1. Information We Collect
When you create an account, we collect your email address and display name. If you sign in with Google or Apple, we receive basic profile information. The financial information you enter is stored on your device and, once you sign in, it is also synced to our secure cloud infrastructure (Google Firebase/Firestore) so the SpendlyAI agent and Cloud Sync can work; restoring it on other devices is a Premium feature. We collect anonymous usage analytics to improve the app. We use Microsoft Clarity to analyze usage behavior through session recordings and app interactions; Clarity may collect device identifiers and usage data anonymously.
2. How We Use Your Information
To provide and maintain the SpendlyAI service. To process your transactions and generate financial analysis. To sync your data across devices (Premium Cloud Sync). To send relevant notifications (payment reminders, budget alerts). To power the SpendlyAI agent: when you talk to it, or connect an external assistant with a personal token, the data you have synced is processed on our servers and sent to Google Gemini to produce answers and proposals. The agent may keep short notes (memories) you share so it can personalize its help; you can clear them at any time from the AI settings. To improve our AI categorization and recommendation engine. To provide customer support.
3. Data Storage & Security
Your financial data is stored locally on your device and in Google Firebase infrastructure. Every request travels with bank-grade encryption (TLS 1.3) and is verified with Firebase App Check. Data you add to a Couple or Family space is visible to every member of that space. Personal tokens for external assistants are shown once, stored hashed, expire automatically and can be revoked from the app. We implement SSL pinning, runtime application self-protection (RASP), and 15+ security verification checks.
4. Data Sharing
We never sell your personal or financial data. Free users may choose to watch optional rewarded ads to unlock AI features, and on iOS we ask for your permission through App Tracking Transparency before any ad-related tracking. We only share data with: Firebase/Google Cloud (authentication and sync), Google Gemini (generating the agent answers; under the API terms this data is not used to train Google models), the external assistants you connect with a personal token (they receive the data those tools request and are governed by their own privacy policies), Google AdMob (serving optional rewarded ads, may use advertising identifiers), RevenueCat (subscription and purchase management, no financial data shared), Crashlytics (anonymous crash reports), and Microsoft Clarity (behavioral analytics and session recording; see Microsoft's privacy policy at privacy.microsoft.com).
5. Your Rights
You have the right to access all your data, export in CSV or PDF, delete your account and all associated data, clear the agent memory, revoke any connected assistant, leave a shared space, opt out of analytics collection, and modify your personal information.
6. Data Retention
We retain your data for as long as your account is active. When you delete your account we revoke every connected assistant, delete the agent memory and the server copy the agent uses, and all remaining data is permanently removed from our servers within 30 days. Local data is deleted immediately.
7. Contact Us
For questions about this Privacy Policy, contact us at: support@spendlyai-app.com
SpendlyAI is operated from Bucaramanga, Santander, Colombia. This policy is governed by the laws of Colombia.