Privacy Policy

Last updated: April 30, 2026

Spenny ("we", "our", "the app") is a personal finance tracking application. Your privacy is important to us. This policy explains what data we collect, how we use it, and your rights under GDPR, CCPA, and other applicable laws.

Data We Collect

Spenny stores the following data that you provide:

• Expense and income entries (amounts, categories, dates, notes)
• Budget configurations
• Your display name, profile image, and currency preference
• Receipt images and scanned text (stored locally on your device)
• Subscription purchase history (handled entirely by Apple StoreKit)

In addition, the app collects the following diagnostic information:

• Crash reports — automatically sent via Firebase Crashlytics to help us fix bugs. Not linked to your identity.
• Anonymous usage analytics — aggregate product interaction events (e.g., which screens are opened) via Firebase Analytics. Not linked to your identity, not used for advertising.
• Performance data — aggregated launch times and app performance metrics. Not linked to your identity.

Data Storage

All your financial data is stored locally on your device using Apple's SwiftData framework. By default, iCloud sync is enabled, which stores your data in your personal iCloud account via Apple's CloudKit service. We do not have access to your iCloud data. You can disable iCloud sync in Settings at any time.

Third-Party Services

Spenny relies on the following services:

• Apple iCloud (CloudKit): Optional sync across your devices, managed by Apple.
• Apple StoreKit: In-app subscription processing, managed by Apple.
• Apple Vision Framework: Receipt text recognition is performed entirely on your device.
• Apple Speech Framework: Voice input processing is performed on your device.
• Firebase Crashlytics & Analytics (Google LLC): Crash reporting and anonymous product analytics. Data is sent to Google servers in a de-identified form. See Firebase Privacy Information.

We Do Not Sell or Track You

Spenny does not sell your personal information, does not use tracking identifiers (IDFA) for advertising, and does not share your financial data with any third party beyond the services listed above.

Camera, Photos & Microphone

Spenny requests access to your camera, photo library, and microphone only for receipt scanning and voice input features. These permissions are optional, and you can revoke them at any time through your device Settings.

Your Rights (GDPR / UK GDPR)

If you are in the European Economic Area, UK, or Switzerland, you have the following rights:

• Access: Export all your data via Settings → Data → Export Data (CSV).
• Deletion: Delete all your data via Settings → Data → Delete All Data, or by uninstalling the app.
• Rectification: Edit or update any entry directly in the app.
• Portability: The CSV export is a common, machine-readable format.
• Objection: You can disable analytics tracking through your device's privacy settings.
• Complaint: You have the right to lodge a complaint with your local data protection authority.

Your Rights (CCPA / California)

California residents have the right to know what personal information we collect (listed above), request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact mgokhan.yavuz@gmail.com.

Data Retention

Local and CloudKit data is retained until you delete it. Firebase diagnostic data is retained by Google for up to 14 months (see Firebase's retention policy). Uninstalling the app removes all local data; CloudKit data is removed on request or when you disable iCloud sync and delete the app.

Children's Privacy

Spenny is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Material changes will be surfaced in-app.

Contact

If you have questions about this privacy policy or wish to exercise your rights, please contact us at mgokhan.yavuz@gmail.com.