Privacy Policy

SpendThrift ("SpendThrift", "we", "us") provides a personal-finance tool that turns bank and credit-card statements you upload into a private spending dashboard. This policy explains what we collect, how we use it, and the choices you have.

• Account information. When you sign in with Google, we receive basic profile details (your name, email address, and profile image) solely to authenticate you and keep you signed in.
• Statement files you upload. The files you provide are transmitted over an encrypted connection, parsed in memory to generate your analysis, and then discarded. They are not written to a database or persistent storage.
• Preferences you choose to save. If you create custom category tags or settings, we store only what's needed to provide those features — not your underlying statements or transactions.
• Basic technical data. Our hosting provider records standard server logs (such as IP address and browser type) for security, abuse prevention, and reliability.

• • We do not store your uploaded statements or the transactions within them.
• • We do not connect to, or ask for credentials to, your bank or card accounts.
• • We do not sell, rent, or trade your personal information.
• • We do not use your financial data for advertising or profiling.

When you upload a statement, it is sent over HTTPS to our service, parsed to extract transactions and produce your dashboard, and the resulting analysis is returned to your browser. The uploaded file is held only in memory for the duration of processing and is not retained afterward. If you close or refresh the page, your analysis is gone unless you have exported it yourself.

We rely on a small number of trusted providers, each acting on our behalf and under their own privacy terms:

• • Google — authentication (sign-in).
• • Vercel — application hosting and delivery.
• • Supabase — storage for account preferences, where applicable.

We use a single session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

Uploaded statements are not retained. Account information and saved preferences are kept until you ask us to delete them. To request deletion of your account or data, email us at support@myspendthrift.com.

Data in transit is encrypted with HTTPS. We follow the principle of collecting as little as possible and rely on reputable infrastructure providers. No method of transmission or storage is 100% secure, but we work to protect your information.

SpendThrift is not directed to children under 16, and we do not knowingly collect their data.

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Questions about this policy? Email support@myspendthrift.com.