Privacy policy

Spend Flow helps households track spending, budgets and net worth. To do that we handle some of the most personal information you have, so this page explains plainly what we collect, what we do with it, and the choices you have.

The short version: we use your information to run Spend Flow for you, and for nothing else. We don’t sell it, we don’t use it for advertising, and we don’t share it with anyone to market to you.

What we collect

• Your account. Your name, email address and password. Passwords are stored as one-way hashes, never in a form anyone can read.
• Your household. The household name, the people in it, and which accounts belong to whom.
• Financial information from your banks. When you connect a bank, we receive account names, types, the last digits of account numbers, balances and transactions. We never receive or store your bank username or password.
• What you add. Categories, budgets, rules, tags, notes, manual accounts and any statements you import.
• Website forms. When you request access or contact us, the details you enter in the form.
• Technical information. Our hosting provider keeps standard server logs, including IP addresses, to run and secure the service. To limit spam on our forms we keep a scrambled, one-way version of the sender’s IP address. When something breaks, we record what failed, on which page, and your browser type, so we can fix it. Amounts, email addresses and what you searched for are removed first.

How we use it

• To show your accounts, transactions, budgets, recurring bills and net worth.
• To sync your banks, apply your rules and suggest categories.
• To send emails about your account, like confirmation links, password resets and invites.
• To answer your messages and early-access requests.
• To keep Spend Flow secure and working, and to prevent abuse.

Who sees your household’s data

Everyone in your household sees the same accounts, transactions and budget. People you haven’t invited can’t see your household. Each household’s data is kept separate in the database, so one household can never read another’s.

Bank connections

Banks connect through SimpleFIN Bridge, a separate service you sign up for directly. SimpleFIN gives us read-only access to your accounts. We store that access link encrypted and use it to sync once a day. SimpleFIN’s own privacy policy covers the information you give them.

We’re adding Plaid as a second way to connect. If you choose to connect through Plaid, Plaid collects your information under the Plaid End User Privacy Policy, and shares your account and transaction information with us so we can show it in Spend Flow.

Bank access is read-only. Spend Flow can’t move money or make payments.

Auto-categorization

Auto-categorization is off until your household turns it on in Settings. When it’s on, we send the merchant part of uncategorized transaction descriptions to an AI model to suggest a category. We remove names, account numbers, confirmation codes and phone numbers first, and we never send person-to-person payments or paychecks. Along with the merchant text, the model sees your category names and whether money came in or went out. Amounts, balances and account details are never sent.

Services we rely on

We use a small number of providers to run Spend Flow. Each one only gets what it needs to do its job:

• Supabase stores our database and handles sign-in.
• Vercel hosts the website and app.
• Resend delivers our emails.
• Umami counts visits to our website and sign-in pages.
• Cloudflare Turnstile checks that a person, not a bot, is using our sign-in, sign-up and password forms. To do that it sees technical details like your IP address and browser.
• Sentry receives error reports when something breaks, so we can fix it.
• Logo.dev supplies bank logos. Our servers ask it for a logo by the bank’s web address only, so it never sees you or your accounts.
• SimpleFIN, and Plaid once available, connect your banks.
• An AI model provider suggests categories, only if your household turns on auto-categorization.

We may also share information if the law requires it, or to protect the safety and security of our users.

How we protect it

Data is encrypted in transit and at rest. Bank access links are additionally encrypted by Spend Flow before they’re stored. Database backups are encrypted too. No system is perfectly secure, but we work to keep yours safe, and we’ll tell you if a breach affects your information.

Keeping and deleting your data

We keep your information for as long as your household uses Spend Flow. You can disconnect a bank at any time from Accounts. The household owner can permanently delete the household from Settings, which deletes every account, transaction, rule and login in it. Copies in encrypted backups are removed as those backups are replaced.

You can also ask us to see, correct or delete your information by emailing privacy@spendflow.app.

Cookies and analytics

We only use cookies to keep you signed in and to remember how you like to view your data, like the date range and whose spending you’re looking at. Your browser’s storage remembers display preferences like dark mode. We don’t use advertising trackers.

To understand how people find us, we count visits to our website and sign-in pages with Umami, a privacy-focused analytics service. It doesn’t use cookies, doesn’t track you across other sites, and doesn’t collect anything that identifies you. We don’t use analytics inside the app, where your financial information is.

Children

Spend Flow is meant for adults managing household finances. It isn’t intended for anyone under 18.

Changes and questions

If we change this policy in a meaningful way, we’ll update the date above and let you know in the app or by email. Questions? Write to privacy@spendflow.app or use the contact form.