Spenti processes receipts and spending questions on your device. This policy explains local storage, optional cloud backup, network use, and the information handled by the spenti.app website.
Your receipts are processed on your device.
Spenti reads and stores your receipts, images, amounts, merchants, dates and notes entirely on your device. We run no servers that receive them, we require no account, and we cannot see your financial data. If you enable the optional Basic or Pro cloud-sync feature, your data is copied to your own iCloud or Google Drive account — not to us. The only personal information we ever hold is what you choose to send us through the website (for example, a support message).
| What | How Spenti handles it |
|---|---|
| Receipts, images, amounts, dates | Processed on your device and stored locally, with backups as described below. Never sent to Spenti by the app. |
| Cloud sync (Basic and Pro, optional) | Off by default. If you turn it on, your Spenti data is stored in your own iCloud (iOS) or Google Drive (Android) account, under Apple's or Google's terms — we never receive it. |
| Account / sign-in | Not required. Spenti has no user accounts and no login. |
| Advertising and tracking | None. The app contains no advertising, analytics or tracking SDKs. |
| In-app purchases | Handled by Apple and Google. We receive only your purchase and entitlement status. |
| Website forms | Only what you type into the support or feature-request form — your message or request, plus any name or email you add — stored by our processor (Cloudflare) so we can reply. |
| Web fonts | None shared. The Website's typefaces are served from spenti.app itself, so loading a page makes no request to Google Fonts or any other font host. |
| Selling your data | Never. We do not sell or share personal data for advertising. |
Spenti (“Spenti”, “we”, “us”, “our”, the “Provider”) is a personal expense-tracking app for iOS and Android. For any privacy question, or to exercise your rights, contact [email protected].
This policy covers both the Spenti mobile app (the “App”) and the website at spenti.app (the “Website”). Where the two differ, we say so.
You do not create an account, sign in, or give us an email to use the App. Everything Spenti does with your receipts — capturing an image, reading it with on-device OCR and AI, and saving the merchant, amount, date and category — happens locally on your phone and is stored in a database on the device. This data is not transmitted to us and we have no way to access it.
After the AI models have been downloaded, scanning and spending chat work offline. The App uses the network to: (i) only if you switch on Check exchange rate online in Settings → Currency, which is off by default, fetch the current THB ↔ USD exchange rate for currency conversion from api.frankfurter.dev at most once a day — a request for a public exchange rate that does not include receipt contents or transaction amounts; with the check off, Spenti converts at its own built-in rate and this request is never made; (ii) download the on-device AI models once after installation, and any later model update, from our file host assets.spenti.app — a file download that does not upload your receipts or spending records; (iii) check for optional app and model updates by fetching a small version file from spenti.app; (iv) complete purchases and validate receipts through the App Store or Google Play; (v) open a link you tap (such as this Website or a support email); and (vi) if you have enabled the optional Basic or Pro cloud sync, transfer your Spenti data to and from your own iCloud or Google Drive. Scanning, categorising, budget alerts and AI chat never need the network — they run in airplane mode; without a connection Spenti simply reuses the last exchange rate it fetched. Your receipts, images and amounts are never sent to us by the App. Optional cloud backup does transfer financial data to your own cloud account. Online services receive standard connection information, such as your IP address, when contacted.
The App contains no third-party advertising, analytics, attribution or tracking SDKs. We do not profile you, and we do not have an identifier that follows you across apps or websites.
Basic and Pro include an optional cloud sync and backup feature, off by default. If you turn it on, your Spenti data (receipts, images, amounts and settings) is stored in and synced through your own cloud account — iCloud on iOS, Google Drive on Android. That storage belongs to you: it is governed by Apple's or Google's terms and privacy policies, we have no access to it, and no copy passes through any server of ours. Turn sync off at any time in the App's settings; you can also delete the synced copy from your iCloud or Google Drive.
Spenti shows your spending in a room, with a family mascot whose mood follows your budget. The rooms and mascots ship inside the App and are drawn on your device; your choice of room, mascot and light, dark or by-the-clock setting is stored only on the device. Picking a room or a mascot sends nothing anywhere, and this version of the App collects no new information.
If you enable your operating system's backup (for example iCloud Backup or Google's device backup), your on-device Spenti data may be included in that backup. Those backups are controlled by Apple or Google under their terms and privacy policies, not ours.
Because your data lives on your device, you are in control: delete individual entries in the App, use the Privacy section in Settings to find and delete anything personal, clear the App's data, or uninstall Spenti to remove its local database from that device entirely. If you used cloud sync, also remove the synced copy from your iCloud or Google Drive (or from the App's sync settings before uninstalling).
Spenti is free to download and offers optional in-app purchases (auto-renewing Basic and Pro subscriptions and a one-time Pro Lifetime purchase). Payments are processed by Apple and Google through the App Store and Google Play — not by us. We never receive or store your full payment card details.
To deliver what you bought and to provide support, Apple and Google share with us limited information such as your purchase and subscription status, entitlements, and anonymised or aggregated transaction data. We use this to perform our agreement with you and for our legitimate interest in supporting purchases; we do not keep a separate store of your purchase history beyond what we need to answer a support request. Their handling of your information is governed by the Apple Privacy Policy and the Google Privacy Policy.
The Website is a static site hosted on Cloudflare. As our hosting and security provider, Cloudflare processes standard technical data — such as your IP address, request headers, approximate location and browser user-agent — to serve pages and protect the site from abuse. This is ordinary web-server activity, is not used to build a profile of you, and rests on our legitimate interest in running a secure Website. The Website's typefaces are served from spenti.app itself rather than from a third-party font host, so no font request goes to Google or anyone else.
Two forms let you write to us. They collect only what you choose to enter, stored in a database (Cloudflare D1) operated for us by Cloudflare:
In both cases we also record your interface language and the time you submitted. Support messages additionally record your browser's user-agent, because it is often what explains a bug; feature requests do not.
To tell humans from bots, form pages use Cloudflare Turnstile and a hidden honeypot field. Turnstile may process browser and device signals and issue a short-lived token; it is designed to be privacy-preserving and is not used for advertising.
The Website uses no advertising or analytics cookies. Cloudflare may set strictly-necessary security cookies, and Turnstile may store a short-lived token, purely to keep the site working and secure.
We do not sell or rent your personal data, and we do not share it for advertising. We rely on a small set of processors, and we may disclose information where required by law:
| Provider | Role |
|---|---|
| Cloudflare, Inc. | Website hosting, security (Turnstile), and the form database (D1). |
| Apple Inc. | App distribution and payment processing on iOS, and iCloud storage if you enable the optional Basic or Pro cloud sync. |
| Google LLC | App distribution and payment processing on Android, and Google Drive storage if you enable the optional Basic or Pro cloud sync. |
Our providers (Cloudflare, Apple, Google) operate globally, so information may be processed in countries outside your own — including the United States. Where required, these transfers rely on the appropriate safeguards those providers offer, such as Standard Contractual Clauses.
Depending on where you live, you may have rights under Thailand's Personal Data Protection Act (PDPA), the EU/UK GDPR, or California's CCPA/CPRA — including to access, correct, delete, restrict or object to processing, obtain a copy of your data, and withdraw consent. California residents also have the right to know, delete and correct, and to opt out of the “sale” or “sharing” of personal information — which we do not do. We will never discriminate against you for exercising any of these rights.
Because the App stores your data only on your device, we usually cannot act on a request about App data — you already control it directly on your phone. For information handled through the Website, email [email protected] and we will respond within the time the applicable law requires. You may also complain to your data protection authority; in Thailand this is the Office of the Personal Data Protection Committee (PDPC).
Spenti is a general-audience finance tool and is not directed to children under 13 (or the minimum age in your country; Thailand's PDPA affords additional protection to minors). We do not knowingly collect personal data from children. If you believe a child has sent us personal data through the Website, contact us and we will delete it.
Your App data is protected by your device's own security — passcode, biometrics and OS-level encryption. Information submitted through the Website is protected by Cloudflare's security controls and limited access. No method of storage or transmission is ever 100% secure, but keeping your financial data on your device removes the single biggest risk: a central server that could be breached.
We may update this policy as Spenti evolves or the law changes. We will post the new version here and update the “Effective” date above; where changes are significant, we will make that clear.
Provider: Spenti.
Privacy contact: [email protected].