Privacy Policy
This policy explains how Dengan Karya ("we", "us", or "our") handles information when you use Spendly.
Information stored on your device
Wallets, transactions, categories, loans, loan payments, report preferences, and other financial records are stored in Spendly's local database on your device. We do not automatically synchronize this database to our servers.
Firebase Authentication
Spendly initially uses Firebase Anonymous Authentication to create a unique identifier without asking you to register. If you choose Google sign-in for backup, the anonymous Firebase identity may be linked to your Google account so quota and purchase identity can be restored across devices. Firebase processes authentication tokens, identifiers, and basic account information under Google's terms and privacy policy.
Google Drive backup
Google Drive backup is optional and manual. With your permission, Spendly requests the drive.appdata scope and stores versioned backup files in the private Google Drive application-data folder. Spendly cannot browse your normal Drive files. Restoring a backup replaces the local financial database after confirmation.
AI receipt processing
When you deliberately submit a receipt, its image and necessary request information are sent to Spendly's backend and an external AI provider for parsing. AI output is presented for review and is not saved as a transaction until you confirm it. Do not submit receipts containing information you do not want processed by these services.
Quota and service records
Our backend stores your Firebase UID, subscription tier, AI usage count, and quota-window timestamps in order to enforce usage limits. Operational logs may temporarily contain request metadata, error details, timestamps, and network information needed for security and reliability.
Purchases and advertising
RevenueCat and Google Play process subscription and lifetime-purchase information. Spendly uses Google AdMob for advertising and Google's User Messaging Platform for consent. Advertising requests are not made when the remove-ads entitlement is active and are made only when consent and applicable rules permit them.
Other network services
Spendly may contact an exchange-rate provider to update cached currency conversion rates. These requests may expose standard network information such as your IP address to that provider.
Sharing and sale
We do not sell your personal financial data. Information is shared only with service providers needed to deliver features you choose, comply with law, protect users and the service, or complete a transaction.
Retention and security
Local records remain until you delete them, clear app data, uninstall the app, or restore another backup. Drive backups remain in your Google account until removed. Backend identity, quota, security, and purchase records are retained as needed to operate the service, prevent abuse, satisfy legal obligations, and resolve transactions. We use reasonable safeguards, but no system can guarantee absolute security.
Your choices and requests
You can decline Google Drive access, disconnect Drive, clear local app data, manage advertising consent, and manage purchases through Google Play. Disconnecting Drive does not delete existing backups. See the account deletion page for deletion instructions.
Children
Spendly is not directed to children under 13. If you believe a child has provided personal information, contact us.
International processing and changes
Service providers may process information outside Indonesia. We may update this policy when Spendly or legal requirements change. The effective date above will be revised when material changes are published.
Contact
Dengan Karya, Indonesia
[email protected]