Spend

Privacy

Last changed 1 October 2026

Your spending stays on your phone. Nobody else can read it, us included.

There's no sign-up and no account. We don't know your name, email or phone number.

What Spend keeps, and where

Your entries, categories, budgets, accounts and people On your phone. This is the only copy anyone can read.

A locked backup In our vault, on Cloudflare. Your phone locks it before it leaves, with a key only you have. We can't open it, Cloudflare can't, and neither could anyone who broke in.

Your key On your phone, and in the 12-word recovery code the app shows you. In the iPhone and Android apps it's also kept in iCloud Keychain or Google Block Store, so a new phone can restore by itself. It's never sent to us.

What we never get

Anything you've logged, in a form we can read
Your name, email, phone number or contacts
Analytics, ads or trackers. Spend has none

We have nothing to sell and nobody to share it with.

The vault

The vault stores locked bytes under a random ID, plus a fingerprint of the key that wrote them, so only your phone can change them. Like any website, it sees your internet address when your phone backs up. It uses that for a minute to stop floods of requests, and keeps no logs.

Reading bank emails

If you switch on automatic tracking, Spend connects to your Gmail on your phone and reads only alert emails from banks and card companies. It reads them on the phone. Nothing from your mail is sent to us or anyone else, and you can disconnect at any time.

Spend's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The web version

The web version of Spend, used in the pilot, loads its typeface from Google Fonts, so Google sees that the page was opened. Nothing you log is part of that.

Deleting it

Delete the app and everything on your phone goes with it. The locked backup stays in the vault, where nobody can open it without your 12 words. Before Spend is in the app stores, Settings will have a button that deletes the backup too.

If this changes

This page changes first, and the date at the top moves.

Support

Something not working, or a question? Write to us.

design@haxsh.in

Please don't send screenshots of your spending. We'd rather not see it.

I got a new phone

Install Spend, open Settings, then Backup, and choose to restore from your recovery code. Type the 12 words and everything comes back.

I lost my recovery code

If you still have your phone, Settings, then Backup, shows it again. Write it down somewhere safe.

I lost my phone and the code

Then nobody can bring your entries back, us included. That's the price of nobody else being able to read them, and it's why the app asks you to keep the code.

A bank isn't showing up

Spend can only read alerts your bank emails. Many banks email alerts only once you switch them on. The app shows how for each bank.