Legal

Privacy Policy

Effective date: 1 October 2026  ·  Last updated: 1 October 2026

Table of Contents
  1. Information We Collect
  2. How We Use Your Information
  3. Data Storage & Security
  4. Data Sharing & Third Parties
  5. Subscriptions & Payments
  6. Your Rights & Choices
  7. Children's Privacy
  8. Changes to This Policy
  9. Contact Us

Welcome to Spendwiser Pro ("we", "us", or "our"). We are committed to protecting your personal information. This Privacy Policy explains what data we collect when you use our iOS application, web dashboard at web.spendwiserpro.com, and related services (collectively, the "Service"), how we use it, and the rights you have over it.

By using the Service you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

1. Information We Collect

We collect only what is necessary to provide and improve the Service.

1.1 Information you provide directly

  • Account information: When you create an account we store a unique user identifier (UUID) generated on-device. We do not collect your name, email address, or phone number unless you contact us voluntarily.
  • Financial data: Wallet names and balances, transaction amounts, dates, categories, notes, and any receipt images you attach. This data is entered manually by you — we never connect to your bank, UPI provider, or any financial institution.
  • Country & currency preferences: The country profile and currency you select during onboarding.

1.2 Information collected automatically

  • Device & platform data: iOS version, device model, and app version, collected solely to diagnose crashes and compatibility issues.
  • Usage analytics: Anonymised, aggregated feature-usage events (e.g., "transaction added") to understand how the app is used. No personally identifiable financial data is included in these events.
  • Web dashboard session tokens: When you use the web dashboard, a short-lived cryptographic session token is generated and stored temporarily in Cloudflare Durable Objects. It expires automatically and contains no personally identifiable information beyond your user UUID.
  • Server logs: Standard HTTP access logs (IP address, request path, timestamp) retained for up to 30 days for security and debugging purposes.

1.3 Information we do NOT collect

  • Bank account numbers, card numbers, or banking credentials of any kind.
  • Your exact location or GPS coordinates.
  • Contacts, photos (beyond receipts you explicitly attach), or microphone data.
  • Social media profiles or third-party login information.

2. How We Use Your Information

  • Service delivery: Sync your data securely across your devices and the web dashboard.
  • Subscription management: Verify App Store purchase receipts via Apple's servers to grant Pro features.
  • Customer support: Respond to enquiries you send us.
  • Service improvement: Analyse anonymised usage patterns to prioritise features and fix bugs.
  • Security: Detect and prevent fraud, abuse, and unauthorised access.
  • Legal compliance: Meet our obligations under applicable law.

We do not use your financial data for advertising, profiling, or sale to third parties.

3. Data Storage & Security

Your data is stored in Cloudflare D1 (SQLite) and Cloudflare R2 (object storage) — both encrypted at rest using AES-256. Data in transit is protected by TLS 1.3. On-device, your data is protected by iOS Class A file-system encryption and, where supported, the Secure Enclave.

Cloudflare's infrastructure is SOC 2 Type II certified and ISO 27001 compliant. You can read more about Cloudflare's security practices at cloudflare.com/trust-hub.

We implement access controls, rate limiting, and JWT-based authentication to prevent unauthorised access to your data. Session tokens issued to the web dashboard expire after a short window and can be revoked at any time from the iOS app.

4. Data Sharing & Third Parties

We do not sell your personal data. We share data only in the following limited circumstances:

  • Cloudflare, Inc.: Our infrastructure provider. Your data is stored and processed on Cloudflare's edge network. Cloudflare acts as a data processor on our behalf under a Data Processing Addendum.
  • Apple, Inc.: In-app purchase receipts are validated with Apple's servers (buy.itunes.apple.com / sandbox.itunes.apple.com) to confirm your subscription status. We transmit only the receipt token — no financial data.
  • Legal requirements: We may disclose information if required by law, court order, or governmental authority, or to protect the safety of our users.

5. Subscriptions & Payments

All payments for Spendwiser Pro are processed entirely by Apple through the App Store. We never see, store, or process your credit card, debit card, or UPI payment details. Subscription management (upgrades, downgrades, cancellations) is handled through your Apple ID > Subscriptions settings. Refund requests should be directed to Apple at reportaproblem.apple.com.

Automatic deletion when a subscription ends: if your Spendwiser Pro subscription lapses, is cancelled, or is paused, your cloud data (synced records, receipt images, linked web sessions and your anonymous cloud account) is permanently deleted 30 days after the subscription ends. Before deleting, we re-check the subscription with the App Store or Google Play, so a payment that is still active is never affected. Data stored on your devices is kept; if you subscribe again, the app uploads it again.

6. Your Rights & Choices

Depending on your jurisdiction you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data — most data can be edited directly in the app.
  • Delete your account and all associated data. Cloud data is deleted automatically 30 days after your subscription ends (see Subscriptions & Payments); to have it deleted sooner, email us at [email protected] and we will permanently delete it within 30 days.
  • Export a copy of your financial data — use the Export feature in the app settings.
  • Opt out of anonymised analytics — disable this in the app's Settings > Privacy.

If you are in the European Economic Area (EEA) you have additional rights under the GDPR, including the right to lodge a complaint with your local supervisory authority.

7. Children's Privacy

Spendwiser Pro is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us at [email protected] and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you via an in-app notice. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We aim to respond to all privacy-related enquiries within 5 business days.