Spendarra

Privacy Policy

Last updated: October 2026

Spendarra ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our personal finance application.

Information We Collect

We collect the following types of information:

  • Account information: Your email address and name when you create an account.
  • Financial data: Transaction amounts, categories, budgets, and other financial information you enter into the app.
  • Usage data: How you interact with the app, including pages visited and features used.
  • Security data: IP addresses, account identifiers, and request counts used to limit abusive requests and protect sign-in and account recovery.

How We Use Your Data

  • To provide and maintain the Spendarra budgeting service.
  • To improve and personalize your experience.
  • To protect the security of your account and our platform.
  • To communicate important updates about the service.

Data Storage & Security

Account and budgeting data is stored in PostgreSQL hosted by Supabase. Authentication runs in the application using NextAuth.js. The server checks which account may access each user's data, and passwords are stored as hashes.

AI Features

AI chat and generated financial insights are disabled in this edition. The application does not send your budgeting data to an AI provider while these features are disabled. Ordinary budgeting, charts, and account features do not require an AI service.

Third-Party Services

We use the following third-party services to run Spendarra:

  • Supabase: Database hosting for your account and financial data.
  • Vercel: Application hosting, plus Vercel Analytics and Speed Insights for aggregate traffic and performance measurement.
  • Upstash: Stores temporary request counters and identifiers for security rate limits.
  • Resend: Delivers account emails such as verification codes and password resets.

We do not sell your data to advertisers or any third parties. We do not display ads in the application.

Cookies & Analytics

We use essential cookies for authentication and session management. We do not use advertising cookies and we do not sell or share your data for advertising.

We do use Vercel Analytics and Speed Insights to understand how the app is used and how fast it loads. These measure page views and performance without cookies and without building a profile of you across other websites.

Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Export your financial data at any time.
  • Request deletion of your account and all associated data.
  • Correct any inaccurate information.

Account Deletion

You can delete your account at any time from your account settings. When you delete your account, all your personal information and financial data will be permanently removed from our systems within 30 days.

Children's Privacy

Spendarra is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

Contact Us

If you have questions about this Privacy Policy, please contact us at jcosta.infosec@gmail.com.