Privacy policy

Updated 18 October 2026 · Spendloop by Maksym Bondarenko (MXWM)

Spendloop tracks subscriptions and renewal reminders. It does not connect to your bank or cancel subscriptions with their providers.

Account and saved records

We use Google Firebase for authentication and cloud storage. This includes your account identifier, Google profile details when you connect Google, subscriptions, prices, currencies, dates, categories, reminders, notes and optional card last four digits. Using the app without Google sign-in can still create an anonymous Firebase account. Never enter a full card number or password in notes.

Optional subscription detection

With your consent and Android notification access, Spendloop checks notification titles and text on your phone, including when the app is closed. Relevant billing text can contain financial information. Relevant text, the sending app, your categories, currency and language are sent through our Firebase backend to Google Gemini to suggest subscriptions, trials or cancellations. You review suggestions before adding, changing or removing a record.

We do not have access to your email inbox. An email must produce a phone notification, or you must share its text with Spendloop. Website changes alone are not visible to the listener. You can turn detection off in Settings and revoke notification access in Android settings.

Screenshot import

Text recognition runs on your phone. Selected screenshot images are not uploaded by Spendloop. The recognized text is sent to Firebase and Google Gemini to structure subscription details. Crop unrelated information before importing. Imported results require your review.

Payments and reminders

Google Play handles payments. To verify Pro, our backend processes the purchase token, product and order identifiers and purchase status. We do not receive your full payment-card details. Google Play keeps its own transaction records under its policies. Firebase Cloud Messaging uses a device token and your time zone to deliver reminders; notification contents may appear on the lock screen according to your Android settings.

Diagnostics and other services

Optional cloud detection logs are off by default. If enabled, notification content and classification details are encrypted on your device before upload; the decryption key stays on your device unless you choose to use it in the support log viewer. Operational logs help investigate errors and abuse. The updated backend excludes account identifiers and receipt contents from external operational alerts.

Exchange-rate requests use open.er-api.com. Missing service logos may be requested from icon.horse or Google favicon services; these services receive the requested domain and normal network metadata. Firebase, Google Play and Gemini process information under their applicable terms. We do not sell your data or use it for advertising.

Security and retention

Cloud requests use HTTPS. Firebase controls access to account records. Local records remain on your phone until removed, cleared or the app is uninstalled. In the updated Android detection pipeline, relevant notification text awaiting analysis is encrypted locally, limited to 100 candidates and expires after 24 hours. Expired candidates are removed when the queue is next accessed; successful analysis, switching accounts or turning detection off removes queued text earlier. Review suggestions and saved subscriptions follow the normal local-record lifetime. Cloud account records and optional logs remain until you delete them or your account. Operational/security logs and provider-managed records may be kept under the provider’s retention rules. Google may retain AI requests under the applicable Gemini service terms; do not include unrelated sensitive information.

Delete your data

Use Settings → Delete account & data, or request deletion without the app. The updated deletion process removes cloud records, encrypted detection logs, reminder tokens, purchase links and your Firebase identity. Google Play purchase records are managed by Google; deleting Spendloop does not cancel a provider subscription or request a Play refund. We verify ownership for email requests and aim to complete them within 30 days. We cannot remotely erase records on another offline device; clear those through the app or Android app-storage settings.

Contact

For privacy questions, access or deletion requests, contact maxwhyam@gmail.com.