Privacy Policy
Last updated: 07 Aug 2026
Applies to: the Spendzie Android app and Spendzie.com
Spendzie ("we", "us") is a personal finance app that turns your bank transaction SMS into an automatic expense tracker, helps you track your cards and loans, and recommends financial products suited to your spending. This policy explains what we collect, how we use it, who we share it with, and how you can delete it. By using Spendzie you agree to this policy.
1. Information we collect
- Onboarding information: mobile number, name, email, date of birth, gender, and employment type.
- Transaction information from SMS (with your explicit consent): financial messages from banks, card issuers, wallets and businesses, and the transaction details parsed from them, such as amount, date, merchant, category, and the last four digits of the account or card. We never receive your full card or account number, CVV, PIN, or any password.
- Application information: when you choose to apply for a financial product through Spendzie, we additionally ask for your PAN and PIN code for eligibility assessment.
- Information you add: manual transactions, corrections, and card or loan details you enter.
- Device and usage information: device model, OS version, app version, an app-generated identifier, and basic usage information such as screens and features used. We do not collect your advertising ID.
2. App permissions
SMS (READ_SMS / RECEIVE_SMS): automatic money management is what Spendzie is built for, and this permission exists solely to power it. With your explicit consent, the app reads transactional SMS sent by banks, card issuers, wallets and other businesses (Android only) to keep your expenses, bills, cards and loans up to date without manual effort. Messages from individuals are never read or stored.
Information obtained through this permission stays within Spendzie: it is not passed to lending partners or any other third party, is never sold or used for advertising, and plays no role in credit underwriting, eligibility scoring, or debt recovery. You can withdraw the permission at any time from Android settings, and the app continues to work with manual entry.
Camera: used only when you choose to capture or upload a document (for example, during an application or KYC step). The camera is never accessed in the background.
Location: used with your permission to support fraud prevention and partner verification requirements when you apply for a financial product. We do not track your location in the background.
We do not access: contacts, call logs, or microphone.
3. Use of information
- Build your expense tracker: transactions, categories, monthly trends, and bill reminders.
- Detect and track your cards, loans and EMIs from transaction messages, and show repayment and loan health insights.
- Show rewards you earned and missed on your cards, and recommend credit cards and loan offers suited to your profile and spending.
- Assess your likely eligibility for products you are interested in, and connect you to the partner's portal to complete your application.
- Sign you in securely, service your account, and respond to your support requests.
- Improve parsing accuracy and fix defects (personal identifiers are masked before any data is used for learning).
- Prevent fraud and abuse, and comply with applicable law.
- Measure ads on Meta (Facebook and Instagram) using page views, signup, and application events. Bank SMS, card numbers, PAN, and phone numbers are not sent to Meta.
4. Disclosure of information
We do not sell, lease, or trade your personal information. We disclose information only as follows:
- Service providers working under contract for us (cloud hosting in India, OTP delivery, merchant logo lookup, AI-assisted message parsing with personal identifiers masked). They may use your data only to provide services to us.
- Credit card and lending partners, when you apply: Spendzie facilitates the application but does not transmit your personal data. Applying redirects you to the issuer's or lender's own portal, where you provide your details directly to them under their privacy policy; we pass only a referral reference. Credit cards are issued and loans are provided by these regulated entities, not by Spendzie.
- Authorities, where required by Indian law or a court order.
Your SMS data and transaction history are never shared with any issuer, lender, or partner. Spendzie earns referral or facilitation fees from partners for successful applications; this is how the app is free, and it never gives any partner access to your SMS or transaction data. Spendzie is not a bank or lender, and recommendations are not financial advice.
5. Security
Data is transmitted over encrypted connections (TLS) and stored on servers located in India with access controls. Card and account numbers are stored only as masked references (last four digits). No method of transmission or storage is completely secure; report any concern to contact [at] spendzie.com. In the event of a data breach we will notify affected users and authorities as required by law.
6. Data retention
| Data category | Purpose | Retention | Deletion trigger |
|---|---|---|---|
| Account and application information (name, mobile, email, DOB, gender, employment type, PAN, PIN code) | Operate your account, sign-in, service communication, eligibility assessment | Lifetime of your account | Deleted within 30 days of your deletion request |
| SMS data (original message text) | Parsing transactions; letting you verify a parsed entry against its source | 12 months | Auto-deleted after 12 months, or earlier on your deletion request |
| Processed transactional data (parsed transactions, cards, loans, insights) | Expense tracking, trends, reward and loan insights | Up to 7 years | Auto-purged at 7 years; earlier on your deletion request, except records law requires us to keep |
| Usage analytics | Understand feature usage, improve the product | 2 years | Auto-purged after 2 years |
| Logs and security records (incl. consent records) | Security, fraud prevention, legal compliance | 1 year | Auto-purged after 1 year |
7. Data deletion
To delete your account and data, email unsubscribe [at] spendzie.com with your name and registered mobile number. Your request will be processed within 30 days, except for records we are legally required to retain. Uninstalling the app removes local data from your phone but does not delete your account; use the email above for that.
8. Consent notice
We process your personal data with your consent, in line with the Digital Personal Data Protection Act, 2023 and rules thereunder. Consent is taken separately for SMS access and for each product application, and each request states its purpose. You may withdraw consent at any time from app settings or by writing to contact [at] spendzie.com, as easily as you gave it; withdrawal does not affect processing already carried out. You have the right to access, correct, and erase your personal data; we respond within 30 days. If your concern is unresolved, you may escalate to the Data Protection Board of India.
Spendzie is intended for users aged 18 and above. We do not knowingly collect data of minors.
9. Changes to this policy
We may update this policy from time to time. The date above reflects the current version. Material changes will be notified in the app.
10. Governing law
This policy is governed by the laws of India, including the Information Technology Act, 2000 and rules made thereunder, the Digital Personal Data Protection Act, 2023 and its rules, and applicable guidelines issued by the Reserve Bank of India for financial products offered through our regulated partners.
11. Contact us
For any questions, requests, or grievances relating to this policy or your personal data, write to contact [at] spendzie.com. We aim to resolve all grievances within 30 days.