Privacy Policy

01

Introduction

Welcome to SpendWise. We are committed to protecting your personal information and being completely transparent about how we use it. This Privacy Policy explains what data we collect, why we collect it, how we use it and what rights you have over it.

SpendWise is operated as a sole trader business based in Scotland, United Kingdom. By downloading and using the SpendWise app you agree to the terms of this Privacy Policy.

02

Who We Are

SpendWise is a personal finance and receipt tracking application. We are the data controller for the personal information you provide through the SpendWise app. As we are based in Scotland we operate under UK GDPR and the UK Data Protection Act 2018.

03

What Data We Collect

Account Information

• ✓
  Email address
• ✓
  Password (stored securely as an encrypted hash — we never see your actual password)
• ✓
  Profile name if you choose to provide one

Receipt and Purchase Data

• ✓
  Images of receipts you photograph
• ✓
  Store name and retailer information
• ✓
  Individual item names, quantities and prices
• ✓
  Purchase date and total amount
• ✓
  Return deadline dates you set

Location Data (if enabled)

• ✓
  Approximate location to detect when you are near retail stores
• ✓
  Postcode district only — never your full address
• ✓
  Store visit patterns for Smart Scan Reminders

Usage and Device Data

• ✓
  Which features you use and how often
• ✓
  App performance data and crash reports
• ✓
  Device type and operating system version

04

How We Use Your Data

• ✓
  To process and store your scanned receipts
• ✓
  To generate spending insights and category breakdowns
• ✓
  To track return deadlines and send you reminders
• ✓
  To power AI spending queries about your purchase history
• ✓
  To send Smart Scan Reminders when you leave retail locations
• ✓
  To improve the app using anonymised and aggregated data

05

Third Party Services

• ✓
  OpenAI: Receipt images are sent to OpenAI's API to extract item data. Images are processed and not stored by OpenAI beyond the immediate request.
• ✓
  Google Play: Handles all subscription billing and app distribution.
• ✓
  Google Places API: Used to identify nearby retail locations for Smart Scan Reminders.

We do not sell your data to any third party. We do not share your personal data with advertisers.

06

How Long We Keep Your Data

• ✓
  Receipt data and purchase history: kept for the duration of your account
• ✓
  Receipt images: kept for 12 months then automatically deleted
• ✓
  Location visit logs: kept for 90 days then automatically deleted
• ✓
  Account information: kept until you delete your account

When you delete your account all your personal data is permanently deleted within 30 days.

07

Your Rights Under UK GDPR

• ✓
  Right to access: Request a copy of all personal data we hold about you
• ✓
  Right to rectification: Ask us to correct any inaccurate data
• ✓
  Right to erasure: Request deletion of all your personal data
• ✓
  Right to portability: Export all your data in a readable format
• ✓
  Right to withdraw consent: Turn off location tracking at any time in app settings

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data.

08

How We Protect Your Data

• ✓
  All data transmitted between the app and our servers is encrypted using TLS
• ✓
  Passwords are hashed and salted — never stored in plain text
• ✓
  Receipt images are stored in encrypted cloud storage
• ✓
  Personal data and anonymised data are stored in separate databases

09

Children's Privacy

SpendWise is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data please contact us immediately and we will delete it promptly.

10

Changes to This Policy

We may update this Privacy Policy from time to time as SpendWise grows and adds new features. When we make significant changes we will notify you through the app and update the date at the top of this policy.

11

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy please contact us. We aim to respond to all privacy related enquiries within 5 working days.