Privacy Policy

MySpend.info ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account information: When you create an account, we collect your email address and a securely hashed password (managed by Firebase Authentication).

Expense data: Expense records, categories, amounts, dates, vendors, notes, and any other information you enter into the app. This data is stored in your account and is used solely to provide the service to you.

Receipt images: Photos or PDFs you upload for AI scanning. Images are stored in Firebase Storage under your account and processed by AI models to extract expense data.

Usage data: We collect limited usage metrics (e.g. scan count, feature usage) to enforce plan limits and improve the service. We do not sell this data.

Billing information: If you subscribe to a paid plan, payment is processed by Stripe. We do not store your full card number; Stripe provides us with a customer ID and subscription status only.

Bank connection data (Plaid): If you use the Plaid integration to connect financial accounts, your Plaid access token is either encrypted and stored locally in your browser (local mode) or encrypted and stored in Firestore under your account (cloud mode). In both cases, every sync request is proxied through a MySpend server function — the token is used in memory and never logged or written to disk by our servers.

2. How We Use Your Information

• To provide and maintain the expense tracking service
• To process AI receipt scanning requests
• To enforce usage limits and manage subscriptions
• To send transactional emails (account confirmation, password reset, billing receipts)
• To improve the service based on aggregated, anonymized usage patterns

We do not sell your personal data to third parties. We do not use your expense data to train AI models without your explicit consent.

3. Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

• Google Firebase — authentication, database (Firestore), file storage, and server functions. Firebase Privacy
• Google Gemini — AI model used for receipt scanning. Images sent for scanning are subject to Google's data use policies.
• Stripe — payment processing for paid plans. Stripe Privacy
• Plaid — optional bank account connectivity. Plaid Privacy

4. Data Retention & Deletion

Your data is retained for as long as your account is active. You can export your expense data at any time from within the app. You can delete individual expenses and reports from the app. To request full account deletion (including all stored data), contact us at support@myspend.info — we will process the request within 30 days.

5. Security

We use industry-standard security measures including encrypted data transmission (HTTPS), Firebase security rules that restrict data access to the owning account, and AES-GCM encryption for locally stored Plaid tokens. No system is perfectly secure; we encourage you to use a strong, unique password for your MySpend.info account.

6. Children's Privacy

MySpend.info is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have done so, we will delete that information promptly.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of MySpend.info after changes take effect constitutes acceptance of the updated policy.

8. Contact

Questions or requests regarding your privacy? Contact us at support@myspend.info.