The short version
- Your transactions, accounts, budgets and settings are stored in a database on your phone. They are never uploaded.
- There is no SpendTr account, no password and no server to sign in to.
- No analytics, no advertising identifiers, no third-party trackers.
- The only optional email address in the app moves your Pro unlock between platforms, and it is deleted once the link is sent.
What SpendTr stores, and where
Everything you enter — amounts, categories, notes, accounts, recurring charges, budgets, goals and debts — is written to a local SQLite database inside SpendTr's private storage on your device. Your base currency, accent colour and notification preferences are stored the same way.
Because that database is the only copy, deleting the app deletes your data. Export a backup first if you are switching phones.
What SpendTr never collects
SpendTr does not ask for your name, email address, phone number or date of birth, and it never connects to a bank, card issuer or payment aggregator. It has no account system, so there are no credentials to store and nothing to breach.
It does not read your SMS messages, notifications, contacts, calendar, photos or location.
Analytics and crash reports
SpendTr contains no analytics SDK, no advertising identifier and no third-party trackers. No usage events are recorded and no crash reports are sent automatically. If you choose to report a problem by email, you decide what to include.
Google Play and, in future, the App Store report their own aggregate install and crash statistics to us. Those reports come from the store, not from the app, and they never contain your entries.
Notifications
Renewal reminders and daily logging nudges are scheduled locally by your phone from the dates you entered. Local only, no push server — so no renewal date, amount or merchant name is ever sent anywhere to produce a reminder.
Backups and exports
A backup is a single file, encrypted with the passphrase you type. SpendTr hands that file to whichever destination you pick in your phone's own share sheet — a cloud drive, a messaging app, local storage. SpendTr has no storage of its own and never sees where the file goes.
The passphrase is not stored anywhere and cannot be recovered. A lost passphrase means the file can never be opened, by you or by us. CSV exports are written unencrypted, by design, so that other software can read them — treat them accordingly.
Purchases
Pro is a one-time unlock, billed by Google Play (and later by the App Store). The store handles the payment and tells the app whether the purchase is valid; SpendTr never receives or stores your payment details. Refunds and receipts are handled by the store under its own privacy policy.
The one email field
Moving a Pro unlock from Android to iOS is the only feature that needs to contact us. You type an email address, we send a restore link to it, and the address is deleted once the link has been sent. There is no password, no profile and no mailing list, and none of your transactions are involved.
This field is optional. Skipping it changes nothing about how the app works on the device you bought Pro on.
Permissions
SpendTr requests two permissions, both optional and both opt-in: notifications, to schedule reminders on the device, and biometric unlock, to gate the app behind your phone's own fingerprint or face check. Declining either leaves every other feature intact.
Children
SpendTr is a general-purpose tool and is not directed at children. Since it collects no personal data at all, no data about a child of any age is collected either.
Changes to this policy
If this policy changes, the version number and date at the top of the page change with it, and the previous version stays available at the link in the footer. A change that would send data off your device would ship as an opt-in setting, switched off, with an explanation in the app.
Contact
Questions about this policy, or about anything the app does with your data: privacy@spendtr.com. We answer from a mailbox, not a ticketing system, and we keep the correspondence only as long as the thread is open.