Skip to policy details
SpendSense Pro
iPhone privacy

Your money data, in plain words.

This is the privacy policy for the SpendSense Pro iPhone app. Here is what enters the app, when Apple can help, and how you stay in control.

Dhananjay_Tech · Effective 24 October 2026 · The Android app has its own policy.

The short version

  • Your ledger is stored on your iPhone

    iCloud sync is optional and stays off until you turn it on. It uses your own private iCloud database, which we cannot access.

  • You decide when Apple helps

    Apple's Private Cloud Compute is used only for a statement you approve, unclear bank messages if you allow it, and questions you ask in the expense chat. You can switch it off.

  • No account, ads or analytics SDKs

    There is no SpendSense account and no ads, analytics or tracking SDKs. We do not sell your financial activity.

What enters the app

  • SpendSense cannot read your Messages library or other apps' notifications. You choose what reaches it: a bank SMS, or on iOS 27 a bank or payment app notification, that your own Shortcut automation delivers with its sender; a message-history Shortcut you run; text you paste; or an item you share to SpendSense.
  • You can also import a statement file, choose a payment screenshot or photo, or add a transaction yourself.
  • Text in a screenshot or photo is recognized on your iPhone. The app saves the fields you confirm; the image and its recognized text are discarded.
  • iOS notification permission is for SpendSense reminders and alerts. It does not let the app read payment notifications.

Local storage, iCloud sync and backups

  • Saved transactions, categories, account labels, import history, and corrections are kept in app storage on your iPhone. SpendSense marks its ledger to be left out of iCloud device backups. Apple controls the backup process and says this setting cannot guarantee exclusion.
  • iCloud sync is off until you turn it on in More → Backup → iCloud Sync. It then keeps your ledger up to date on your other devices that use the same Apple Account and also have iCloud Sync turned on, using your private iCloud database.
  • Synced data includes transactions (amount, date, merchant, category, note, an account hint such as a card's last digits, transaction reference, and balance), categories and tags, rules and corrections, budgets and goals, account and holder names, investment holdings and import history (including investment statement file names), money owed (names, amounts, and notes), subscriptions, and Spaces. Transactions carry a one-way fingerprint of their source message, not its text. Original messages, statement files, Review items, saved locations, and App Lock and privacy settings are not synced.
  • Each synced record's financial contents are stored in a CloudKit encrypted field in your private iCloud database. Its type, format number, a hashed record name, and CloudKit's own system details such as dates are not encrypted. Dhananjay_Tech cannot access your private iCloud database. iCloud can use Apple's push service to tell your devices when there is something to sync.
  • Turning sync off stops syncing. Data already in iCloud stays there until you delete SpendSense's data from your iCloud storage in iOS Settings. That includes items you deleted in the app while sync was on: they stay in your iCloud database, marked as deleted, so your other devices remove them too.
  • iCloud Drive backups are files saved to a folder you choose, when you tap Back up now or on a daily, weekly, or monthly schedule. They are always encrypted with your backup password, which is kept only in this iPhone's keychain. You can also prepare a backup file to save or share yourself. It is protected with a password you type each time, which is not saved. If you turn off Protect with a password, that file is not encrypted.
  • If you save a backup or export to iCloud Drive or another cloud service, that service keeps a copy under its own settings. SpendSense does not upload the file anywhere else.
  • There is no SpendSense account. Your ledger, messages, and transactions are not sent to a Dhananjay_Tech server. The iPhone app has no advertising, analytics, or crash-reporting SDK.

When Apple Intelligence helps

  • On supported devices, Apple Intelligence on your iPhone can help sort bank messages, prepare transactions from screenshots and pasted text, suggest categories, and search your activity. That processing stays on your iPhone.
  • On an eligible iOS 27 device, SpendSense can also use Apple's Private Cloud Compute (PCC). The setting Offer Apple's Private Cloud Compute in More → Apple Intelligence is on by default. Switch it off to keep all assistance on your iPhone.
  • Statements: PCC may be offered when the built-in statement readers cannot read a file; on-device assistance may be offered too. You approve each file before its extracted text goes to Apple. That text may include account details, balances, and transactions and, for investment statements, holdings, folio numbers, and personal details.
  • Unclear bank messages: only if you allow Send unclear messages. The sender and text of messages waiting in Review are then sent while the app is open, without asking each time.
  • Expense chat: when PCC is offered and available, sending a question also sends your previous question, the spending and top category totals for the month selected on Home, and monthly spending totals for up to 18 months, without another approval. The app does not attach individual transactions, merchants, accounts, or messages, but anything you type in a question is sent. If PCC cannot answer, the chat uses Apple Intelligence on your iPhone when it is on and available.
  • Apple says PCC uses your data only to answer the request and does not store it or make it accessible to Apple. SpendSense checks each answer before using it. Statement rows and message suggestions are shown for your review before anything is saved.

Other services you can choose

  • Location: if you turn on Remember transaction locations and allow location access, SpendSense saves your current location when you save a single transaction while the app is open, whether you add it by hand or from a screenshot, photo, or pasted text, and when you save a location on a transaction. iOS may return a precise location. Locations stay on this iPhone; they are not synced, exported, or included in SpendSense backups. Apple Maps opens only when you tap a saved location.
  • Online exchange-rate updates are off by default. When on, the app requests public exchange rates from the European Central Bank when you open it, at most once a day, and again when you turn the setting on or tap Update rates now. It sends no transaction, merchant, account, or message; the bank can receive normal network information such as your IP address.
  • Mutual fund prices: when you tap Update NAVs from AMFI, the app downloads AMFI's public NAV list. Your holdings are not sent; AMFI can receive normal network information such as your IP address.
  • App Lock uses Face ID, Touch ID, or your passcode through iOS. SpendSense only learns whether unlocking succeeded.
  • Apple runs iCloud, push notifications, Siri, Apple Intelligence, and Private Cloud Compute under Apple's Privacy Policy (apple.com/legal/privacy). If you share analytics with app developers in iOS Settings, Apple may send us crash reports and usage statistics. The European Central Bank, AMFI, our email provider, and our web host handle the network information they receive under their own policies.

Keeping and deleting your data

  • Original messages: by default SpendSense keeps the original text of imported messages, encrypted, until you delete it. In More → Privacy and data → Keep originals you can choose 30 days or Don't keep originals. Even then, text can be kept while a message waits in Review or is needed to match, finish, or undo an import.
  • Messages your Shortcut delivers wait in a protected inbox on your iPhone until SpendSense processes them. A message that fails to import keeps its text and sender so it can be retried. It follows the same setting: with Don't keep originals it is deleted the next time SpendSense opens; with 30 days, after 30 days; with Until I delete them, after 90 days. Deletion happens the next time SpendSense opens.
  • SpendSense marks encrypted originals to be left out of device backups, and their encryption key stays on this iPhone. You can delete them at any time in Privacy and data.
  • Deleted transactions can be recovered for 30 days unless you remove them sooner. A statement you are reviewing is kept as a protected temporary copy, removed after review or during later cleanup.
  • Exports happen only when you ask. A ledger export includes saved transactions, not original messages.
  • A SpendSense backup file can include saved financial data, learning rules, and approved datasets. An imported dataset may contain sample messages or sender labels. Original messages, saved locations, and encryption keys are not included.
  • Delete all data in Privacy and data removes the app's data from this iPhone and stops sync and backups. To remove the iCloud copy and backup files, delete them from your iCloud storage in iOS Settings and in the Files app.
  • You can turn off iCloud Sync, PCC, on-device assistance, local learning, location, and online exchange rates, and revoke saved learning rules. With iCloud Sync on, turning off learning keeps saved rules so your other devices still have them. To stop folder backups and remove the saved password, choose Disconnect backup folder in More → Backup. Turn off your Shortcut automation to stop message delivery; withdraw iOS permissions in Settings.
  • Files you exported or shared stay wherever you saved them until you remove them there. We hold no developer copy of your ledger to delete remotely.

Questions or deletion help?

Email [email protected]. If you email us, we receive your email address and message and use them only to reply. Your email provider and ours process that message, and you can ask us at the same address to delete our copy. Visiting this page gives our web host normal connection information, but it cannot access your iPhone ledger.