Last updated: November 26, 2025
‍

This privacy notice for Spendify Money LLC ("Spendify," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you: Visit our website at spendify.money or any website of ours that links to this privacy notice, download and use our mobile application (Spendify), or engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@spendify.money.

SUMMARY OF KEY POINTS

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Spendify and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We process sensitive personal information including financial data. We require your consent before processing any sensitive personal data.

Do we receive any information from third parties? We receive financial information from third-party services like Plaid when you connect your bank accounts.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific categories of third parties.

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us at support@spendify.money. We will consider and act upon any request in accordance with applicable data protection laws.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

Categories of Personal Information (CCPA): Identifiers (names, email addresses, phone numbers, usernames, unique personal identifiers, IP addresses), Financial Information (bank account information, credit card information, loan details, debt information, account balances, transaction history, payment information), Internet or Network Activity (browsing history, search history, information on interactions with our Services), Geolocation Data (general location information based on IP address), Professional or Employment Information (if provided voluntarily), and Inferences (preferences, characteristics, behaviors drawn from the information above to provide personalized services).

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: financial data (bank account information, credit card information, loan details), transaction history, account balances, debt information (amounts, interest rates, payment schedules), credit card information, and budget and spending patterns.

Social Media Login Data. We may provide you with the option to register and log in to our Services using a Google account. If you choose to register in this way, we will collect the information described in the section called "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.

Mobile Application Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information, system configuration information, device and application identification numbers, browser type and version, hardware model, Internet service provider and/or mobile carrier, and Internet Protocol (IP) address.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information.

Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes: Log and Usage Data (service-related, diagnostic, usage, and performance information our servers automatically collect), Device Data (information about your computer, phone, tablet, or other device), and Location Data (information about your device's location, which can be either precise or imprecise).

Information collected through Plaid

When you connect your financial accounts to Spendify, we use Plaid Inc. to gather your financial data from your financial institution. By using our Services, you grant Spendify and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from your relevant financial institution. The information we collect through Plaid includes: account balances (checking, savings, credit cards, loans), transaction history, account details (account numbers, routing numbers), interest rates, credit limits, payment due dates, and loan and debt information.

Sources of Personal Information

We collect personal information from the following sources: Directly from you (when you create an account, use our Services, contact customer support, or subscribe to our newsletter), Automatically from your device (usage data and analytics, device information, log files), From third-party services (Plaid for financial account data, Google if you use Google sign-in, payment processors for transaction information), and From public sources (publicly available information when necessary for fraud prevention).

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including: To facilitate account creation and authentication and otherwise manage user accounts. To deliver and facilitate delivery of services to the user. To provide debt payoff planning and optimization by processing your financial information to calculate optimal debt payoff strategies, project debt-free dates, and provide personalized recommendations. To enable budgeting and financial insights by processing transaction data to categorize spending, track budgets, and provide AI-powered financial insights.

We also process your information: To respond to user inquiries and offer support. To send administrative information to you about our products and services, changes to our terms and policies, and other similar information. To request feedback about your use of our Services. To send you marketing and promotional communications (if this is in accordance with your marketing preferences). To protect our Services as part of our efforts to keep them safe and secure, including fraud monitoring and prevention. To identify usage trends to better understand how our Services are being used so we can improve them. To determine the effectiveness of our marketing campaigns. To save or protect an individual's vital interest.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK: The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. We may rely on the following legal bases: Consent (we may process your information if you have given us permission), Performance of a Contract (we may process your personal information when necessary to fulfill our contractual obligations), Legitimate Interests (we may process your information when reasonably necessary to achieve our legitimate business interests), Legal Obligations (we may process your information where necessary for compliance), and Vital Interests (we may process your information where necessary to protect vital interests).

If you are located in Canada: We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share information in specific situations described in this section and/or with the following categories of third parties. Vendors, Consultants, and Other Third-Party Service Providers: We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work.

The categories of third parties we may share personal information with include: Data Storage Service Providers (AWS), Financial Services Tools (Plaid for bank connectivity ), Data Analytics Services (PostHog), Subscription Management and Payment Processors (RevenueCat), Communication & Collaboration Tools, Cloud Computing Services, Performance Monitoring Tools, User Account Registration & Authentication Services (Google, Apple), and Email and Marketing Services (Loops). By using our Services and agreeing to our Terms of Service, you also agree to the terms of service and privacy policies of these third-party service providers. We encourage you to review their policies.‍

We also may need to share your personal information in the following situations: Business Transfers (we may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company), and Legal Obligations (we may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process).

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

Our Services offer you the ability to register and log in using a Google account or Apple ID. Where you choose to do this, we will receive certain information about you from your account. The information we receive may include your name, email address, and profile picture. We will use the information we receive only for the purposes that are described in this privacy notice or that are otherwise made clear to you on the relevant Services.

7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Google API Services User Data Disclosure

Our servers are located in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information, in the United States and other countries.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal information only as long as necessary for the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law.

Specific Retention Periods: Account Information (name, email, phone) is retained while your account is active, plus 90 days after account deletion. Financial Account Data (via Plaid) is retained while your account is active, plus 90 days after account deletion. Transaction History is retained for 3 years from the date of transaction, or while your account is active (whichever is longer). Debt Information is retained while your account is active, plus 90 days after account deletion. Budget and Spending Data is retained for 2 years from the date of entry, or while your account is active (whichever is longer).

Communications Records (support emails, chat logs) are retained for 2 years from the date of communication. Usage and Log Data is retained for 1 year from the date of collection. Marketing Communications Preferences are retained until you opt out, plus 30 days. Legal Compliance Records are retained for 7 years as required by law.

After Retention Period: When we no longer have a legitimate business need to process your personal information, we will either delete or anonymize such information. If deletion is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.

Your Right to Request Deletion: You may request deletion of your personal information at any time by contacting support@spendify.money. We will honor your request within the timeframes required by applicable law.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. Our security measures include: Bank-level encryption (AES-256) for data at rest, TLS 1.3 encryption for data in transit, Secure authentication with JWT tokens, Regular security audits and monitoring, and Restricted access to personal information.

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

10. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly solicit data from or market to individuals under 18 years of age. By using the Services, you represent that you are at least 18 years old. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include the right to: Request access and obtain a copy of your personal information, Request rectification or erasure, Restrict the processing of your personal information, Data portability, and Object to the processing of your personal information. You can make such a request by contacting us at support@spendify.money.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Opting out of marketing: You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in the emails that we send. Account Information: If you would at any time like to review or change the information in your account or terminate your account, you can contact us using the contact information provided.

12. DO NOT SELL OR SHARE MY PERSONAL INFORMATION

Spendify does not sell your personal information in the traditional sense. We do not exchange your data for money with third parties. However, under California law, sharing data for certain advertising purposes may be considered a "sale" or "share." If we ever engage in activities that California law considers selling or sharing, you have the right to opt out.

How to Opt Out: You can opt out of any potential sale or sharing of your personal information by: Contacting us directly at support@spendify.money with subject line "Do Not Sell My Personal Information", Global Privacy Control (GPC) as we honor the Global Privacy Control signal from your browser, and Do-Not-Track (DNT) as we honor Do-Not-Track signals from your browser. We will process your opt-out request within 15 business days.

Limit Use of My Sensitive Personal Information: Because we collect sensitive personal information (financial data), you have the right to limit how we use and disclose it. We only use your sensitive personal information to: Provide the Services you requested, Ensure security and prevent fraud, and Comply with legal obligations. To limit the use of your sensitive personal information beyond these purposes, contact us at support@spendify.money with subject line "Limit Use of Sensitive Personal Information."

13. STATE-SPECIFIC PRIVACY RIGHTS

California Residents (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including: Right to Know (you have the right to request the categories and specific pieces of personal information we collect, the sources, the business purposes, and the third parties we share with), Right to Delete (you have the right to request deletion of your personal information, subject to certain exceptions), Right to Correct (you have the right to request correction of inaccurate personal information), Right to Opt-Out (you have the right to opt out of the sale or sharing of your personal information), Right to Limit Use of Sensitive Personal Information (you have the right to limit our use and disclosure of your sensitive personal information), and Right to Non-Discrimination (we will not discriminate against you for exercising any of your CCPA/CPRA rights).

How to Exercise Your California Rights: Make a Request by emailing support@spendify.money with Subject Line "California Privacy Rights Request" and include your name, email address associated with your account, and specific right you wish to exercise.

Verification Process: To protect your privacy, we must verify your identity before processing your request. We may ask you to provide your email address and phone number associated with your account, confirm recent account activity, and answer security questions. We will only use information you provide for verification purposes and will not retain it longer than necessary.

Authorized Agents: You may designate an authorized agent to make a request on your behalf. The authorized agent must provide written authorization signed by you, verify their own identity, and provide proof of their authority to act on your behalf.

Response Timeframes: We will respond to verified requests within 45 days. If we need additional time (up to 90 days total), we will notify you of the reason and extension period. Appeals: If we deny your request, you have the right to appeal our decision. Contact us at support@spendify.money with subject line "California Privacy Rights Appeal" to initiate the appeals process.

Virginia, Colorado, Connecticut, Utah

Residents of these states have the right to confirm whether we process their personal data, access their personal data, correct inaccuracies, delete their personal data, obtain a copy of their personal data, and opt-out of the processing of their personal data for targeted advertising, sale, or profiling. Requests will be responded to within 45 days.

Other States

Similar rights apply to residents of Iowa, Indiana, Tennessee, Montana, Florida, Texas, Oregon, Delaware, New Hampshire, New Jersey, and Kentucky in accordance with their respective state privacy laws.

14. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at support@spendify.money or by post to:

Spendify Money LLC, 1301 N Broadway Ste 32409, Los Angeles, CA 90012, United States

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please contact us at support@spendify.money.

This privacy policy is effective as of November 26, 2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.