Privacy Policy

1. Who we are

Spenditure is a product of Faza Works LLC, a Nebraska limited liability company (“Faza Works,” “we,” “us,” or “our”). This policy explains what personal information we collect through the Spenditure app at app.getspenditure.com, this website at getspenditure.com, and our emails and integrations (together, the “Service”), and how we use and protect it.

If you have questions, email us at [email protected].

2. Information we collect

Information you give us

• Account details: your name, email address, and password. Passwords are stored only as a one-way hash. If you sign in with Google, we receive your name, email address, and profile photo link from Google.
• Financial information you enter: income, pay frequency and paydays, bills, loans, subscriptions, amounts, due dates, notes, savings goals and contributions, variable spending estimates, budget method, and related settings.
• Payment card labels: if you map bills to cards, we store only the nickname you choose, the card type, and the last four digits. We never ask for or store full card numbers, security codes, or bank account numbers in the app.
• Household information (Family plan): the email address of a partner you invite, and the names of children you add as profiles. Child profiles have no login or email address.
• Support and feedback: messages you send us by email or in the app, bug reports (including the page you were on), and records of any support access you grant.
• Preferences: language, time zone, theme, and reminder settings.

Information from integrations you turn on

• Google Calendar: access tokens that let us create and update a “Spenditure” calendar and its payment events in your Google account.
• Telegram: your Telegram chat ID, so we can send you reminders.
• Push notifications: the push subscription address your browser or device gives us.
• API and MCP tokens: tokens you create so that tools you choose, such as an AI assistant, can access your account.

Information collected automatically

• Technical and security data: IP address, browser and device type, and request logs, used to run the Service, limit abuse (for example, repeated failed sign-in attempts), and keep it secure.
• Error monitoring: when something breaks, we collect error reports and, for a small share of sessions and sessions with errors, a replay of how the page behaved. Replays are set up to mask on-screen text and form inputs.

Payment information

Paid plans are processed by Stripe. Stripe collects your payment details directly; we receive only limited information such as your Stripe customer ID, plan, and subscription status.

3. How we use information

• To provide the Service: calculate paycheck pressure, safe to spend, insights, and reminders, and keep your data in sync across devices.
• To send emails you ask for or need, such as account verification, password resets, payment reminders, receipts, and important notices about your account or these policies.
• To run integrations you turn on.
• To provide support, including viewing your account only when you grant access.
• To process payments and manage your plan.
• To keep the Service secure, prevent fraud and abuse, and fix bugs.
• To improve the Service using aggregated information that doesn't identify you.
• To comply with the law and enforce our Terms of Use.

We don't use your financial information for advertising, and we don't use it to train AI models.

4. How we share information

We do not sell your personal information, and we do not share it for targeted advertising. We share information only in these situations:

Service providers

We use trusted companies to run the Service. They may process your information only to provide services to us.

People and tools you choose

• Household members: on Family, items you mark as shared, and household totals, are visible to the other adult in your household.
• Apps you connect: when you connect an AI assistant or other tool with an API or MCP token, that tool can read and change your Spenditure data, and its use of your data is governed by its own provider's terms and privacy policy.

Legal and business reasons

• If required by law, court order, or to protect the rights, safety, or property of you, us, or others.
• If Faza Works is involved in a merger, sale, or similar transaction, your information may be transferred as part of it. We'll tell you before your information becomes subject to a different privacy policy.

5. Google user data

If you connect Google sign-in or Google Calendar, we use the information we receive from Google only to sign you in and to create and keep your “Spenditure” calendar and its payment events up to date. We don't read, use, or change your other calendars or events.

Spenditure's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell Google user data, use it for advertising, or use it to train AI models, and no person reads it unless you ask us to for support, it's needed for security, or the law requires it.

You can disconnect Google Calendar in the app at any time, and remove Spenditure's access from your Google Account settings.

6. Cookies and local storage

The app uses a small number of essential cookies to keep you signed in and to protect against security attacks, such as cross-site request forgery during sign-in. It also uses your browser's local storage to remember preferences like the theme and dismissed tips.

This website doesn't set cookies. It stores your light or dark mode choice in your browser, and it loads fonts from Google Fonts, which means Google receives your IP address when you visit.

We don't use advertising cookies or third-party ad trackers.

7. How long we keep information

• We keep your account information for as long as your account is open.
• When you delete your account, we delete it and the data in it from our active database right away. Copies may remain in encrypted backups for up to 30 days before they're overwritten.
• Records we're required to keep, such as payment and tax records held by us or Stripe, and copies of emails you sent us, may be kept longer for legal, accounting, or security reasons.

8. How we protect information

We use HTTPS encryption for all traffic, store passwords only as salted hashes, keep your data in a managed database that encrypts data at rest, and use database-level access rules so each account and household can see only its own data. Support staff can view your account only while a time-limited, read-only access grant you created is active, and every view is logged.

No system is perfectly secure. If we learn of a breach that affects your personal information, we'll notify you as required by law.

9. Your choices and rights

• See and edit your data: everything you enter is visible and editable in the app.
• Get a copy: Pro and Family can export bills and subscriptions as CSV. On any plan, email us for a copy of your data.
• Delete your account: in the app, go to Settings and delete your account, or email us.
• Control messages: turn reminders on or off in Settings. We'll still send essential account emails.
• Disconnect integrations: disconnect Google Calendar or Telegram, turn off push notifications, and revoke API or MCP tokens at any time.

Depending on where you live — including California and other U.S. states with consumer privacy laws, and the European Economic Area and United Kingdom — you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain uses, and to not be discriminated against for using these rights. We offer these choices to everyone, wherever you live. To make a request, email [email protected]. We'll verify your request using your account email and respond within 45 days. If we decline your request, you can appeal by replying to our response.

If you're in the EEA or UK, we process your information to perform our contract with you, for our legitimate interests in running and securing the Service, with your consent (for optional integrations), and to meet legal obligations. You can also complain to your local data protection authority.

10. Children

Spenditure accounts are for adults 18 and older. The Service isn't directed to children, and we don't knowingly collect personal information directly from children under 13.

On the Family plan, a parent or guardian can add a child as a profile with only a name and savings goals. The child doesn't log in, and the parent controls and can delete that profile at any time. If you believe a child has given us personal information, email us and we'll delete it.

11. International users

Faza Works is based in the United States, and our service providers may process information in the United States and other countries. Privacy laws there may differ from those where you live. By using the Service, you understand that your information will be processed in these places.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll tell you by email or in the app before they take effect. The “Last updated” date at the top shows when it last changed.

13. Contact us

Faza Works LLC
Omaha, Nebraska, United States
Email: [email protected]