Privacy Policy
1. Information We Collect
- Account data: name, email, and optional profile details you provide.
- Financial data: expenses, budgets, receipts and transaction details you add or connect.
- Usage data: app interactions, device type and crash logs to improve the Service.
2. Mobile App Permissions — What Each One Does
Our apps ask for a few device permissions. Every one of them is optional, and here is exactly what each is used for:
- Contacts (optional, SpenzaBook): used only so you can pick a person from your phone book when creating a ledger. Only the contacts you attach to a ledger are stored with your account — we never upload or copy your full address book, and you can type a name manually instead of granting this permission.
- Camera & photo library (optional): used only when you choose to attach a bill or receipt to an entry. We access the single photo you pick or take — nothing else in your library.
- Notifications (optional): used for budget alerts, payment due dates and reminder confirmations. Fully configurable or off in settings.
- SMS parsing (optional, Android, off by default): if you turn it on, the app reads bank transaction SMS on your device to log expenses automatically. Personal messages are never read, and nothing is uploaded except the parsed transaction details.
Denying any permission never blocks the rest of the app — the related feature simply stays off.
3. What We Do NOT Collect or Sell
We believe transparency means telling you what we don't do, not just what we do. Spenzaa explicitly does not:
- Sell your personal or financial data to advertisers, data brokers or any third party
- Share your data with banks, insurance companies or lenders without your explicit opt-in
- Collect your government ID, Aadhaar, PAN, social security number or biometric data at the app level
- Read your SMS, emails or call logs beyond what you explicitly grant for SMS-based transaction parsing (optional feature)
- Use your spending data to serve targeted advertisements inside the app
- Store your bank login credentials — we use read-only API integrations where available
4. How We Use It
We process your data to operate the Service: categorizing transactions, generating budgets and insights, syncing across devices, and providing support. Aggregated, de-identified data may be used to improve our AI models. We do not sell personal data or share it with advertisers.
5. Security
All data is encrypted with 256-bit AES at rest and TLS 1.3 in transit. Access is restricted by role, audited, and protected by multi-factor authentication internally. Biometric app lock is available on supported devices.
6. Your Rights
You may access, export, correct or permanently delete your data at any time from the app settings, or by emailing help@spenzaa.com. Deletion requests are completed within 30 days. Depending on your region (GDPR, CCPA, DPDP), you may have additional statutory rights, which we honor.
7. Cookies & Analytics
Our website uses only essential cookies and privacy-respecting, cookieless analytics. We do not use third-party advertising trackers. Full details in our Cookie Policy.
8. Data Retention
We retain your data while your account is active. After deletion, residual backups are purged within 30 days, except where retention is required by law.
9. Children
The Service is not directed to children under 18, and we do not knowingly collect their data.
10. Changes
We will notify you of material changes in-app or by email before they take effect.
11. Contact & Grievance Officer
Privacy questions: help@spenzaa.com · Contact page →
For users in India: in line with the Information Technology Rules and the DPDP Act, grievances are handled by our Grievance Officer, reachable at help@spenzaa.com (subject line "Grievance"). We acknowledge within 24 hours and resolve within 15 days.