Spendly — Privacy Policy

1. Overview & Key Points

The following points are a short summary. Please read the full policy below for complete details.

• We use your data to provide, operate, and improve the App's core features: tracking personal expenses, splitting bills within groups, and settling debts with friends.
• We collect information you give us (name, email, phone number, profile photo, expenses, groups) and information generated automatically (usage analytics and advertising identifiers).
• We do not sell your personal information.
• Financial data you enter (expenses, budgets, settlements) is stored securely in Google Cloud (Firebase Firestore) and on your device, and is used only to provide the App's functionality.
• We use Google AdMob to show ads. Ad personalization follows your consent choices under Google's User Messaging Platform (GDPR/CCPA).
• You can delete your account and associated data at any time.

2. Information We Collect

We collect information in three ways: (a) information you provide directly, (b) information generated when you use the App, and (c) information from third-party services you choose to connect (e.g., Google).

2.1 Information You Provide Directly

Note: Information you submit to a shared group (such as member names and expenses) may be visible to the other members of that group in order to provide the splitting feature.

2.2 Information Collected Automatically

2.3 Third-Party Services

• Google Sign-In: if you sign in with Google, we receive your Google account name and email address, which are used to create your Spendly profile.
• Phone OTP: if you sign in with your phone number, we send a one-time passcode via Firebase Authentication to verify the number you provide.

3. How We Use Your Information

We use your information only for the purposes described in this policy:

• Providing the service: account creation and authentication, storing and syncing your expenses, groups, and settlements, generating PDF reports, and delivering notifications.
• Improving the service: analysing aggregated, non-identifying usage patterns to improve features and fix errors.
• Advertising: showing ads inside the App and, with your consent, personalised ads.
• Legal compliance & safety: complying with applicable laws, responding to lawful requests, and protecting the security and integrity of the App.

We do not use your financial data to make credit, insurance, or lending decisions, and we do not sell it to third parties.

4. How We Share Your Information

We do not sell or rent your personal information. We share it only in the limited circumstances below:

• Service providers: trusted vendors who help us run the App and who are contractually bound to protect your data:
  • Google (Firebase) — authentication, Cloud Firestore database, and analytics (firebase.google.com/support/privacy).
  • Google AdMob — advertising (policies.google.com/privacy).
• Group members: when you create or join a shared group, the expenses, splits, and settlements for that group are visible to that group's members to enable bill splitting.
• Legal obligations: if required by law, regulation, or a valid legal request (e.g., a court order), or to protect the rights, property, or safety of our users or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this policy.

5. Advertising

The App is free and shows ads served by Google AdMob. AdMob may use cookies and device identifiers (such as the Google Advertising ID) to serve ads and measure performance.

• Personalised vs. non-personalised ads: Where required by law (for example in the EEA, UK, and California), we use Google's User Messaging Platform (UMP) to ask for your consent before loading personalised ads. You can accept, reject, or change your consent choice at any time from the App's consent/privacy settings.
• Opting out: you can reset your advertising ID from your device settings (Android: Settings → Privacy → Ads; iOS: Settings → Privacy → Advertising), or disable "personalised ads". This does not stop non-personalised ads from being shown.
• Google's privacy policy: https://policies.google.com/privacy
• AdMob help: https://support.google.com/admob

No ads are shown on authentication or security screens (login, sign-up, OTP verification, password reset).

6. Analytics & Device Data

We use Firebase Analytics to understand how the App is used. This collects non-personally-identifying information such as app opens, screen views, and feature usage, along with device information (model, OS version, language). Analytics data is used in aggregate to improve the App and is governed by Google's privacy policy.

Firebase and AdMob may collect your device's advertising identifier. You can opt out of analytics tracking where supported by your device settings (e.g., iOS "Limit Ad Tracking" or Android "Opt out of Ads Personalization").

7. Data Security

• Data in transit is encrypted using industry-standard TLS/HTTPS encryption.
• Data at rest is protected by Google Cloud's encryption.
• Authentication and passwords are handled by Firebase Authentication (including email/password, phone, and Google sign-in), which uses secure, industry-standard practices.
• Access to production systems is restricted and monitored.
• You can also protect the App with your device's lock screen and biometrics.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention & Deletion

• We retain your account and the data you enter while your account is active, and as needed to comply with legal obligations.
• If you delete your account in the App (Profile → Delete Account), we delete or anonymise your personal data, including your expenses, groups, and settlements, within a reasonable period, subject to applicable law and pending transactions.
• Analytics and advertising identifiers are retained in aggregate form in line with the retention periods of Firebase Analytics and Google AdMob.
• You may export your own expense data using the App's PDF export feature before deleting your account.

9. Your Rights & Choices

Depending on your jurisdiction (e.g., GDPR in the EEA/UK, CCPA/CPRA in California, and other local laws), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data (you can edit your profile and expenses directly in the App).
• Delete your data or account.
• Restrict or object to certain processing, including personalised advertising.
• Data portability — receive a copy of your data in a structured, machine-readable format (e.g., using the App's PDF/export features).
• Withdraw consent at any time (e.g., for personalised ads), without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in Section 13. We will respond within the timeframes required by applicable law (typically within 30 days). We may ask you to verify your identity before fulfilling a request.

CCPA/CPRA Notice (California residents)

We do not sell or share your personal information for cross-context behavioural advertising. California residents may request details about the categories of personal information we collect and how it is used, and may request deletion, using the contact details below.

10. Children's Privacy

The App is not directed to children under the age of 13 (or the age of digital consent in your country, which may be higher). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can delete it.

11. International Data Transfers

Spendly is provided using Google's cloud infrastructure (Firebase). Your data may be transferred to and processed on servers located outside your country of residence, including in the United States. Google relies on appropriate safeguards for such transfers, including Standard Contractual Clauses where required by applicable law. By using the App you acknowledge this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the App. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, contact us at:

Email: thakoranil0786@gmail.com

We aim to respond to all inquiries within 30 days.