Spendiary Privacy Policy

1. Who controls which processing

Spendiary is developed and operated by Rodrigo Bange, an individual based in the Netherlands, under the project name StabilisSoft. StabilisSoft is a project name, not a separate company or legal entity.

Data-protection roles depend on the particular processing activity. I am the controller where I decide why and how personal data is collected or transmitted in operating Spendiary and this website. This includes support and contact messages, limited crash reports, purchase-entitlement checks, and my decision to integrate advertising. Providers that handle data only on my documented instructions act as processors.

Apple, Google, Cloudflare, and certain advertising or platform providers also process some data for purposes they determine themselves. They act as independent controllers for those activities, explain that processing in their own privacy notices, and are responsible for it. Describing those services here does not make me the controller of their independently determined store, payment, device-backup, advertising, fraud-prevention, security, account, or platform processing.

Your budgets, accounts, transactions, selected photos, and other local app content remain on your device unless you choose to export or share them or your operating system includes them in a device backup. I do not receive or have access to that local content.

My complete contact details are provided in section 20 below.

2. Financial data stays on your device

Spendiary stores the information you enter in local app storage on your device. This can include:

• accounts, balances, budgets, groups, items, goals, debts, and recurring payments;
• transactions, amounts, dates, titles, notes, tags, and assignments;
• Friends & Family names, birthdays, notes, and images that you choose to add;
• app preferences, theme choices, widget layouts, filters, and streak information.

This information is used on your device to provide budgeting, calculations, insights, backup, and customization features. It is not uploaded to me, and I cannot access it.

Spendiary does not currently require an account and does not currently offer cloud sync.

3. Age assurance and protected experience

During first-run setup, Spendiary asks you to enter your date of birth so the app can determine whether to use its adult experience or its more protective experience for a user under 18. This is a neutral age check. It is not used to personalize budgeting content, build a profile, or infer your interests.

The complete date of birth is held only temporarily in the app’s memory while it is validated and converted into an adult or protected-experience result. The complete date of birth is not saved, uploaded to me, sent to an advertising, analytics, diagnostic, purchase, or other service provider, or included in a Spendiary backup.

After the check, Spendiary stores only the result—adult or protected—in secure storage on that device. It does not retain your exact age or birthday. For a protected user, the app also stores when it should ask for a fresh age check, normally after one year. Clearing the app’s data or reinstalling it may cause the age check to appear again.

Before this result is available, advertising, purchase-entitlement checks, and diagnostics do not initialize. For a protected user:

• AdMob receives child-directed and under-age-of-consent treatment signals and a general-audience (G) ad-content limit, but not the date of birth or exact age;
• personalized advertising and remarketing are disabled, and Spendiary does not request iOS tracking permission;
• Sentry crash reporting and enhanced diagnostics are disabled; and
• RevenueCat can still be used to offer, verify, or restore an optional Spendiary Plus purchase, but Spendiary does not send RevenueCat the date of birth or local age result.

The local age check is used to apply safeguards appropriate for younger users and to support compliance with child- and teen-privacy, advertising, and platform requirements. It is not used to make a decision that has legal or similarly significant effects on you.

4. Photos and device permissions

If you choose to add a custom image to an item, group, or Friends & Family entry, Spendiary asks for access to your photo library. Spendiary uses the image you select, creates a resized local copy, and stores that copy with the app’s local files. Your operating system controls whether the permission grants selected, limited, or broader library access. Spendiary does not upload the image.

Photo access is optional. If you do not grant it, the rest of the app remains available and you can continue using built-in icons.

5. Backups, exports, and deletion

Spendiary creates local automatic backup files in the app’s document storage. It keeps up to 14 daily automatic backups. These backups can contain the same financial data and images stored in the app.

You can also create a manual backup and choose where to save it. A backup can contain a readable copy of the financial and personal information stored in Spendiary, including saved images. Store it securely. If you save or share a backup through a cloud drive, email app, file provider, or another service, that provider will handle the file under its own privacy terms. I do not receive a copy.

Your operating system may include Spendiary’s local data in an Apple or Google device backup. Those backups are controlled by your device and platform settings, not by me.

You can delete individual records inside Spendiary. Clearing the app’s data or uninstalling the app removes its local working copy, subject to any exported files or platform backups that you control separately.

6. Spendiary Plus purchases

Spendiary uses RevenueCat to retrieve the available Plus offering, check whether this installation already has a Plus entitlement, determine whether ads should be enabled, and offer or restore the one-time Spendiary Plus purchase. These checks occur when the purchase service initializes, including before you buy Plus. For this purchase-entitlement processing, I act as controller and RevenueCat acts as my processor.

RevenueCat may process:

• a randomly generated pseudonymous app user identifier;
• purchase receipts or tokens, product identifiers, transaction status, and entitlement status;
• basic technical information such as IP address or IP-derived location, device type, operating system, app version, locale, currency, and last-seen time.

Spendiary does not send RevenueCat your name, email address, financial entries, or a Spendiary account identifier. Apple or Google separately processes App Store or Google Play account, payment, receipt, fraud-prevention, and platform data as an independent controller under its own privacy notice. I do not receive your full payment card information.

The RevenueCat processing is necessary to retrieve the offering, recognize an existing entitlement, decide whether the app should enable ads, and provide, verify, and restore Plus. Purchase and entitlement records held for Spendiary are kept for as long as needed to provide the purchase, prevent fraud, handle support, and meet legal obligations. Apple and Google determine and disclose their own retention periods for data they control independently.

7. Feedback and contact messages

You can send feedback from the app without providing your name or email address. The app sends the message together with your selected locale and currency, platform, app version, and the time it was sent. It does not attach your budgets, accounts, transactions, photos, advertising identifier, or a Spendiary account.

Message text is provided by you and can contain personal information if you type it. Do not include passwords, full account or card numbers, authentication codes, or financial information that is not necessary for the support request.

The website contact form sends your topic and message. Your name and email are optional. If you do not provide an email address, I cannot reply directly.

Messages are delivered through Cloudflare and SMTP2GO, then stored in a private Google Workspace (Gmail) mailbox used for StabilisSoft support. These services process message content and related delivery data on my behalf. They may also process connection, account, security, abuse-prevention, and legally required information for purposes they determine themselves under their privacy notices.

I use feedback and contact information to answer requests, troubleshoot problems, improve Spendiary, and protect the service from misuse. The legal basis is my legitimate interest in supporting and improving Spendiary and, when you ask for help, taking the steps you request.

Support messages are stored in the private Google Workspace support mailbox and are not copied into a separate customer database. A label-based automated retention process moves a conversation to Trash after 12 months from its newest message, unless it is still needed to resolve an issue, preserve necessary support history, protect legal rights, prevent abuse, or meet a legal obligation. Google Workspace normally permanently deletes messages from Trash after a further 30 days. Delivery and security logs are retained according to the providers’ operational retention periods.

8. Website data

This website does not use advertising or analytics cookies and does not create an application-level visitor profile. The origin web server is configured not to keep a routine access log of page requests.

Cloudflare processes request and customer-log data on my behalf to deliver and secure the site. Cloudflare may also process certain account, operational, and security data for purposes it determines under its own privacy notice. It may use strictly necessary security technologies, including cookies or similar storage when needed for functions such as bot detection or a security challenge. Associated operational and security information is retained according to the configured service periods.

The website’s origin runs on infrastructure supplied by a hosting provider that processes hosted site data and limited operational data on my behalf. The origin web server sends only critical errors to the hosting environment’s operational error output. Such an error may include limited technical request information when necessary to diagnose a serious failure. This output is used only for availability, security, and incident response, not analytics or advertising, and is retained according to the configured operational retention.

9. Advertising

The free version of Spendiary uses Google AdMob to display banner ads and optional rewarded ads. Spendiary Plus removes ads. You choose whether to watch a rewarded ad, and declining it does not remove access to the app’s ordinary budgeting features.

Depending on your location and choices, Google and its advertising partners may process advertising identifiers, IP address, approximate location derived from IP, device and app information, consent signals, cookies or similar local storage, web beacons, and information about ad requests, impressions, interactions, measurement, and fraud prevention. Spendiary does not send Google your budgets, balances, transaction entries, notes, images, name, or email address.

For the decision to integrate advertising and disclose data from Spendiary, I am a controller. For advertising processing whose purposes and essential means they determine, Google and participating advertising partners act as independent controllers. Certain expressly identified Google features may instead be provided as processor services. I am responsible for the app-side configuration, transparency, and consent flow; Google and the participating partners are responsible for processing they determine independently.

Where consent is required, Spendiary presents Google’s consent form before requesting ads. Personalized ads are optional. If you decline personalized advertising, Google may still show non-personalized or limited ads using contextual information and limited device data where legally permitted. On iOS, permission to use the advertising identifier is requested separately where applicable. Declining that permission does not prevent use of Spendiary.

For a user placed in the protected experience, Spendiary does not offer personalized advertising or request iOS tracking permission. It configures AdMob for child-directed and under-age-of-consent treatment and limits eligible ad content to the general-audience (G) rating before loading ads. Google receives those protection signals but Spendiary does not disclose the user’s date of birth or exact age.

You can revisit available advertising choices and the advertising partners presented to you from Privacy and data in the app. You can also limit advertising identifiers through your device settings. Google explains its advertising technologies and controls in How Google uses information for advertising, How Google uses information from sites or apps that use its services, and its AdMob GDPR guidance.

10. What Spendiary does not do

• Spendiary does not sell your personal data.
• Spendiary does not upload your financial entries to me.
• Spendiary does not use a separate first-party product analytics system or session replay. Advertising providers may perform the advertising measurement described above.
• Spendiary does not use your data for automated decisions that have legal or similarly significant effects.

11. Crash reporting and enhanced diagnostics

Spendiary uses Sentry to receive strictly limited reports when the app crashes. A basic report can include the crash type, a technical stack trace, app version and build, operating-system version, broad device model, platform, and timestamp. This crash reporting is enabled by default so I can identify failures that would otherwise be invisible and keep the app reliable. You can turn basic crash reporting off at any time from Privacy and data in the app. The choice is stored locally and applies to future reports from that installation.

Basic crash reports do not intentionally include your name, email address, advertising identifier, budgets, balances, transactions, notes, images, request data, console logs, screenshots, session replay, performance traces, or profiling data. Error messages and local variables are removed before JavaScript crash reports are sent. Sentry is configured not to store source IP addresses and to apply data-scrubbing rules.

The app also offers an optional Share enhanced diagnostics setting. If you enable it, a crash report may additionally include a small amount of app-navigation context recorded after you enabled the setting. It does not include financial entries or free-form app content. You can disable enhanced diagnostics again at any time.

Crash reporting and enhanced diagnostics are not initialized for a user placed in the protected experience. Spendiary does not send Sentry that user’s date of birth, exact age, or local age-assurance result.

For diagnostic event data sent by Spendiary, I act as controller and Sentry acts as my processor under its data-processing agreement.

I process basic crash reports on the basis of my legitimate interests in detecting failures, maintaining security and stability, and improving Spendiary. I limit the report to what is necessary and balance this interest against your privacy. You can object to future reporting immediately by switching basic crash reporting off. You may also email [email protected] with a privacy question or objection. Enhanced diagnostics are based on your consent.

Sentry retains diagnostic events for up to 90 days, depending on the active Sentry plan. The standard Developer plan used for Spendiary provides a 30-day retention period; a temporary trial or later plan change may increase that period to no more than 90 days. Older events are automatically removed under the applicable plan. Because reports are deliberately not linked to an account, I may be unable to locate a particular report without information such as the event identifier or exact crash time.

12. Processors, independent controllers, and international transfers

I use processors to handle limited personal data on my instructions: RevenueCat for purchase-entitlement infrastructure; Sentry for crash and optional diagnostic events; Cloudflare for website delivery, security, and the feedback relay; SMTP2GO for message delivery; Google Workspace for mailbox storage; and the infrastructure provider for website hosting. These processors may use approved subprocessors under their applicable data-processing terms. I remain responsible for selecting and instructing these processors and for the processing whose purposes and means I determine.

Apple and Google independently process store, payment, device-backup, account, fraud-prevention, security, and other platform data under their own terms and privacy notices. For AdMob, Google and participating advertising partners may act as independent controllers for advertising, measurement, security, and related purposes; certain expressly identified features may instead be provided as processor services. A provider may also act as an independent controller for its own account, billing, legal-compliance, or security processing even when it acts as my processor for a different activity.

Some providers process data outside the European Economic Area. For transfers made by processors on my behalf, the applicable data-processing terms use a lawful transfer mechanism where required, such as an adequacy decision, the EU-US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses. Independent controllers apply and describe their own transfer safeguards in their privacy notices. Relevant processor information is available from Sentry, RevenueCat, Cloudflare, SMTP2GO, and Google Workspace. You can ask me for information about safeguards covering processing for which I am responsible by emailing [email protected].

13. Legal bases

Where the GDPR applies, the processing for which I am the controller relies on:

• Contract or steps you request: providing and restoring a Spendiary Plus purchase and responding to a request you send.
• Legitimate interests: operating and securing the website and feedback relay, preventing abuse, supporting users, receiving minimized crash reports from eligible adult users, maintaining app stability, improving Spendiary, and applying a privacy-protective experience where the local age check indicates it is appropriate. These interests are balanced against your rights.
• Legal obligations: keeping records or responding where the law requires it, and applying age-related safeguards where applicable law requires them.
• Consent: personalized advertising where required and optional enhanced diagnostics. You can withdraw consent through the relevant app or device setting. Choosing a photo is an optional feature request controlled through your device permission settings; the selected copy remains local.

Independent controllers such as Apple, Google, and participating advertising partners determine and explain their own legal bases in their privacy notices.

You are not required to provide a name or email to send feedback. Entering a date of birth is required to finish setup, but the complete date is processed only on the device and is not retained. A purchase is optional, but purchase information is required if you choose to buy or restore Plus. Photo access is required only if you choose a photo from your library.

14. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, receive a portable copy of personal data, and object to certain processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

Most Spendiary data is only on your device, so you control it directly in the app and I cannot retrieve it for you. I handle requests concerning data under my control, including data held for me by my processors. For data handled through feedback, contact, diagnostics, or purchase support, send a request to [email protected]. I may need enough information to locate the relevant message, diagnostic event, or anonymous purchase record and to verify that the request is yours.

For data processed by an independent controller, exercise your rights directly through that provider’s privacy controls or contact channel. I can help identify the relevant provider but cannot access, correct, or delete data held only in its systems.

You also have the right to complain to your local data protection authority. In the Netherlands, you can contact the Autoriteit Persoonsgegevens.

Privacy requests are normally handled without charge and within one month where the GDPR applies. That period may be extended where the law permits for a complex request, and reasonable identification may be requested before disclosing personal data.

15. Security

Spendiary limits collection by keeping financial data on your device and uses encrypted network connections for the limited services described above. No storage or transmission method is completely secure. Protect your device, exported backup files, and any account used for device backups.

16. Children’s and teenagers’ privacy

Spendiary is a general-audience personal budgeting app intended for users aged 13 and older, including teenagers who want to learn budgeting. It is not directed specifically to young children. A store content rating describes the suitability of the app’s content; it does not mean that personalized advertising is intended for children.

Spendiary uses the on-device age check described in section 3 to place users under 18 in a protected experience. The app does not retain or transmit their date of birth, does not offer them personalized advertising, and does not initialize Sentry diagnostics for them. These safeguards do not replace any permission that a parent or guardian may need to give under the law where the user lives.

A user who cannot lawfully make their own privacy choices or purchases should involve a parent or legal guardian before sending feedback, using the contact form, or purchasing Spendiary Plus. Feedback and contact messages can contain whatever the sender types, so younger users should not include unnecessary personal or financial information. If you believe a child has submitted personal data, email [email protected] so the situation can be reviewed and the data deleted where appropriate.

17. Future cloud sync

Spendiary does not currently offer cloud sync, and your budget data is not uploaded to me. If optional syncing is introduced, this notice will be updated before processing begins to explain what is uploaded, why it is needed, where it is stored, how long it is kept, who processes it, how it can be exported or deleted, and what choices you have.

Existing local financial data will not be silently uploaded.

18. United States state privacy disclosures

The categories of personal information processed through the app and website, the purposes for using it, the sources from which it is obtained, and the categories of processors, contractors, and third parties that receive it are described above. Depending on where you live and whether the relevant law applies, you may have rights to request access, correction, deletion, or a portable copy of personal information, and to opt out of certain targeted advertising, sale, sharing, or profiling. You may exercise an applicable right concerning processing under my control using the contact details in section 20. For independently controlled data, use the relevant provider’s privacy channel. You will not be discriminated against for exercising a privacy right.

I do not sell personal information for money. Depending on the law that applies, personalized advertising may nevertheless be described as sharing, sale, or targeted advertising. Google may use data for personalized advertising only where your choices and applicable law permit it. Eligible users can open Privacy and data in Spendiary and select Ad privacy choices to opt out or change available advertising choices. The website itself does not use advertising or analytics cookies.

If a request is denied, you may ask for the decision to be reviewed by replying to the response or emailing [email protected] with the subject “Privacy appeal.” You may also contact the attorney general or privacy regulator in your state.

19. Changes to this policy

This policy may be updated when Spendiary’s features, service providers, or legal obligations change. The date at the top identifies the current version. Material changes will be communicated in the app or through another appropriate channel before they take effect. If a change requires consent, consent will be requested separately.