Introduction
This Privacy Policy explains how AllSpends handles information when you use the product. It is intended to describe the current application in plain English and may be updated as the product changes.
Information we collect
The information we collect depends on how you use AllSpends, including whether you create an account, record transactions, import a statement, use optional product features, or contact us.
Information you provide
You may provide account details, transaction entries, categories, budgets, savings goals, notes, and other information you choose to enter into the product. AllSpends is limited to users age 18 or older. We record your confirmation that you meet this requirement and the versions of the Terms and Privacy Policy you accepted, but we do not ask for or store your date of birth for this eligibility check.
Authentication information
AllSpends uses Supabase for authentication and database services. You may sign in with email credentials or Google OAuth. The current Google sign-in flow is used for account authentication and requests standard identity information needed to sign you in; AllSpends does not use Google OAuth to read Gmail, Google Drive, Calendar, Contacts, or similar Google-service content. Authentication providers process the information required to establish and maintain your session.
Transaction and financial information
Transaction records and related planning information are stored so that AllSpends can present your history, dashboard, budgets, savings, reports, financial-health calculations, recurring-payment analysis, and alerts. Launch transactions come from manual entry, recurring templates, and supported statement imports. Once saved, those records are handled as part of the same account transaction history while source metadata is retained where needed for reconciliation, duplicate handling, and support.
Statement imports
If you choose to import a supported financial statement, AllSpends uses the file only to extract transaction information for your review. PDF and CSV parsing occurs in your browser, and the original statement file is not intentionally uploaded to or stored by AllSpends or Supabase Storage. Only the normalized transactions you approve, a file fingerprint used to detect an exact repeat import, and limited import-history metadata such as filename, file type, account type, currency, counts, and import time are saved. Image-only or scanned PDFs are not processed with OCR. Imported statement files are not sent to OpenAI or used as Mira conversation input.
Future bank connections
Direct bank connections are not part of the current launch version of AllSpends. The launch product uses manual entry, recurring templates, and supported PDF/CSV statement imports. If direct bank connectivity is introduced in a future release, this Privacy Policy will be updated to describe the provider, data received, retention, and user controls before the feature is made available to users.
Usage and technical information
Like most web applications, our hosting and service providers may process limited technical information needed to deliver the service, such as browser, device, request, and diagnostic information. Where enabled, Google Analytics may also process usage information such as page interactions, device or browser information, and approximate traffic-source data to help us understand product usage.
How we use information
We use information to operate and secure the product, authenticate accounts, display the financial tools you request, calculate dashboard and report metrics, detect recurring-payment patterns, provide user-configured and product-generated alerts, reconcile imported records, provide support, understand errors, and improve the service.
AI features
When you actively use Mira, the AllSpends financial assistant, selected financial context is sent to OpenAI to generate a response. The application sends purpose-built summaries such as totals, categories, trends, budgets, savings, recurring information, and the selected date period. It excludes unnecessary account identifiers, raw database IDs, and transaction notes from that context. Original PDF or CSV statement files are not sent to Mira or OpenAI as part of statement import.
Third-party service providers
AllSpends currently relies on Supabase for authentication and database services, OpenAI for the optional Mira assistant, Vercel for hosting and deployment, Stripe for subscription-billing infrastructure where enabled, Google for Google sign-in, analytics, and where enabled advertising services such as AdSense, and Cloudflare Turnstile for anti-abuse verification on authentication and other protected flows. These providers process information according to their roles and applicable terms and privacy notices.
Data retention
We retain account and product information for as long as needed to provide the service, meet operational requirements, resolve disputes, or comply with applicable obligations. You may request account deletion through the product or by contacting us.
Data security
We use reasonable technical and organizational measures appropriate to the service, including the security features of our service providers. No online service can guarantee absolute security, so please use a unique, strong password and protect your account access.
Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, or information about certain processing of your personal information. We will consider requests in accordance with applicable law.
Account deletion
You can initiate account deletion from the Account area of the application. If a renewable paid subscription is active, it must be canceled first. Account deletion removes user-owned AllSpends application data, including transactions, budgets, savings, recurring data, statement-import metadata, Mira data, preferences, legal-acceptance records, and the authentication account, subject to any limited retention required for legal, security, fraud-prevention, tax, payment, or accounting obligations.
Children's privacy
AllSpends is an adults-only service. You must be at least 18 years old to create or use an AllSpends account. We do not knowingly offer the service to children or minors under 18. If we learn that an account is being used by someone under 18, we may restrict or terminate access and take appropriate steps regarding the associated information, subject to applicable law.
Changes to this policy
We may update this policy as the product, providers, or applicable requirements change. We will post the updated version here and revise the last-updated date.
Contact us
For questions or privacy requests, please use the contact channel on our Contact page.