Privacy policy

SpendSense is a family budgeting app operated by Mohamad Naji, Montréal, Québec, Canada. Mohamad Naji is the person in charge of the protection of personal information. For any privacy question or request, write to privacy@spendsense.app.

Only what you give us to run your budget, plus the minimum needed to keep the service secure:

• Account: your email address, name (optional), password and the language you use the app in. Passwords are stored only as a one-way hash; we can’t read them.
• Profile details you choose to add: such as occupation, financial goals and how much risk you’re comfortable with. Older accounts may also have a phone number or age from an earlier version of the profile; you can see them in your data download, and we delete them on request.
• Household budget: the family name and currency, the members you add (names and incomes), paydays, paystubs you enter, bills, transactions, savings goals and balances. Members you add without inviting them are profiles you manage; they don’t get an account.
• Security data: the time of each sign-in, your device’s browser type (to list your signed-in devices), and your IP address, used to limit password-guessing and to investigate abuse. We keep a record of security events (sign-ins, password changes, account deletion) for one year.
• Visit statistics: when you visit our public pages (home, sign-in, sign-up and these legal pages) while signed out, we count the visit with our own analytics tool, running on our own servers: the page, the website that sent you, the campaign tag in the link if it has one (for example, a link from one of our posts), browser and device type, screen size, language and country. It uses no cookies and doesn’t store your IP address, so a visit can’t be tied to you. Nothing is counted inside the app once you’re signed in, and browsers set to “Do Not Track” aren’t counted.
• Error reports: if the app crashes, a technical report (what failed, browser type, the page) may be sent to our error-tracking service. We strip email addresses, form contents and financial amounts from these reports.

We don’t ask for, and never store, your bank login, card numbers or government ID numbers.

• To run your budget: work out what’s free to spend, track bills and savings, and show your analytics.
• To run your account: sign-in, password reset, inviting family members, and service emails about your account.
• To keep the service secure and working: preventing abuse, fixing errors, and backups.
• To know how many people visit our public pages and go on to sign up, so we can improve them.

We don’t sell your information, don’t show ads, and don’t use your data to build marketing profiles. We use it only for these purposes, and ask for your consent again before using it for anything new.

The AI Advisor, voice questions and statement import are switched off during early access, so none of your data is sent to an AI provider. Before we turn them on, we will update this policy to name the provider and where it processes data, and the features will only run when you use them.

We share personal information only with service providers that help us run SpendSense, under contract and only for that purpose:

• Hosting: our servers and database are rented from Contabo GmbH. Backups are encrypted before they are stored with a separate storage provider.
• Network and security: Cloudflare, Inc. carries traffic to our site and filters attacks. It sees your IP address, browser type and the pages you request, but not your password.
• Email delivery: Resend sends account emails (verification, password reset, invitations), so it receives your email address and the message.
• Email forwarding: messages you send to our support or privacy addresses are forwarded by Cloudflare to our inbox.
• Error tracking: crash reports, scrubbed as described above.

These providers may store or process information outside Québec and Canada, where it is subject to local laws. We assess the protection offered before transferring information outside Québec. We may also disclose information when the law requires it.

We use one cookie, which keeps you signed in. It can’t be read by scripts on the page and is only sent to our sign-in service. Cloudflare may also set a short-lived security cookie to tell people from automated attacks. The app also remembers your language choice in your browser’s storage, on your device only. We don’t use advertising or tracking cookies. Our visit statistics use no cookies and run on our own servers; there are no third-party analytics.

• Your budget data: as long as your account exists.
• When you delete your account, your data is deleted from the live database right away and disappears from our encrypted backups within 90 days.
• Security records: one year, then deleted.
• Error reports: 90 days.
• Visit statistics: they identify no one, so we keep them to compare visits over time.

All traffic is encrypted (HTTPS). Passwords are hashed with bcrypt, sign-in sessions are short-lived and can be revoked from any device, password guessing is rate-limited, and only the household’s own members can see its data. Backups are encrypted. No system is perfectly secure; if a confidentiality incident puts you at risk of serious harm, we will notify you and the authorities as the law requires.

You can, at any time:

• See and correct your information in the app, or ask us for a copy.
• Download all your household data as spreadsheets (CSV), a printable PDF, or a machine-readable JSON file (Account → Security → Download my data).
• Delete your account and data (Account → Security → Delete account).
• Withdraw your consent, which means closing your account, since the service can’t run without the data.

We answer requests sent to privacy@spendsense.app within 30 days. If you’re not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

Accounts are for adults (18 and older). An account holder can add other household members, including children, as profiles they manage. Please add only what the budget needs, such as a first name.

If we change this policy, we’ll update the date at the top. If a change affects how we use your information, we’ll tell you by email or in the app before it takes effect.