Unspend helps you keep track of the subscriptions you and your family pay for. This policy explains what the app collects, where it is stored, who can see it, and what control you have over it.
The short version
- Unspend never connects to your bank or card. You add your subscriptions yourself.
- You sign in with your email. Your subscriptions are saved to your account on our servers, so they come back when you change phones. Only you can see them.
- The free version shows ads from Google. They are never personalised, and Google is never told what is in your list.
- We do not sell your data. You can delete your account and everything in it at any time from Settings.
What we collect
Your email address. Used to sign you in with a one-time code and to identify your account. We do not send you marketing email.
Your name and avatar. The first and last name and the avatar you choose in your profile.
What you type into the app. The subscriptions you add: names, plans, amounts, currency, billing cycle, renewal dates, free-trial dates, categories, notes, and reminder settings. The people you add to your household: their name, the avatar you choose for them, an email address if you enter one, and any note you write. The payment methods you name: a nickname such as “HDFC Visa” and a short detail such as the last four digits. Who paid and who has settled up. A history of what you saved, changed or removed. Your settings, such as country, currencies, language and reminder timing.
All of this is stored on your phone and saved to your account on our servers. See WHERE YOUR DATA LIVES.
Ad requests, on the free version. Google AdMob receives your IP address (from which an approximate location can be worked out), basic device and app information, and how you interacted with the ad. See ADVERTISING.
Purchase records, if you buy Pro. See PAYING FOR PRO.
What we do not collect
We do not ask for or store your bank details, full card numbers, security codes or banking logins. Unspend is not connected to any bank or payment provider and cannot move money. The detail you type against a payment method is capped at four characters where it stands for digits, so a full card number does not fit.
We do not run analytics or session recording. We do not collect crash reports. We do not track your location, and the app never asks for location permission. We do not read your contacts, photos, files or messages.
Where your data lives
In your account, on our servers. Everything listed under “What you type into the app” is saved to your account in a database hosted by Supabase. That is what lets you sign in on a new phone and find your list there. Each account’s data is locked to that account by the database’s access rules: other users cannot read it.
Be aware of what that copy is and is not. It is sent to our servers over an encrypted connection. It is not encrypted in a way that hides it from us: it is stored as ordinary database records. We do not look at individual accounts’ data except when you ask us to help with a problem, or when the law requires it.
On your phone. The app keeps a copy of the signed-in account’s data on the device, so it opens quickly and works offline. Changes made offline are sent to your account when you are back online. If someone else signs in on the same phone, your copy is removed from the phone first. Signing out sends any unsaved changes to your account and then removes your copy from the phone.
Supabase hosts the database and handles sign-in. Its privacy policy is at supabase.com/privacy.
Backups you make yourself. You can export a backup file from Settings. That file contains everything in your list. The app hands it to your phone’s share sheet and never learns where it goes.
Family sharing (Pro)
If you invite someone to your household, we send one email to the address you enter, saying who invited them. That address is used only for the invitation. Our servers also keep your household’s name, which accounts have joined it, and any unused invite codes. People who join your household do not get access to your subscription list.
Advertising
The free version of Unspend shows occasional full-screen ads, and offers ads you can choose to watch in exchange for adding more subscriptions. Unspend Pro removes all of them.
Who serves them. Google AdMob. What Google collects and how it uses it is described at https://policies.google.com/technologies/partner-sites and https://business.safety.google/privacy/.
They are never personalised. Every ad request is marked non-personalised, for everybody. Google is asked for an ad; it is not asked to build or use a profile of you to choose one. The app does not declare the Android advertising ID permission.
Your subscriptions are never involved. What you track in Unspend is never sent to Google or to any advertiser. Google is told that an ad slot exists in this app; it is never told what is in your list.
Changing your choices. Where the law requires an ongoing way to change consent — the EEA, the UK, Switzerland — Settings shows an “Ad & privacy choices” row that reopens the consent form.
Paying for Pro
Purchases are handled by Google Play, with RevenueCat managing the receipt on our behalf. We never see or store your card details. Google takes the payment and tells us only that Pro is active. RevenueCat receives a purchase record and an identifier for your installation; its privacy policy is at revenuecat.com/privacy.
Email import
This feature is not yet available. When it is, it will work like this, and only if you choose to turn it on.
Unspend can look through your Gmail for subscription receipts and offer to add them. To do that, Google asks you to give the app read-only access to your mailbox. Your phone talks to Google directly: no email ever passes through our servers, and no email is stored, on the phone or anywhere else. Messages are read on your phone, checked for receipts, and discarded. Only the subscriptions you choose to save are kept, the same as if you had typed them in. Access ends when the scan finishes.
Unspend’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Gmail data is never used for advertising, never sold, and never read by people.
How long we keep it
Your data is kept while your account is open, so it is there whenever you sign in.
When you delete a subscription, person or payment method, its details are erased from our servers. A blank marker stays behind so your other phones know it was deleted.
When you delete your account, your account and everything saved in it are erased from our servers straight away. Our hosting provider’s backups roll over and are gone within 30 days.
Deleting your account
Delete your account in the app from Settings → Profile → Delete account. You can also email spolvero.design@gmail.com from the address on your account and ask us to do it. We will confirm once it is done.
Children
Unspend is not directed at children under 13, and we do not knowingly collect data from them.
Security
Everything sent between the app and our servers is encrypted in transit (HTTPS). On our servers, each account’s data can be read only by that account, under the database’s access rules. On your phone, your sign-in details are held in the operating system’s secure storage (the iOS Keychain or Android Keystore). No system is perfectly secure, and we will tell you promptly if a breach affects your data.
Your rights
You can ask us what data we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Write to the address below and we will respond within 30 days.
Changes to this policy
If we change how the app handles data, we will update this page and change the date at the top. Significant changes will be announced in the app.