as part of your app data after import.

Local data remains on your device until you delete it, uninstall the app, clear the app data, or restore over it with another backup.

Cloud-synced data may remain associated with your account or shared spaces until it is deleted through the product workflows or backend retention processes.

• Use SpndX in local-only mode instead of signing in.
• Choose whether to sync data across devices.
• Choose whether to grant camera, storage, gallery, or file permissions.
• Delete local records, remove app data, or uninstall the app.
• Avoid joining shared spaces or importing external files if you do not want that information processed in SpndX.

SpndX uses reasonable measures to protect account sessions and stored information, including secure token storage where supported. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

SpndX is not intended for children under the age required by applicable law to manage their own personal data without parental authorization.

This Privacy Policy may be updated from time to time. Updated versions will be posted in the app and, where available, on the SpndX website with a revised effective date.

If you have privacy questions about SpndX, please contact the SpndX team through the support or contact options provided in the app or website.