Privacy Policy

• Your financial ledger (accounts, transactions, budgets, goals, loans, subscriptions, and related on-device records) is stored primarily on your device. We do not sync your full ledger to our servers for cloud storage.
• Creating an account sends email, password, and name to our authentication provider (Supabase) through our backend.
• Optional features (Google Drive backup, diagnostics, camera/receipt scan, Android notification access, remote assistant help) only run when you use or enable them.
• When you use the remote AI assistant features, limited context (such as your question and account/category names) may be sent to our backend and an AI provider to generate a response. See Section 2.6.

2.1 Local financial data (on your device)

The app stores finance data in a local database on your device, including accounts, categories, transactions (amounts, descriptions, notes, dates), budgets, goals and contributions, loans, tracked subscriptions/recurring items, reports/summaries cache, pending suggested transactions, receipt images/OCR text when you scan receipts, and app settings/preferences.

Auth session tokens and optional Google Drive tokens are stored in the device’s secure storage when available. Assistant conversation history and related preferences may also be stored locally.

2.2 Account & profile (our servers)

When you register or sign in we process: email address, password (handled by Supabase Auth), and display name. If you complete optional onboarding/profile steps, we may store profile fields such as life stage, primary goals, use case, birth year, and gender on our backend to personalize the app.

2.3 Backups & exports

If you create a backup or export, a copy of your data may leave the app to a destination you choose (local file, system share sheet, email, or Google Drive when connected).

Google Drive backup (when you connect it) uploads a backup file to Google’s app-specific Drive folder (app data space). That backup can include your ledger data. Optional password-protected backups are available for some local/export flows; Drive uploads of the standard backup file are not additionally encrypted by the app beyond transport security.

If you connect Google Drive, we may store encrypted Google OAuth tokens on our backend so Drive access can be restored across sessions on your account.

2.4 Diagnostics & crash reporting (optional)

If “Share app diagnostics” is enabled in Settings, the app may send usage events and crash reports through Firebase Analytics and Firebase Crashlytics. Savemonei is designed not to include financial ledger fields such as transaction amounts, notes, or account balances in analytics events or crash reports. Analytics event parameters that match sensitive keys (for example amount, balance, email, password, token, notes, description, and similar identifiers) are dropped before sending. Crash report text is scrubbed to remove email addresses and token-like strings. A hashed form of your account id may be used instead of your raw user id. You can turn diagnostics off in Settings.

2.5 Permissions & on-device processing

• Camera / photos — optional, for receipt capture. OCR text extraction runs on the device; receipt images and extracted text are stored locally unless you include them in a backup/export you create.
• Notifications — optional local reminders (for example budget or recurring alerts).
• Notification access (Android) — optional. Used only to suggest transactions from bank/UPI-style alerts. Parsing stays on your device until you confirm or dismiss a suggestion.
• Biometrics / device lock — optional app lock using your phone’s screen lock. Biometric data stays on the device and is not sent to us.

2.6 AI assistant

The assistant can answer many questions using on-device data and help content. When remote AI features are used, the app may send to our backend (and then to an AI model provider):

• Your question text and recent assistant conversation turns
• Limited context such as current date/timezone/screen, account names and types, and category names (not a full ledger dump by default)
• An execution summary that may include finance figures or titles derived from local results, when the assistant needs to explain those results

You can choose not to use remote assistant features. Core money tracking works without them.

2.7 Catalogs & helpers

Our backend may provide non-ledger content such as help/knowledge packs, subscription price catalogs, and goal templates. Your selected region/country code may be sent to fetch the right catalog. Import helpers may receive category names/structure (not your full transaction history) to help map imported categories.

• Provide authentication, profile personalization, and account management
• Operate optional backups, exports, catalogs, and assistant features you request
• Improve reliability when diagnostics are enabled
• Respond to support requests you send us
• Protect the Service and comply with applicable law

We do not sell your personal information.

We share information only as needed to run the Service:

• Supabase — authentication and server-side profile / Drive token storage
• Hosting providers — for example Vercel for our website and API hosting
• Google — Google Drive OAuth/backups when you connect Drive; Firebase Analytics/Crashlytics when diagnostics are enabled
• AI model providers — when you use remote assistant features, your question and the limited context described in Section 2.6 may be processed by our backend and an AI model provider to generate a response
• Destinations you choose when exporting, sharing, or backing up files
• Authorities when required by law or to protect rights and safety

Local ledger data remains on your device until you delete it in the app, clear app data, wipe data after account deletion, or uninstall the app.

Account, profile, and stored Drive OAuth tokens on our servers are kept while your account is active. You can delete your account in the app (Settings → Security → Delete account) or as described on our Delete account page. After deletion we remove associated server-side account data we control.

Backups/exports you store outside the app (including Google Drive app data) remain under your control until you delete them there. Diagnostic providers may retain crash/usage records according to their own retention practices.

We use HTTPS for network traffic and store auth/Drive tokens in platform secure storage when available. Optional password-protected backups use encryption for those files. Google Drive standard backups are uploaded as backup files you control. No method of transmission or storage is completely secure.

• Deny optional permissions and still use core tracking features
• Turn off diagnostics sharing in Settings
• Disconnect Google Drive and delete backups you created
• Export, clear, or erase local data from Settings
• Avoid remote assistant features if you do not want question/context data sent
• You can delete your account from the app under Settings → Security → Delete account, or through our Delete Account page. For privacy-related questions, contact savemonei@spoold.com.

The Service is intended for users who are at least 13 years old (or the minimum digital consent age in your country). We do not knowingly collect personal information from children under that age. If you believe a child has created an account, contact us and we will take appropriate steps.

Our service providers may process information in countries other than where you live (for example where Supabase, Google, Vercel, or AI providers operate). By using the Service you understand that information may be transferred to and processed in those locations.

Savemonei is a personal money-management tool. It is not a bank, payment processor, investment advisor, tax advisor, or credit service. Information shown in the app (balances, reports, insights, assistant answers) is for convenience only and may contain errors. Do not rely on it as professional financial advice.

We may update this Policy from time to time. We will post the updated version on this page and update the “Last updated” date. Where required, we will provide additional notice of material changes.

Privacy questions: savemonei@spoold.com. More ways to reach us: Contact.