1. Introduction

Welcome to SpendTrace ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application SpendTrace: Expense Tracker (the "App").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in with Google, we receive your name, email address, and profile picture.
• Financial Data: Transaction information extracted from PDF bank statements you upload, including dates, amounts, merchant names, and descriptions.
• User Preferences: Your category assignments, custom categories, theme preferences, and app settings.

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers.
• Usage Data: App feature usage, session duration, and interaction patterns.
• Crash Reports: Error logs and diagnostic data to improve app stability.

2.3 Information We Do NOT Collect

• Bank account credentials or passwords
• Credit card numbers or CVV codes
• Social security numbers or government IDs
• Location data

3. How We Use Your Information

Purpose	Data Used
Provide expense tracking services	Transaction data, categories
AI-powered categorization	Transaction descriptions
Generate spending insights	Aggregated transaction data
Authenticate your account	Email, name (via Google Sign-In)
Improve app performance	Usage data, crash reports
Customer support	Account information, usage data

4. Data Storage and Security

4.1 Local Storage

Most of your financial data is stored locally on your device using secure storage mechanisms. This means:

• Your transaction data remains on your phone
• Data is not automatically synced to cloud servers
• Uninstalling the app removes local data

4.2 Cloud Services

Some data may be stored securely in the cloud for the following purposes:

• Authentication: Account credentials via Supabase (encrypted)
• Premium Status: Subscription information
• Backup (if enabled): Encrypted transaction data

4.3 Security Measures

• All data transmission uses HTTPS/TLS encryption
• Secure authentication via OAuth 2.0 (Google Sign-In)
• No plain-text storage of sensitive information
• Regular security audits and updates

5. Third-Party Services

We use the following third-party services:

Service	Purpose	Privacy Policy
Google Sign-In	Authentication	Google Privacy
Supabase	Backend services	Supabase Privacy
Google Gemini AI	Transaction categorization	Google Privacy
Sentry	Error tracking	Sentry Privacy
Google Play Billing	Subscription payments	Google Privacy

6. AI Processing

SpendTrace uses artificial intelligence (Google Gemini) to:

• Automatically categorize your transactions
• Generate spending insights and forecasts
• Extract transaction data from PDF statements

When processing your data with AI:

• Only transaction descriptions are sent for categorization
• Data is processed securely and not used to train AI models
• No personally identifiable information is sent to AI services

7. Data Sharing

We may share your information only in these limited circumstances:

• Service Providers: With trusted partners who help us operate the App (as listed above)
• Legal Requirements: If required by law, court order, or government request
• Safety: To protect the rights, property, or safety of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets

8. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Export: Download your transaction data
• Opt-out: Disable analytics and crash reporting

To exercise these rights, contact us at the email below.

9. Data Retention

• Local Data: Retained until you delete the app or clear app data
• Account Data: Retained while your account is active
• After Deletion: Data is permanently deleted within 30 days of account deletion request

10. Children's Privacy

SpendTrace is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date
• Sending an email notification for significant changes

13. Contact Us