Privacy policy

The data controller is Vinicius Araujo da Silva, [postal address], 322607680. Contact: support@spacend.app. See also the legal notice.

We do not ask for bank credentials, do not connect to your bank, and do not collect your location, contacts or advertising identifier.

• Contract (Art. 6(1)(b) GDPR): running your account and the features you use, including Spacend Plus.
• Legitimate interests (Art. 6(1)(f)): security, preventing abuse, and fixing errors through technical logs.
• Consent (Art. 6(1)(a)): push notifications, which you can turn off at any time in the app or iPhone Settings.
• Legal obligation (Art. 6(1)(c)): where the law requires us to keep or disclose information.

Financial records can reveal a lot about your life. We use them only to show them back to you, never for profiling, advertising or credit decisions.

When you share a Space, its members can see that Space’s expenses and receipts, including its history, and can record their own. Your income, your personal categories and your other Spaces are never shared. You can leave a Space, remove members or revoke invitations at any time.

We use a small number of providers who process data on our behalf, under data processing agreements:

Where data is transferred outside the European Economic Area, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

• Your account and records: while your account exists.
• Guest accounts that are never used again: deleted after [e.g. 12 months] of inactivity.
• Uploaded statement files: deleted after reading; failed imports are retained for no more than one hour. Transactions you confirm become your records.
• Technical logs: up to [e.g. 30 days].
• Backups: overwritten within [e.g. 30 days] after deletion.
• Where the law requires longer retention (for example tax records of a purchase), only what is required, for as long as required.

In the app, go to Profile → Delete my account. This permanently removes your account, sign-in sessions, every expense you recorded (including in Spaces owned by others), and the Spaces you own with everything inside them. If you signed in with Apple, access to your Apple ID is revoked. Deleting the account does not cancel an Apple subscription; see how to delete your account.

Under the GDPR you have the right to access, correct, delete and export your data (portability), to restrict or object to processing, and to withdraw consent at any time. Most of this you can do directly in the app. For anything else, including a free copy of your data in a portable format, write to support@spacend.app. We answer within one month.

You also have the right to lodge a complaint with a supervisory authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD); you may also contact the authority where you live.

Data is encrypted in transit (HTTPS/TLS). Passwords are hashed, access is limited to what each part of the system needs, and every request is checked against the signed-in account so no one can read another person’s records.

This website sets no cookies, uses no analytics and loads nothing from third parties. Our hosting provider keeps short-lived technical logs (such as IP address) to operate and protect the site. Invitation codes opened on this site are turned into an app link inside your browser and are not sent to us.

Spacend is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

If we change this policy we will update the date above and, when the change is significant, tell you in the app before it takes effect.