The short version
SpendYes stores the money information you choose to enter so it can calculate your daily spending number. It does not connect to your bank, read your card, sell personal data, show ads or build advertising profiles.
Information we process
- Your plan: available money, protected amounts, plan dates, selected country and currencies, expected income, bills and planned costs.
- Your activity: purchases, amounts, dates, currencies, merchants, categories, notes, edits and reversals that you save.
- Optional smart capture: text, receipt images and voice recordings that you deliberately submit for interpretation, plus the extracted result you review.
- Your identity: a random account and session identifier for guest use. If you choose account protection, we receive the stable Apple or Google account identifier and the email address or display name that provider makes available.
- Support: what you were trying to do, what happened, whether we may contact you, our reply, and limited diagnostics such as app release, screen, support code and access status. A support report does not automatically attach your money amounts, receipts or voice recordings.
- Product operations: feature events, referral or creator attribution, AI model and request identifiers, token and cost estimates, timing, status and errors. These records do not contain the raw receipt image, voice recording or full capture text.
- Abuse prevention: for anonymous smart-capture limits, the application creates a persistent salted and hashed key derived from the connection IP address. The quota record is not linked to your account, does not contain the raw IP address and is used for app functionality and security, not advertising or cross-app tracking. Hosting providers can process network addresses separately in access and security logs.
- Purchases: if paid access is offered and you buy it, we receive the product, amount, currency, status, service period and provider customer, subscription, order or transaction identifiers needed to grant access, restore it, handle refunds and prevent fraud. We do not receive your full payment-card number.
SpendYes does not request your contacts, background location, advertising identifier or bank login. Selecting a country for local prices is information you enter; it is not device-location tracking.
How we use it
We use this information to calculate and sync your plan, interpret entries you ask us to process, show purchase access, answer support requests, prevent abuse, diagnose failures, measure reliability and understand which SpendYes pages or partners lead to useful product use.
Smart capture and service providers
Text, receipt images and audio submitted to smart capture are sent to OpenAI for extraction or transcription. SpendYes does not intentionally save the original image or audio on its application server after the request finishes. OpenAI processes the submitted source under its applicable service terms and configured retention controls; provider-side handling is separate from SpendYes's own application storage.
In Personal live voice, after you allow voice processing and start the microphone, audio is sent to OpenAI as you speak so you can see a live transcript. Review ends listening and asks SpendYes to interpret the completed words; money changes still need your approval. Cancel stops further audio transmission and does not save a money change, but cannot recall audio already processed. Closing the conversation or leaving the app stops listening; any retained words are an unfinished draft, not a saved expense.
Railway provides application and PostgreSQL hosting. Apple and Google provide optional identity verification and process purchases made through their stores. Frankfurter provides market exchange-rate data and does not receive your SpendYes plan. Stripe processes web payments when web purchasing is offered. Each provider receives only the information needed for its function.
Drafts on your device
An unfinished setup or capture may keep its source and draft details in browser storage on your device so you can resume it. A draft expires after seven days without an update and is removed when SpendYes next accesses that storage. Confirming, discarding, signing out or deleting the account also clears applicable local drafts. Drafts do not sync between devices, and browser storage limits or clearing site data can remove them sooner.
Analytics, attribution and tracking
SpendYes records a small set of first-party product events and, where supplied, a creator or campaign code. We use them to operate the service, understand adoption and calculate partner commissions. SpendYes does not use this information for third-party advertising or cross-app tracking.
Retention and deletion
Your account, plan and saved activity remain while you use SpendYes. In-app support reports remain while the account exists unless we remove them earlier. When you delete your account, SpendYes removes your identity, plans, saved activity, active sessions and linked in-app support reports.
Some limited records are retained or disassociated from your account where needed for accounting, tax, refunds, chargebacks, commissions, fraud prevention, security, legal compliance and service auditing. These can include payment-provider customer and transaction identifiers, product, amount, currency, status and dates; store purchase facts; aggregated product events; and AI request, cost and performance facts. They are no longer attached to an active SpendYes account where the system supports disassociation. Support email correspondence can remain in the support mailbox for legitimate support and legal needs.
The unlinked abuse-prevention key can remain after account deletion so anonymous capture limits cannot be reset by repeatedly creating accounts. It does not recreate or identify an active SpendYes account or plan.
Temporary copies can remain in hosting backups until the provider's normal backup rotation completes. They are not restored for ordinary product use after a confirmed deletion.
Deleting a plan is narrower than deleting an account. It removes that plan's money data but does not cancel a subscription or erase records that must remain for the reasons above. See the account-deletion page for the exact steps.
When full account deletion is confirmed, SpendYes asks Stripe to stop any linked web renewal at the end of the current paid period and deletes the account only after Stripe confirms that renewal is stopped. Apple and Google subscription cancellation remains separate: deleting SpendYes does not cancel a store subscription, which must be managed with the store account used to buy it.
Your choices
You can use a guest plan, protect it with Apple or Google where available, avoid smart capture and enter items manually, export your plan, stop sending support reports, sign out, delete a plan or delete your full SpendYes account. Depending on where you live, you may also have rights to access, correct, object to or restrict processing of personal data. Contact us to exercise a right we cannot provide directly in the app.
Security
Connections use HTTPS and sessions use revocable secure cookies. Apple and Google credentials are verified with the provider; your Apple or Google password is never sent to SpendYes. No online service can guarantee absolute security, so keep your provider account and device secure.
Children
SpendYes is intended for adults managing their own spending and is not directed to children.
Contact
For privacy questions or deletion requests, email hello@spendyes.app.
SpendYes is operated by Siren Group International LLC.