Privacy Policy

Last updated: 15 October 2026

This policy describes how Spendograph (“the app”, “we”) handles information when you use the Spendograph Android application and its related API.

Who we are

Spendograph is a personal expense-tracking app. Contact: danza.devs@gmail.com.

Delete your Spendograph account

You can ask us to delete your Spendograph account and the data we store with it. The app does not yet have a delete button. Email us from the address you use to sign in.

1. Email danza.devs@gmail.com with the subject “Delete my Spendograph account”.
2. Send it from the same email address as the one on your Spendograph account, so we can match the request.
3. After we confirm the request, we delete that account from our servers. This includes your sign-in details (email, Google account id, and password hash if you have one), expenses, income, categories, products, balances, notes, and stored receipt-scan results.

We do not keep a copy of that account data for the app after deletion. Google may still keep information it already holds under its own policies, such as your Google account and Google Play purchase history. Turning off Spendograph’s access in your Google account settings does not by itself delete the records stored on our server.

What we collect

• Account. Email address. If you sign in with Google, we receive your Google account id and email from Google Sign-In. If you sign in with email, we store a password hash (not the password itself).
• Financial records you enter. Expenses, income, categories, products, balances, and related notes. This is the content of the app.
• Receipt images. If you scan a receipt, the photo is sent to our server to extract text and line items. We store scan results needed to show the expense. Images are processed to provide the feature; we do not sell them.
• App diagnostics. The app may send error reports (for example a crash or failed request) so we can fix bugs. These reports can include technical details such as timestamps and request paths, not your full financial history by default.
• Subscriptions. If you buy a plan through Google Play, Google processes the payment. We receive purchase tokens and subscription status from Google so we can unlock scan quota. We do not receive your card number.

How we use the data

We use this information only to provide the app: sign-in, syncing your records between devices, receipt scanning, subscription entitlements, and fixing outages.

Where it is stored

Application data is stored on a server we operate (currently a virtual machine in the European Union). Google Sign-In and Google Play Billing are processed by Google under their own policies. Receipt text extraction may use a third-party language model provider when that feature is enabled.

Sharing

We do not sell your data. We share information only with processors needed to run the service (hosting, Google Sign-In / Play, and the scan provider if live scanning is on), or if required by law.

Retention

We keep account and financial records until you ask us to delete your account, as described in “Delete your Spendograph account” above.

Security

Traffic to the API uses HTTPS. Passwords are stored hashed. You are responsible for keeping your Google account or email password secure.

Children

Spendograph is not directed at children under 13, and we do not knowingly collect data from them.

Your choices

You can stop using the app and request deletion of your account data by email, as described above. You can also revoke Google Sign-In access in your Google account settings.

Changes

We may update this policy. The “Last updated” date at the top will change when we do.