Spendlify · a self-hosted personal expense tracker
Privacy Policy
Last updated 8 October 2026
This policy covers Spendlify, the website at spendlify.com and the Spendlify app on Google Play. Spendlify is run by one person, aaron14341, not a company. It follows the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
Who we are
aaron14341 is responsible for your personal information and privacy. For questions or requests, please email us at [email protected].
What we collect
Your account
To help keep your account secure, we collect your username and password. If you enable the app lock, we'll also store a PIN to protect your account.
Your password and PIN are securely encrypted and stored in a way that means they cannot be accessed or viewed in their original form, including by the developer.
We also keep the date the account was made and the date you last changed your username.
The information you add
We keep the information you choose to enter, such as transactions (date, amount, payee, category, and note), accounts, categories, budgets, imported spreadsheets and records.
We keep photos you attach to a warranty in our database, show them only to you, and delete them when you delete the warranty, use Reset my data or delete your account.
If you sign in with Google
Your Gmail address, your name, a copy of your profile picture and your Google account number.
Google's sign-in keys are thrown away, never stored.
Other things you choose to give
Your settings, such as theme, text size and dashboard layout.
Invitation codes you make, your sign-up link, and who joined through you.
Bug reports: what you type, a contact if you leave one, your username, the page you were on, phone or desktop, and the time.
Sign-in sessions
A random sign-in token, with the IP address and browser you signed in from.
Visit counts
A visit counter running on our own server (Umami) records which pages are opened, the site you came from, your browser, device, screen size, language and rough location (country, region and city).
It removes search text and transaction numbers from page addresses, does not keep your IP address, sets no cookie, and is never told who you are. If your browser sends “Do Not Track”, nothing is counted.
Server logs
Our server keeps error logs and records when an account is renamed, reset, deleted, or given a role.
These logs do not record the pages you viewed.
What we don't ask for
We do not ask for your phone number.
A normal username-and-password account does not require your real name or email address.
We do not need government ID numbers or other sensitive details, so please don't type them into notes.
What is stored on your device
Your device may store:
A cookie that keeps you signed in
A temporary cookie while signing in with Google
Offline quick-add entries that have not been sent yet
A scrambled copy of your PIN
Your most recent Undo action
When you sign out, these are cleared, except quick-add entries that have not been sent yet. Those stay on your phone until they are sent, so you do not lose them. Cloudflare (see Service providers) may also set a short-lived cookie when it checks whether a visit comes from an automated program.
Why we use your information
We use your information to:
Run Spendlify and keep your data available to you
Sign you in
Show your own financial information
Keep the service secure and working
We use it because you need it for the service you signed up for, because you agreed to it (for optional features such as Google sign-in, the leaderboard and a shared dashboard), or because we need it to keep the service secure (logs and visit counts).
We do not sell your information, use it for advertising, or use it to make automated decisions about you.
Who can see your information
Other users cannot, unless you turn on one of two options on your Account page. The leaderboard shows your username, how many transactions you have entered and a badge for the ones you typed in yourself, counting up to 20 a day (Starter from 100, Pro from 1,000, Elite from 3,000, Apex from 5,000). A shared dashboard shows your spending as shares and charts, with category names but no amounts, payees, accounts or balances, and the same badge beside your name. The badge used to count people who joined through you. If you had already turned on either option, it shows the new badge without asking you again. Turn the option off to hide it.
The developer. The admin screen shows usernames, dates and counts, never your transactions. Only aaron14341 reads bug reports. Because the developer runs the server, they could open the database. They do not go through anyone's data, but you should know it is possible.
Service providers
We use service providers to help run Spendlify:
Hostinger hosts the server and backups.
Cloudflare carries website traffic and can see your IP address, pages you visit, and information sent through the connection, including your password while it is being transmitted.
Google is involved only when you choose Google sign-in.
Their servers may be outside the Philippines. We stay responsible for your information there. We share information with authorities only if the law requires it.
How long we keep your information
We normally keep your information until you delete your account.
Some information is kept for shorter periods:
Undo records: about 1 day
Sign-in sessions: until you sign out or they expire
Deleted account backups: about 2 weeks for our backups and a few weeks for Hostinger's backups
Server logs: until they are overwritten by newer ones, so your username can stay in them for a while
Visit counts are not linked to your account and are kept. If you shared your dashboard, its page address includes your username. If you joined through someone's invitation more than a week before deleting, their count keeps one entry with your account removed from it.
Deleting your account
Go to your Account page and press Delete account at the bottom. It deletes everything at once: every profile with its transactions, accounts, categories, budgets, imports and tool records, warranty photos included, plus your login, PIN, Google link, profile picture, bug reports and invitation codes. It cannot be undone. If you cannot sign in, email [email protected] and we will delete it for you. Deleting your account has the steps.
Reset my data, on the same page, is different. It empties one profile and keeps your account.
How we protect your information
We use:
HTTPS to encrypt connections
One-way encryption for passwords and PINs
Account-level access controls so users can only access their own data
Optional PIN protection
Daily database backups
If a data breach puts your information at risk, we will tell you and the National Privacy Commission within 72 hours, as the law requires.
Your rights
Under the Philippine Data Privacy Act, you have the right to: