SpendWise is an Android app for shopping lists and spending. This policy explains what the app keeps, what leaves your phone, who receives it and how to delete it. "We" means the developer of SpendWise; you can reach us at hello@younes.app.
In short
- Your lists stay on your phone. Nothing goes to our servers unless you sign in to sync, join a family or use an AI feature.
- When you sign in and sync, a copy of your lists, items, prices, stores, categories and AI reports is kept in your account on our servers (Google Firebase, in Belgium).
- The AI features send only what that request needs (what you typed or said, a receipt photo, or your spending figures) to Google Gemini. Your name, email and account are never sent to the AI.
- No ads, no selling or sharing data with advertisers or data brokers, no tracking across other apps.
- You can delete your account and its cloud copy at any time in the app, or by email.
1. On your phone
Everything you enter (lists, items, quantities and prices, stores, categories, the item library, receipt photos you take, AI reports and settings) is stored on your phone. It stays there until you delete it or uninstall the app. Backups are files you choose to save yourself; we never see them.
2. Signing in with Google
Signing in is optional. It's needed to sync across your phones (Premium) and to share lists with family. It uses Google sign-in through Firebase Authentication, which gives us your name, email address and a random account ID. We use them to keep your account and, if you're in a family, to show the other members who you are.
3. Sync and family sharing (stored on our servers)
When you sign in and sync is on (Premium), or when you join or start a family, the app copies the data on your phone to your account on our servers and keeps it in step: lists, items, quantities, prices, stores, categories, the item library with its price statistics, AI reports, and your currency setting. Receipt photos are not uploaded.
Our servers are Google Cloud Firestore, run by Google for us, in the europe-west1 region (Belgium). Only you can read your account's data. In a family, every member can read and change the family's shared lists and sees each member's name and email.
4. AI features (Google Gemini)
Quick add, reading receipts and AI reports use Google's Gemini AI. Each request goes from the app to our own server function (Google Cloud Functions, Belgium), which sends it on to the Gemini API. We send only what the request needs:
| Feature | What is sent |
|---|---|
| Quick add | What you typed or your voice recording (up to 2 minutes), plus the names of your categories, stores, items and open lists, your currency and today's date, so the AI uses your own names. |
| Receipt reading | The receipt photo, plus the same names as above. |
| AI reports | Your question (typed or spoken), and figures for the period you chose: totals, purchases, items, stores and prices. |
The app asks before your first AI use, and you can turn the AI off or on again any time in Settings → AI features. With it off, nothing is sent to the AI and the rest of the app works.
Never sent to the AI: your name, email, account ID or anything else that identifies you, other photos, or your contacts.
We use Gemini's paid service. Under Google's terms for it, Google does not use what we send to improve its products; it may keep requests for a limited time to detect abuse. See the Gemini API terms.
To count each person's daily AI allowance, the server keeps how many requests each account made in the current day or week, never their content. If you use the AI without signing in, the app creates an anonymous account (a random ID with no name or email) for this count.
To set fair prices and limits, the server also keeps a daily record per account of how much it used the AI: for each feature, how many requests were answered, failed or refused because the allowance ran out, and their size in tokens (the units the AI is billed in). It never includes what was sent or answered. Each day's record is deleted after about 13 months, or straight away when you delete your account.
The server's logs record only sizes and counts (for example "a 3 KB request, answered in 2 seconds"), never what you sent or what the AI answered.
5. Keeping the app safe and working
The app uses Firebase App Check with Google Play Integrity so that only the real app can use our servers. This checks your device and app install with Google; it doesn't send us any of your data.
If the app crashes, it sends a crash report through Firebase Crashlytics so we can fix the problem: the technical details of the crash (which part of the app failed), the phone model, Android and app versions, and a random ID for this install of the app. Crash reports don't include your name, email, account or lists, and the app doesn't add anything you typed to them; in rare cases an error's technical message can quote a few characters of what was being processed when it failed. Google keeps them for 90 days.
Like any online service, Google's servers keep short-lived technical logs (such as IP addresses) for security and to keep the service running.
6. Who receives your data
- Google, as our service provider: Firebase Authentication, Cloud Firestore, Cloud Functions, App Check and Crashlytics, and the Gemini API for AI requests. See Firebase privacy and the Google Privacy Policy.
- Members of your family in SpendWise, if you start or join one (section 3).
We don't sell your data, share it with advertisers or use it for ads. The app has no ads.
7. How long we keep it and how to delete it
- On your phone: until you delete it or uninstall the app.
- Your account and its cloud copy: until you delete the account. Signing out keeps the cloud copy so you can sign in again.
- Delete account (Settings → Sync across devices → Delete account) erases the cloud copy of your lists, your sign-in, your plan, your AI usage counts and records and your family invites straight away. In a family you joined, you're taken off it and the family keeps its shared lists. A family you started is closed and its cloud copy erased; the members keep the copy on their phones.
- AI requests aren't stored by us. Allowance counts are replaced each day or week; the daily usage records (section 4) are deleted after about 13 months.
- You can also ask us by email to delete your account or any of your data: how to delete your account or data.
8. Your rights
You can ask us for a copy of your data, to correct it or to delete it, by writing to hello@younes.app from the email of your Google account. We answer within 30 days. Depending on where you live, you may also complain to your data protection authority.
9. Children
SpendWise is not made for children under 13 and we don't knowingly collect their data. If you think a child has given us data, write to us and we'll delete it.
10. Changes
If this policy changes, we'll update it here and change the date at the top. For important changes we'll also tell you in the app.