Privacy Policy

1. About this policy

This Privacy Policy explains how Spendol collects, uses, shares, and protects personal information when you use our mobile application, website, and related services (together, the “Service”). It also explains the choices and rights available to you.

Spendol is responsible for the processing described in this policy. You can contact us at support@spendol.com.

2. Information you provide

• Account information, such as your name, username, email address, phone number, profile photo, preferred currency, and sign-in information.
• Expense and financial-organizing information, such as amounts, currencies, categories, dates, payers, participants, split rules, balances, loans, and settlement records. Spendol does not collect your bank account or payment-card credentials to move money.
• User Content, such as notes, receipt images or files, group names and images, and other details you choose to attach.
• Communications you send to support and feedback you provide.

3. Information collected with your permission

• Contacts: if you grant access, Spendol can help you find people to invite or add. We use contact information for the feature you request and do not use it to send invitations without your action.
• Location: if you grant access and use location features, Spendol can attach or suggest a place for an expense. You can use the core expense features without sharing precise location.
• Camera and photo library: if you grant access, Spendol can scan receipts and let you choose receipt, profile, or group images.
• Notifications: if you opt in, we collect a device push token and notification preferences so we can deliver alerts you choose.

4. Information collected automatically

• Device and app information, such as operating system, app version, device type, language or region, and identifiers needed for security, notifications, and reliable operation.
• Service activity and diagnostics, such as request dates, error information, sync status, and security events.
• Website usage information collected through our hosting and analytics providers, such as page views, referring pages, approximate region, and device or browser type.

5. Where information is stored

Spendol is local-first. Some records and files are stored on your device so the app can work when connectivity is limited. When you are signed in and sync is available, information may also be uploaded to our hosted systems so it can be backed up, synchronized, and shared with the people you choose. Removing the app from one device does not necessarily delete synced information from our systems or other users’ devices.

6. How we use information

• Provide, synchronize, personalize, and maintain the Service.
• Calculate balances and show shared records to the relevant friends and group members.
• Authenticate accounts, deliver requested invitations and notifications, and respond to support requests.
• Protect users, prevent fraud or abuse, troubleshoot errors, and improve reliability and usability.
• Comply with legal obligations and enforce our terms and policies.

7. Legal bases where applicable

Where data-protection law requires a legal basis, we process information as needed to perform our agreement with you, with your consent, to comply with law, and for legitimate interests such as securing and improving Spendol. We balance those interests against your rights. You can withdraw consent for optional permissions through your device settings, but withdrawal does not affect earlier processing.

8. How information is shared

We do not sell your personal information. We do not share personal information for third-party cross-context behavioral advertising.

• With people you choose: expense, balance, profile, and group information is shared with the friends, invitees, and group members involved in that record.
• With service providers: vendors may process information for hosting, storage, authentication, notifications, analytics, support, email, or SMS delivery under instructions designed to protect it.
• For legal and safety reasons: we may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or secure the Service.
• In a business transaction: information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

9. Retention

We retain personal information while your account is active and for as long as reasonably necessary to provide the Service, resolve disputes, maintain security, comply with law, and enforce agreements. Retention periods vary by the type of information and why we hold it.

When you delete your account, Spendol removes your profile, private expenses, uploads, invitations, push tokens, and local app data. Minimal accounting fields in shared expenses, loans, settlements, and groups may remain for other participants so their financial records and balances are not corrupted. Those retained records are stripped of your profile identity and optional content such as notes, locations, categories, images, and receipt links. Limited security, moderation, legal, and backup records may remain where reasonably necessary or legally permitted.

10. Security

We use technical and organizational safeguards designed to protect personal information, including access controls and encrypted network connections. No service can guarantee absolute security. Protect your device and credentials, and contact us if you believe your account has been compromised.

11. International processing

Our service providers may process information in countries other than the one where you live. Where required, we use recognized safeguards for international transfers. You may contact us for more information about safeguards relevant to your information.

12. Your choices and rights

We may need to verify your identity before completing a request. Some information may be exempt from a request or retained where law permits.

• Review and update profile details and preferences in the app.
• Control contacts, location, camera, photos, and notification access in your device settings.
• Delete your account in Spendol from Settings, then Account, then Delete account. Deletion requires an active internet connection.
• Request access, correction, deletion, restriction, objection, or portability where applicable by emailing support@spendol.com.
• Complain to your local data-protection authority if you believe your rights have been violated.

13. Children

Spendol is not directed to children who are below the minimum age to use an online service in their country. We do not knowingly collect personal information from a child who cannot legally consent to its processing. Contact us if you believe a child has provided information improperly.

14. Changes to this policy

We may update this policy as the Service, law, or our practices change. We will post the revised policy with a new effective date and provide additional notice when required.

15. Contact

For privacy questions or requests, email support@spendol.com.