Your data and how OurSpend handles it

This page explains what information OurSpend uses, why it is used, how sync and sharing work, and the choices you have.

Updated: October 1, 2026 Contact: getourspend@gmail.com

Information we use

Account information such as your Apple sign-in or Google sign-in identity and Firebase user ID used to access your account.
Profile information you choose to add, such as your display name and optional profile or household photo.
Financial records you choose to add, such as expenses, incomes, recurring plans, categories, cards, bank accounts, budgets, savings goals, and household data.
Receipts, bill scans, pasted SMS content, and voice input when you use those optional quick-entry features.
Device permission state and local app settings needed for features such as App Lock, widgets, shortcuts, notifications, and financial-cycle preferences.
Basic app diagnostics and product analytics used to improve reliability and feature quality.
When you share a support report, your description, app version, device type, system version, time and support references are included. You choose whether to include a screenshot and recent diagnostics. Review your description and screenshot for personal information before sharing.
Recent support diagnostics are limited to 100 local events from the last 3 days, using operation names, times, durations and sanitized error codes, not financial record contents or copied messages. Local diagnostic history and support identity reset when the signed-in account changes. Release builds also send sanitized reliability events and pseudonymous support identifiers through our crash-reporting service.

To save and sync your account, household, and financial records across devices.
To power features such as reminders, widgets, recurring tracking, budgets, insights, merchant memory, and category suggestions.
To process optional quick-entry features such as receipt scanning, voice entry, and pasted transaction messages.
To restore account access and sync app data across signed-in devices where available.
To detect crashes, troubleshoot issues, understand feature quality, and keep the service reliable.

Household mode supports solo use or sharing with invited household members.
In household mode, shared financial records are intended to be visible to members of that household.

OurSpend offers optional Premium auto-renewable subscriptions. Apple processes payments, renewals, refunds, and subscription management through the Apple Account used for purchase.
OurSpend receives subscription status information needed to enable or remove Premium access for the signed-in OurSpend account.
OurSpend does not receive or store your Apple Account password or full payment card details through the app.
You can manage or cancel a subscription from Apple Account subscription settings. Existing saved app data remains available according to the Terms of Use.

Camera is used to scan bills and receipts.
Photos is used when you import bill images, update profile and household photos, or choose an optional screenshot for a support report.
Microphone and Speech Recognition are used for voice entry features.
Notifications is used for reminders and spending alerts.
Face ID can be used for app lock where enabled.
Siri, Search, Background App Refresh, and Paste support shortcuts, widgets, and quick-entry features where available.

OurSpend uses Firebase Authentication, Firestore and Storage security rules, and device-level protections to reduce unnecessary exposure of sensitive financial information.
Some sensitive budget and household fields are stored in encrypted form where supported by the current app architecture.
No system is perfect, but the app is designed to reduce unnecessary exposure of sensitive financial information.
You are responsible for protecting access to your device and sign-in methods.

Your active financial records are retained while your account or household remains active so the app can sync and display your history.
Deleted expenses, incomes, recurring items, goals, cards, and categories may remain in Recently Deleted for up to 30 days before permanent deletion.
You can permanently delete supported Recently Deleted items sooner from inside the app.
If you delete your account, solo data is deleted. In household mode, deletion depends on your role: a non-admin can remove their own membership, while an admin with other members must transfer admin access before deleting the account.

You can edit or delete many records directly in the app.
You can export a spreadsheet-friendly copy of your data from Settings where available.
You can revoke permissions in iOS Settings at any time.
You can request help with account deletion or privacy-related questions by contacting getourspend@gmail.com.