Privacy policy

This policy covers the MiSpend app for iOS (and, when it's released, Android) and the website at mispend.com.

The app — what it stores

Everything you enter — accounts, amounts, categories, notes, budgets, goals, trips and receipt photos — is stored on your device, in a database that is encrypted at rest. The encryption key is kept in your device's secure storage (the iOS Keychain or Android Keystore), never in plain text.

If you turn on Settings → Require unlock, the app asks your device to check your Face ID, Touch ID or passcode, and hides your figures in the app switcher. The check happens on your device; the app only learns whether it succeeded and never receives your face, fingerprint or passcode.

Backups and Excel reports are files you create and choose where to share. They aren't encrypted, and the app says so when you make one. Keep them somewhere safe. Temporary export files are deleted after sharing.

When you restore a backup, you choose to merge it with what's on your device or replace it. Before replacing, the app saves a backup of your current data first.

The app — permissions

The app asks for a permission only when a feature needs it, and works without any of them:

• Face ID or Touch ID — only if you turn on Require unlock.
• Camera or photos — only when you attach a receipt photo. Photos and files you attach stay on your device with the rest of your data.
• Notifications — only when you turn on a reminder or alert.
• Tracking (iOS) — asked once, for Google's ads. See Google Mobile Ads below.

You can change any of these in your device's settings.

The app — notifications and widgets

Notifications are created and scheduled on your device. There's no push service, and nothing is sent through a server to deliver them. The app can notify you about repeats waiting to be confirmed, budgets nearing or passing their limit, a daily budget summary, and unusual spending. To do this, it checks your data in the background from time to time, on your device. Budget alerts and the daily summary are set in Settings → Notifications, and you can turn notifications off entirely in your device's settings.

Notifications and home-screen widgets can show budget names and amounts, and anyone who can see your screen may see them. You can hide amounts on widgets in the app's settings, and hide notification previews on your lock screen in your device's settings.

The app — third parties

The app has no server of its own. These services receive data from it, each for one purpose:

Exchange-rate providers

open.er-api.com, with Frankfurter as a fallback. When the app opens with a connection, it asks for exchange rates. The request contains only currency codes — never amounts or any other entry. Like any web request, the provider sees your IP address. You can switch refreshing off in Settings → Exchange rates.

Google Mobile Ads and the User Messaging Platform

Google's privacy policy. If you haven't bought Remove ads, the app shows ads from Google. Google's SDK collects device and advertising identifiers, coarse location, ad interactions and diagnostics. In the EEA, the UK and US states with privacy laws, Google's consent form asks for your choices first, and you can reopen them in Settings → Purchases. On iOS, the app asks for tracking permission once; the advertising identifier is used only if you allow it. Ads never receive your financial data, and ad content is capped at a PG rating. Once you own Remove ads, the ads SDK isn't started at all.

RevenueCat

RevenueCat's privacy policy. RevenueCat records your Remove ads purchase. It receives an anonymous app user ID and your store purchase history — no name, email or financial data.

Sentry

Sentry's privacy policy. When the app crashes or something goes wrong, it sends a report so the problem can be fixed: the error's type and stack trace, your device model, OS version and app version, and sampled performance timings. Error messages and anything you typed are stripped before sending. Reports are always sent, aren't linked to you, and are used only to fix the app.

Apple App Store and Google Play

Purchases are processed by the store under its own terms and privacy policy (Apple, Google). We never see your payment details.

The website

mispend.com is hosted on Cloudflare, which processes each request — including your IP address and browser's user agent — to serve and protect the site, and keeps that under its own retention policy. We keep no logs of our own and have turned off Cloudflare's analytics.

The site uses one functional cookie, set only when you pick a language, so the site remembers it. Your theme choice (system, light or dark) is kept in your browser's local storage. There are no analytics, no ads and no tracking on the website, and it loads nothing from other sites.

Your choices and rights

• Get a copy of your data at any time in Settings → Your data, as a backup file or an Excel report.
• Delete your data by deleting the app, and any backups or reports you've made. This can't be undone, so make a backup first if you might want it back.
• Your purchase isn't affected by deleting your data. Restore it with Settings → Purchases → Restore purchases.
• Exchange-rate refreshing can be switched off in Settings → Exchange rates.
• Ad privacy choices are in Settings → Purchases.
• Tracking permission on iOS is in iOS Settings → Privacy & Security → Tracking.

RevenueCat and Sentry records aren't linked to you, and the app doesn't show the anonymous ID they're kept under, so we can't find, export or delete a particular person's record. We'd rather say so plainly than offer a request process we can't fulfil. If you have questions, email us at the address below.

Children

MiSpend isn't directed at children under 13. Ad content is limited to a PG rating.

Changes

When this policy changes, we publish a new dated version. If a change is significant, we'll also point it out in the app or on this site where we reasonably can.

Contact

For any questions about this policy or your data, contact support@mispend.com