Privacy policy
Effective: 1 Jan 2025
Version: 2.0
Applies to: Spend mobile app & services
Spend helps you record and manage your personal finances and, if you use the business tools, your sales, invoices, customers and expenses. We take the privacy of that information seriously. This policy explains what we collect, why, how we protect it, and the rights you have over it.
1. Who we are
Spend ("Spend", "we", "us", "our") is operated by Anthony Sedjoah, an individual developer based in Ghana. For the purposes of data-protection law, we are the data controller of the personal information described in this policy.
If you have questions or want to exercise your rights, contact us at support@tonisedjoah.com.
2. At a glance
The short version. The rest of this policy explains each point in detail.
| What we collect | Why | Shared with third parties? |
|---|---|---|
| Account info — name, email, profile photo | Create and secure your account, support you | Auth & hosting providers only (below) |
| Financial info you enter — transactions, balances, budgets, bills, goals | Provide the core app; power your dashboards and insights | No. Not sold. Not sent to any third-party AI. |
| Business & customer records — if you use business tools | Run your sales, invoices, inventory and customers | No. Not sold. |
| Usage & device info | Improve the app, fix crashes, keep it secure | Analytics/crash providers (below) |
We do not sell your personal information, and we do not send your financial data to any third-party AI service. Any AI features we introduce will run on our own infrastructure.
3. Information we collect
Account & profile information
When you sign up, we collect your name and email address. If you sign in with Google or Apple, we receive basic profile details (such as your name, email and profile photo) from that provider. You may also set an app-lock PIN or enable biometric lock — your PIN is stored only as a secure hash, and biometric data never leaves your device.
Financial information you enter
Spend is not connected to your bank accounts, cards or wallets, and we do not import data from them. However, the information you enter yourself — transactions, account balances, budgets, bills, subscriptions and savings goals — is stored on our servers so it can sync across your devices and power features like your dashboard and financial-health insights. This is personal financial information and we treat it as sensitive.
Business & customer information
If you use the business tools, we store the records you create — sales, invoices, expenses, inventory and payments — and any customer details you add, such as a customer's name, phone or WhatsApp number, email and address. See Section 8 for your responsibilities regarding this data.
Usage, device & diagnostic information
We collect information about how you use the app (the features you use and actions you take), and basic device and technical information such as your device operating system and app version. If the app crashes, we collect diagnostic crash reports to help us fix problems.
4. How we use your information
- To provide the app — store and sync your data, run your dashboards, budgets, bills and reports.
- To power in-app features — such as Financial Health, which analyses the data you entered to give you results. Today this runs on our own logic, not an AI model; any AI features we add will also run on our own infrastructure (see Section 6).
- To improve Spend — understand which features are used and diagnose problems, using aggregated or de-identified data wherever possible.
- To communicate with you — send account, service and support messages, and notifications you have enabled.
- To keep Spend secure — detect, prevent and investigate fraud, abuse and security incidents.
- To meet legal obligations — comply with applicable law and respond to valid legal requests.
5. Legal bases for processing
Where data-protection law (such as the GDPR or Ghana's Data Protection Act) applies, we rely on the following legal bases:
- Performance of a contract — to provide the app and the features you ask for.
- Consent — for optional things like certain notifications, and any use of your data that requires it. You can withdraw consent at any time.
- Legitimate interests — to secure, maintain and improve Spend, using de-identified or aggregated data where we can, in a way that does not override your rights.
- Legal obligation — where we must process data to comply with the law.
6. AI, analytics & model training
We work to improve Spend over time, and we plan to introduce AI-assisted features. We want to be clear about how your data is — and is not — used for this.
- Today's features are rule-based. Current features such as Financial Health use our own rules and calculations, not an AI or machine-learning model.
- Future AI runs on our own infrastructure. When we introduce AI-assisted features, they will process your data on servers we control. We do not send your data to any third-party AI provider (such as external large-language-model APIs).
- Model training uses de-identified data. If we use data to build or improve our own models and analytics, we first de-identify it — removing direct identifiers (like your name and email) and generalising other details — so the training data is not tied to you as an individual.
- Customer data is excluded. We do not use the third-party customer details you enter in the business tools to train models.
- No automated decisions with legal effect. These features give you insights and suggestions. They do not make automated decisions that produce legal or similarly significant effects about you.
- You can opt out. You can opt out of having your data used to improve our models and analytics by contacting us at support@tonisedjoah.com. Opting out does not affect the core features you use.
7. How we share information
We do not sell your personal information. We share it only in these limited situations:
Service providers (subprocessors)
We use trusted providers to run Spend. They may process your data only on our instructions and to provide their service to us:
| Provider | What they do | Data involved |
|---|---|---|
| Railway | Hosts our backend and stored data | Account & financial data you enter |
| Google Firebase (Google LLC) | Authentication and storage of some app data | Account, sign-in & some stored data |
| Google Crashlytics (Google LLC) | Crash and stability diagnostics | Device & crash data |
| Google & Apple Sign-In | Optional social sign-in | Basic profile you approve |
Other situations
- Legal requests — in response to a valid subpoena, court order or other lawful request.
- Safety & emergencies — where we reasonably believe it is necessary to prevent harm or address an emergency.
- Business transfers — if Spend is involved in a merger, acquisition or sale of assets, your data may transfer as part of that, subject to this policy.
8. Business & customer data
If you use the business tools and enter details about your own customers, please note:
- You are responsible for having a lawful basis to collect and store your customers' information in Spend, and for telling your customers how you use it.
- We act as a processor for that customer data — we store and process it on your behalf so you can run your business, and we do not use it for our own analytics or model training.
- You can update or delete customer records at any time within the app.
9. International data transfers
We and our service providers may store and process your data in countries other than your own — including regions where Railway and Google/Firebase operate, such as the United States and the European Union. Where we transfer data across borders, we take steps to ensure it remains protected in line with this policy and applicable law, such as relying on providers that offer recognised safeguards.
10. How long we keep your data
We keep your personal information for as long as your account is active and as long as needed to provide the app. After that, we delete or de-identify it, unless we must keep it longer to meet a legal obligation, resolve disputes or enforce our agreements.
- Account & financial data: kept while your account is active; deleted within 90 days of account deletion.
- Crash & diagnostic data: retained for up to 90 days.
- De-identified data: because it no longer identifies you, it may be retained to improve Spend.
11. How we protect your information
We take reasonable technical and organisational measures to protect your information against unauthorised access, disclosure, alteration and destruction — including encryption in transit, access controls and an optional app lock (PIN or biometrics). No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly if a problem occurs.
12. Your rights & choices
Depending on where you live, you have some or all of these rights over your personal information:
- Access — get a copy of the data we hold about you.
- Correction — fix data that is wrong or incomplete.
- Deletion — ask us to delete your data, including by deleting your account.
- Portability — receive your data in a portable format.
- Restriction & objection — limit or object to certain processing.
- Withdraw consent — withdraw consent you previously gave, at any time.
You can manage much of your information directly in the app. To exercise any of these rights, contact us at support@tonisedjoah.com. You also have the right to complain to your local data-protection authority — in Ghana, the Data Protection Commission.
13. Deleting your account
You can delete your account at any time from within the app, or by contacting us at support@tonisedjoah.com. When you delete your account, we delete or de-identify your personal and financial data from our systems within 90 days, except where we are required to retain certain information by law.
14. Children
Spend is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe someone under 18 has provided us with personal information, please contact us and we will delete it.
15. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Effective" date above and notify you in the app or by email where appropriate. Your continued use of Spend after an update means you accept the revised policy.
16. Contact us
If you have any questions about this policy or how we handle your information, contact us at support@tonisedjoah.com.
Spend — Privacy Policy v2.0 · Effective 6 October 2026