Privacy Policy

Last updated: 9 September 2026

This policy describes how Spendograph (“the app”, “we”) handles information when you use the Spendograph Android application and its related API.

Who we are

Spendograph is operated by Mikhail Miller. Contact: the support email published on the Google Play store listing for Spendograph.

What we collect

• Account. Email address. If you sign in with Google, we receive your Google account id and email from Google Sign-In. If you sign in with email, we store a password hash (not the password itself).
• Financial records you enter. Expenses, income, categories, products, balances, and related notes. This is the content of the app.
• Receipt images. If you scan a receipt, the photo is sent to our server to extract text and line items. We store scan results needed to show the expense. Images are processed to provide the feature; we do not sell them.
• App diagnostics. The app may send error reports (for example a crash or failed request) so we can fix bugs. These reports can include technical details such as timestamps and request paths, not your full financial history by default.
• Subscriptions. If you buy a plan through Google Play, Google processes the payment. We receive purchase tokens and subscription status from Google so we can unlock scan quota. We do not receive your card number.

How we use the data

We use this information only to provide the app: sign-in, syncing your records between devices, receipt scanning, subscription entitlements, and fixing outages.

Where it is stored

Application data is stored on a server we operate (currently a virtual machine in the European Union). Google Sign-In and Google Play Billing are processed by Google under their own policies. Receipt text extraction may use a third-party language model provider when that feature is enabled.

Sharing

We do not sell your data. We share information only with processors needed to run the service (hosting, Google Sign-In / Play, and the scan provider if live scanning is on), or if required by law.

Retention

We keep account and financial records until you delete your account or we delete the service data after you stop using the app. You can request deletion via the Play store contact email.

Security

Traffic to the API uses HTTPS. Passwords are stored hashed. You are responsible for keeping your Google account or email password secure.

Children

Spendograph is not directed at children under 13, and we do not knowingly collect data from them.

Your choices

You can stop using the app and request deletion of your account data. You can also revoke Google Sign-In access in your Google account settings.

Changes

We may update this policy. The “Last updated” date at the top will change when we do.