The Short Version — 30 seconds
SpendFlow is an independent personal finance app — not owned by any bank or financial institution. We help individuals track expenses, understand spending habits, and make smarter money decisions.
Throughout this policy, "SpendFlow", "we", "us", or "our" refers to the team behind the app. Questions? Visit our Contact Support Page — we read everything.
We collect only what's genuinely needed to run SpendFlow well for you — nothing more.
- Account details — your name, email address, and password when you sign up.
- Expense data — transactions, amounts, categories, and notes you add inside the app.
- Payment information — Pro subscriptions are processed securely via PayPal and Razorpay. We never store card numbers or CVVs.
- Notification access — we request permission to send push notifications for reminders, alerts, and recurring budget updates. You can manage or disable this anytime in your device settings.
- Location coordinates — we request geo-location access to determine your local weather conditions, enabling the dynamic header background animations. Location data is processed on-the-fly and is never stored on our servers.
- Anonymous usage data — which features are used, aggregated and anonymised. Never tied to your identity.
We do not collect your phone number, physical address, or government ID.
We use your data to run SpendFlow — full stop. Here's exactly what that means in practice:
- Creating and managing your account so you can log in securely across devices.
- Storing your expense records so they're accessible whenever you need them.
- Processing Pro subscription payments through PayPal and Razorpay.
- Delivering time-sensitive notifications, daily reminders, and budget alerts directly to your device.
- Determining your local weather conditions dynamically to render real-time background themes.
- Sending transactional emails — receipts, reminders, and statements you've opted into by using the app.
- Improving the product based on anonymous, aggregated usage trends.
Your data lives in Google Firebase — a cloud platform with SOC 2 and ISO 27001 certifications. All data is encrypted in transit (HTTPS/TLS) and at rest.
Your expense records are only accessible to you when logged in. We have no admin panel to browse individual financial records — it's simply not how the system is built.
If you ever suspect unauthorized access to your account, contact us immediately via our Contact Security Team.
We rely on a small number of trusted partners to run SpendFlow. Each is subject to their own privacy policy:
By creating an account, you agree to receive transactional emails — messages directly related to your use of SpendFlow, not marketing blasts. These include:
- A welcome email when you first sign up.
- Payment receipts when your Pro subscription is processed.
- Subscription renewal reminders before your plan expires.
- Monthly expense statement emails, if you request them.
To stop receiving emails entirely, you can delete your account. We're a small team — if you have a specific request, just email us.
SpendFlow uses browser local storage and session storage to keep you signed in, protect PIN-locked sessions, cache app data, and remember preferences such as your selected theme.
Blog pages may use Google AdSense. Google and its advertising partners may use cookies or similar technologies to serve, measure, limit, and protect ads. Google's use of advertising cookies may allow ads to be selected using a visitor's previous visits to this or other websites.
You can manage personalized advertising through Google Ads Settings. Where required by law, visitors will be shown an appropriate consent message before advertising cookies are used. You can also clear stored site data through your browser settings, though doing so may sign you out or remove offline preferences.
You're fully in control of your data at all times:
We process all deletion requests within 7 business days.
If you're in the EEA or UK, you also have GDPR rights including data portability and the right to complain to your local supervisory authority.
SpendFlow is designed for adults managing personal finances. We do not knowingly collect information from anyone under 13. If you believe your child has created an account, contact us and we'll remove their data immediately.
If we make meaningful changes to how we handle your data, we'll notify you by email and update the "Last updated" date above. Minor edits — typo fixes, clarifications — may happen without a separate notice.
Continuing to use SpendFlow after an update means you accept the new terms. If you disagree, you're welcome to delete your account before the changes take effect.
Still have questions?
We're a small, real team. We read and reply to every message — usually within 24 hours.
Click Here to Contact Support