Privacy Policy – Spendsmart

Last updated: April 28, 2026

Spendsmart ("we", "our", or "us") is a personal expense tracking app built for Android. This Privacy Policy explains what data we access, why we access it, and how we handle it.

1. Data We Access

SMS Messages

Spendsmart requests permission to read SMS messages solely to automatically detect and log financial transactions from your bank and payment service providers. We only read messages from whitelisted financial sender IDs (such as HDFCBK, ICICIB, SBIINB). We do not read personal messages, OTPs beyond detection, or any non-financial SMS.

Notification Access

We request notification access to detect payment confirmations from UPI apps (Google Pay, PhonePe, Paytm). We only read notifications from whitelisted payment apps and ignore all other app notifications.

Camera and Storage

Used only when you choose to scan a receipt. Receipt images are processed for text extraction and are not stored permanently.

2. Data We Do NOT Collect

• We do not read or store personal SMS messages
• We do not sell your data to any third party
• We do not use your financial data for advertising
• We do not share transaction data with other users

3. Where Your Data Is Stored

All transaction data is stored locally on your device. Only when you use the AI chat feature, a summary of relevant transactions is sent to our secure server to generate your response. This data is encrypted in transit (HTTPS/TLS) and is not stored on our servers after the response is delivered.

4. Third-Party Services

Spendsmart uses the following third-party services:

• Anthropic / Claude API – for AI chat features. Queries are subject to Anthropic's Privacy Policy
• Google Play Billing – for subscription payments. Subject to Google's Privacy Policy
• RevenueCat – for subscription management. Subject to RevenueCat's Privacy Policy

5. Data Retention

Your transaction data lives on your device and is deleted when you uninstall the app or use the in-app delete option. If you request account deletion, all server-side data associated with your account is deleted within 30 days.

6. Your Rights

You have the right to:

• Access your data (exported via Settings → Export)
• Delete your data (Settings → Delete Account)
• Revoke SMS or notification permissions at any time via Android Settings
• Contact us with any privacy concern

7. Children's Privacy

Spendsmart is not directed at children under 13. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy from time to time. We will notify you via the app when significant changes are made. Continued use of the app after changes constitutes acceptance.

9. Contact Us

For any privacy questions or data deletion requests:
Email: support@spendsmart.app