Spendik Logo Spendik Privacy ← Back to Home

Privacy Policy

Last updated: September 6, 2026

1. Introduction

Spendik ("we", "our", or "us") is dedicated to protecting your personal and financial privacy. This Privacy Policy describes how data is collected, processed locally, synchronized, and safeguarded across the Spendik Android application and web endpoints.

2. Data We Collect & Process

  • Account Credentials: Email address and unique Firebase Authentication user ID (UID). Guest users access local device storage until account creation.
  • Financial & Transaction Records: Expense entries, income logs, transaction notes, merchant names, custom categories, transaction drafts, inter-wallet transfers, and budget targets.
  • Multi-Wallet & Savings Data: Wallet balances (Cash, Digital Wallets, Credit/Debit Cards, and Bank accounts), debt/loan records (money owed or lent), savings goals, priority tiers, and deposit logs.
  • Masked Account Suffixes: Truncated, non-sensitive account identifiers (the last 2 to 4 digits, e.g., *1234) entered by you or detected in alerts solely to match transactions to your designated wallet. Spendik never collects or stores full bank account numbers, full credit/debit card numbers, CVVs, passwords, or banking login credentials.
  • Voice Audio & Natural Text Input: Spoken audio and typed inputs sent to Spendik AI Assistant are processed ephemerally to interpret transaction intent (logging expenses, recording transfers, creating goals, or querying spending summaries).
  • Financial Notification Alerts (Optional): If you explicitly enable Automatic Notification Tracking, the app inspects incoming transaction alert notifications on-device to auto-fill expense drafts.

3. Automated Notification Listener & Sensitive Data Filtering

When you enable Automatic Notification Tracking, Spendik utilizes the Android Notification Listener Service (BIND_NOTIFICATION_LISTENER_SERVICE) under strict privacy safeguards:

  • User-Whitelisted Apps Only: Spendik only inspects notifications from financial and banking apps that you explicitly select. Notifications from unselected apps or personal messaging platforms are completely ignored.
  • 100% On-Device Processing: Notification parsing occurs entirely on your local device. Raw notification texts are never sent to external servers or third-party analytics.
  • Instant OTP & Sensitive Code Discard: Our built-in security filter immediately drops and discards any notification containing One-Time Passwords (OTPs), two-factor authentication (2FA) codes, security tokens, or personal messages. These messages are never stored, logged, or synced.
  • User Verification: Parsed notification transactions are created as editable drafts or records that you can review, modify, or delete at any time.

4. How Your Data Is Used

Collected data is used strictly to deliver Spendik core features:

  • Converting voice and text input into structured transaction entries via our Smart AI Engine.
  • Auto-detecting transaction drafts from whitelisted financial notifications with instant draft reminder alerts.
  • Synchronizing encrypted data securely across your devices using Cloud Firestore and local SQLite database (Room).
  • Providing budget threshold alerts, savings goal pacing calculations, and debt repayment reminders.

5. Artificial Intelligence Processing

Spendik AI Assistant uses Gemini 2.5 Flash / Vertex AI backend models to parse natural language inputs into structured transaction parameters. Data sent to AI models is strictly used for fulfilling your immediate app request. Your data is not sold to third parties, used for training public models, or utilized for advertising.

6. Data Retention & Deletion

Your financial records remain stored in your encrypted Cloud Firestore account while active. You retain full ownership of your data and can delete individual entries or request complete account deletion anytime in-app via Settings → Account or through our Account Deletion Page.

7. Security Measures

All client-server communications are protected with TLS/SSL encryption, Firebase App Check attestation, biometric/PIN app lockout protection, and Cloud Firestore security rules.

8. Contact Information

For privacy inquiries or assistance, reach out to our team at support@spendik-fb8a4.web.app or visit our Support Page.