Last updated: 23 July 2026
This Privacy Policy is provided by Eduardo Ozanan Correia ("we," "our," or "us"), the developer of Spent. Spent is built privacy-first. This policy explains, in plain language, what we collect (almost nothing) and where your data lives (your device and your iCloud).
The expenses, categories, budgets and wallets you add stay on your device. When iCloud sync is enabled, this data is stored in your personal iCloud account, controlled by Apple's privacy protections, not by us.
Apple Pay tracking works through an Apple Shortcut and a one-time automation you set up in the Shortcuts app. When you tap to pay, the shortcut sends four pieces of information to Spent: the merchant name, the amount, the currency, and the card name (for example "Standard Visa" or "Debit Card"). The card name is only used if you choose to map that card to a specific wallet in the app. No card numbers, account details or banking credentials are ever passed to Spent. All processing happens on your device.
When you log a transaction, a small amount of information is sent to our API to power auto-categorisation:
Our API forwards this to third-party artificial intelligence service providers for processing, then returns the result to the app. Nothing is stored on our servers.
The data sent contains no account, no identity, and no device information. There is no way, for us or for them, to link it back to you.
Spent lets you upload a PDF, such as a bank or card statement, so that transactions can be extracted and categorised automatically. When you upload a file, it is sent through our API to a third-party AI provider, which reads the document, extracts the transactions and returns them to the app. We do not open, read, inspect or retain the contents of the file, and nothing from the file is stored on our servers. Once the extraction is complete, the file is discarded.
Please remove sensitive information before uploading. While our API is secure and we do not read or retain any file you submit, the document itself is passed to an AI provider for processing. As a general rule, it is never a good idea to share sensitive personal information with any AI service. Before uploading, we strongly recommend redacting anything that is not a transaction, including your full name, home address, phone number, account or card numbers, IBAN/BSB/routing details, balances and any other identifying details. Ideally, only include the transaction rows (date, description, amount).
By using this feature you accept that you are solely responsible for the content of any file you upload. If you would prefer not to send a document to an AI provider, you can add your transactions manually instead.
We collect anonymous crash, performance, and usage data (such as which features are used) to keep the app stable and understand how it is being used. This never includes your expense details and cannot be used to identify you.
This marketing website (separate from the app itself) uses two analytics tools to help us understand which messages and ads bring people here and which buttons get clicked:
Neither tool ever sees the contents of the app. They only know about your interaction with the public marketing pages. You can block both with most ad blockers or browser tracking-protection features.
If we update this policy, we'll revise the date above and, where appropriate, note changes in the app.
Questions about privacy? Get in touch contact page.