Legal
Privacy Policy
SpendSync is built so your financial life stays on your iPhone. This policy is the honest, specific account of what does and doesn’t leave your device — no “we may collect a variety of information” boilerplate.
The short version
Your bank texts are read and categorized on your iPhone. Your transactions, categories, budgets, and commitments live on your device and in your own iCloud — we never receive them. To categorize the tricky purchases and to show merchant logos, small de-identified details leave your phone. We don’t track you, show ads, use data brokers, or sell your data — ever.
What leaves your phone
- Your account email and name (to sign in).
- A de-identified store name, amount, and type — to categorize hard-to-place purchases.
- A merchant’s website domain (or its name, for less-known shops) — to fetch its logo.
- Your per-category spend totals — to suggest budgets.
What never does
- Your raw bank SMS, screenshots, and one-time codes.
- Your full transaction history and individual transactions.
- Your categories, budgets, and commitments.
- Your card numbers, account numbers, and balances.
Who we are
SpendSync (“SpendSync,” “we,” “us”) is a personal-budgeting app for iPhone that turns your bank’s transaction SMS into a clean, categorized budget. This policy covers the SpendSync app and the spendsync.ai website, including the launch waitlist.
What we collect, and why
We collect only what each feature needs to work. Here is every piece of data that leaves your device, where it goes, and why.
Account information
When you create an account you sign in with Apple, Google, or a one-time email code. We store your email address and name to create and secure your account. Sign-in is handled by Better Auth on our behalf. If you use Sign in with Apple and choose to hide your email, Apple gives us a private relay address — we never see your real one; if no address is shared, a placeholder is used and is not a real, contactable address.
Cloud assist — categorizing tricky purchases Always on
Your bank texts are parsed on your iPhone. When a purchase is hard to place, SpendSync sends a small, de-identified snippet to Claude (by Anthropic) to sort it:
To categorize hard-to-place purchases, SpendSync sends only the store name, amount, and type — never your name, account, card number, or messages — to Claude. Anthropic processes it to answer the request and doesn’t use it to train models.
This is always on — there is no separate setting to switch it off. It is deliberately limited: it runs only for ordinary spending, never for transfers, remittances, or anything that looks like a personal name, and the snippet is stripped of identifying details on your device before it is sent. We do not keep a per-user copy of these snippets on our servers; they are used to answer the request and the category comes back to your phone.
Brand logos Always on
To show a merchant’s logo next to a transaction, that merchant’s website domain — or, for less-known shops, its name — is looked up through logo.dev and DuckDuckGo, never your spending, amounts, or any personal detail. This reveals the merchant’s name to those services, and nothing else.
Smart budgets
When SpendSync suggests budgets, it can send your per-category spend totals (for example, “Groceries: a typical 1,200 a month”) along with the category names to Claude to propose realistic figures. This never includes individual transactions, merchant names, your income details, or any data about other people.
At a glance
| Data | Where it goes | Tied to you? | Why |
|---|---|---|---|
| Email & name | Better Auth (account) | Linked to your account | Create and secure your account |
| Store name, amount, type (de-identified) | Claude / Anthropic | De-identified | Categorize hard-to-place purchases |
| Merchant website domain (or name) | logo.dev, DuckDuckGo | De-identified | Show the merchant’s logo |
| Per-category spend totals | Claude / Anthropic | De-identified | Suggest realistic budgets |
What never leaves your device
The heart of your data stays with you:
- Your raw bank SMS, screenshots, and one-time passcodes are read and parsed on your iPhone and are never transmitted to us or anyone else.
- Your full transaction history, individual transactions, categories, budgets, commitments (rent, loans, mortgages), and merchant memory are stored on your device and synced through your own iCloud account. They sync across your devices through your Apple ID — we never receive them.
- Your card numbers, account numbers, and balances are never collected.
Because this data lives in your own iCloud rather than on our servers, it is governed by Apple’s privacy terms for iCloud, and you control it directly from your device.
No tracking, ads, or selling
- We do not track you across other apps or websites.
- We do not show ads or use advertising or data-broker SDKs.
- We do not sell or rent your personal data — ever.
- We do not use your financial data to build a marketing profile of you.
Third-party services
We rely on a small set of trusted providers to run SpendSync. Each receives only the data described above for the stated purpose:
- Anthropic (Claude) — categorizes de-identified purchase snippets and proposes budgets. Does not train on your data.
- logo.dev — resolves a merchant domain or name to a brand logo.
- DuckDuckGo — a fallback source for merchant logos (icons).
- Better Auth — account creation and sign-in.
- Resend — sends transactional email such as one-time sign-in codes.
- Cloudflare — hosts our backend and the website, and stores waitlist sign-ups.
If you join the launch waitlist on this website, we store the email address you submit (with Cloudflare) solely to email you one invitation when SpendSync opens.
Data retention
- Account information is kept while your account exists and is deleted when you delete your account.
- De-identified purchase snippets are used to answer a categorization request and are not retained per user on our servers. Anthropic processes them under its own terms and does not use them to train its models.
- Logo lookups happen at the moment a logo is needed; we do not store them.
- On-device and iCloud data stays for as long as you keep SpendSync and its data. Deleting the app, or removing its data from iCloud, removes it.
- Waitlist emails are kept until launch (or until you ask us to remove yours) and then no longer needed.
Your rights & choices
You stay in control of your data:
- Access & correction — your transactions, categories, and budgets are visible and editable directly in the app at any time. You can edit your account name in Settings.
- Delete your account — Settings → Delete account removes your SpendSync account and the account information we hold.
- Delete your data — deleting the app removes its on-device data; to also remove the synced copy, delete SpendSync’s data from iPhone Settings → iCloud.
- Waitlist — ask us any time to remove your email from the launch waitlist.
Depending on where you live, you may have additional rights over your personal data. To make any request, contact us at the address below.
Children’s privacy
SpendSync is not directed to children and is not intended for use by anyone under the age required to hold a bank account in their country. We do not knowingly collect personal data from children.
Changes to this policy
If we change how SpendSync handles data, we’ll update this page and revise the date at the top. For material changes, we’ll make a reasonable effort to let you know in the app or by email.
Contact
Questions about your privacy, or a request about your data? Email support@spendsync.ai and we’ll help.