Privacy Policy
Last updated: October 2026
Overview
Spendly is a personal finance app. You can use it without an account, and then everything stays on your iPhone. If you create an account, your data is stored on our server so it can sync across your devices and be shared with people you invite. This policy explains what we store, why, and the choices you have. We do not sell your data, show ads, or track you across other apps and websites.
Using Spendly Without an Account
Without an account, all your data — accounts, transactions, budgets, notes, photos and settings — is stored only on your device. We never receive it. If you delete the app, this data is deleted too.
Your Account
Accounts are optional and use Sign in with Apple. When you sign in, we receive and store: • A unique identifier Apple provides for your Apple ID • Your email address, which may be a private relay address if you choose Hide My Email • Your name, if you choose to share it when signing in • Your device model and iOS version (for example "iPhone · iOS 18"), to manage your signed-in sessions We also keep an encrypted token from Apple that we use only to disconnect Spendly from your Apple ID when you delete your account.
Data Stored on Our Server
While you are signed in, the data you enter is uploaded to our server so it can sync: ledgers, accounts, transactions, categories, budgets, recurring entries, savings goals, notes and tags — including anything you type into them, such as notes, the names and phone numbers in lending and borrowing records, and property locations. Recurring entries include your device's time zone so they run on the right day. Receipt photos and custom icons are kept in private file storage and can only be opened through short-lived links given to members of that ledger. Our server and file storage are hosted by DigitalOcean in Frankfurt, Germany. All connections between the app and our server are encrypted.
How We Use Your Data
We use your data only to run Spendly: to sync it across your devices, share it with the people you invite, create your recurring entries, and give you the Pro features you have purchased. We do not sell it, share it with advertisers, or use it for analytics, profiling or advertising. We do not look at your financial data except when needed to fix a problem you have reported, or when required by law. We process your data because it is needed to provide the service you asked for.
Shared Ledgers
Everyone in a shared ledger can see its accounts, transactions, notes, photos and categories, and who recorded each entry. Other members see the name from your account (the name you shared when you first signed in). Anyone with an invite link can use it to join until it expires, so share links only with people you trust. If you leave a ledger or are removed, the entries you added stay in that ledger.
Purchases
Payments are handled entirely by Apple; we never see your payment details. When you buy Spendly Pro while signed in, the app sends us Apple's signed record of the purchase, and Apple notifies our server about renewals, cancellations and refunds. We store the product, Apple's transaction ID and the expiry date so that Pro follows your account to your other devices.
Third-Party Services
To show prices and exchange rates, the app contacts these services directly from your device: • Exchange rates: open.er-api.com • Cryptocurrency prices: CoinGecko • Metal prices: metals.live • Stock search and prices: Yahoo Finance — it receives the symbols you search for and the stocks you hold (for example "AAPL"), but no amounts • Brand icons: Google's icon service, which receives the brand's website address • Update checks: Apple's App Store These requests do not include your account, email or financial amounts. Each service handles requests under its own privacy policy.
Data We Do Not Collect
We do not collect: • Analytics, usage tracking or crash reports • Advertising identifiers, and we do not track you across apps • Location data • Your contacts (only the names and phone numbers you type in yourself) • Payment card details
Server Logs and Security
Our server keeps short technical logs (the type of request, the address called and the result) to keep the service running and fix errors. These logs do not contain your IP address or the contents of your data. Your IP address is used briefly to limit abusive traffic and is not stored. Sign-in tokens are stored only in hashed or encrypted form.
Profile, Biometrics and Notifications
The display name and birthday you set in Profile, your Face ID or Touch ID setting, and your reminders stay on your device and are never sent to us. Face ID and Touch ID are handled by Apple; we never receive biometric data. Notifications are created on your device; we do not collect push notification tokens.
Photos and Camera
Spendly asks for access to your camera and photo library only when you attach a receipt photo or choose a custom icon, and uses only the photos you pick. While you are signed in, they are uploaded to our private storage as described above; otherwise they stay on your device.
Data Retention and Deletion
We keep your data for as long as you have an account. You can delete your account at any time in Settings → Delete Account. This permanently deletes the ledgers you own and everything in them (including photos), your purchase records and your sign-in details, and disconnects Spendly from your Apple ID. Entries you added to other people's shared ledgers stay in those ledgers, shown as added by a former member. Deleted data may remain in our backups for a limited time before it is overwritten. Signing out removes your data from that device but keeps it in your account.
Your Rights
Depending on where you live (for example, under the EU General Data Protection Regulation), you may have the right to access, correct, export or delete your personal data, and to object to or restrict how we use it. You can delete your account in the app; for a copy of your data or any other request, email us at the address below. You can also complain to your local data protection authority.
Children's Privacy
Spendly is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
Changes to This Policy
If we change this policy, we will update it in the app and change the date above. If the changes are significant, we will let you know in the app.