Spendlytics Privacy Policy
TL;DR. Spendlytics keeps your ledger on your own device. There is no Spendlytics account and no Spendlytics server — we do not receive, store, or sync your records. The only time data leaves your device is when you use the optional, bring-your-own-key AI receipt recognition, which sends the receipt image (or on-device OCR text) directly to the third-party AI provider you configured. No analytics, no ads, no tracking.
Overview
Spendlytics is a personal expense-tracking app. It is built to keep your financial data on your own device. There is no Spendlytics account, no sign-up, and no Spendlytics server — we do not operate a backend that receives, stores, or syncs your records. The descriptions below match how the app actually works in its current released version.
Data stored on your device
All of your ledger data — transactions, amounts, merchants, notes, categories, accounts, and recurring rules — is stored locally on your device only, using Apple's on-device SwiftData/Core Data storage.
- We do not upload this data to any server we control.
- The app ships with cloud sync (iCloud/CloudKit) disabled; your ledger is not synced off the device by the app.
- We have no ability to read, access, or recover your ledger data. It lives on your device (and in your own device/iCloud backups, which are governed by Apple's policies, not ours).
Camera and photo library
The app may request access to your camera and photo library. These are used only when you choose to scan or import a receipt for the optional premium AI recognition feature. The in-app permission prompts state:
- Camera: "Premium feature: capture a receipt to auto-detect amount and merchant."
- Photo Library: "Premium feature: pick a receipt from your photo library to auto-detect amount and merchant."
Images are used to extract bill fields (amount, merchant, date, category, note). If you do not use the receipt-scan feature, the app does not need or use these permissions.
Premium AI receipt recognition (third-party processing)
The premium "AI recognition" feature is bring-your-own-key (BYOK): it works only after you configure an AI provider and enter your own API key. The app does not include a built-in cloud AI service of ours.
When you use this feature, the app sends data directly from your device to the third-party AI provider endpoint that you configured — not to us. Depending on the app's recognition mode:
- Image mode (default): the receipt or screenshot image you selected is sent to your configured provider.
- OCR text mode (fallback): text extracted from the image on your device using Apple's Vision framework is sent instead of the image.
In both cases the only purpose is to extract structured bill fields (amount, merchant, date, suggested category, an optional note, and a source-type hint). The extracted fields are returned to your device and saved to your local ledger.
- The destination is whichever provider you select. Built-in provider presets include OpenAI, Anthropic, DeepSeek, Moonshot, and Together, plus a Custom option where you supply your own endpoint URL. Your chosen provider's own privacy policy and terms govern how they handle the data you send them.
- All AI requests are sent over HTTPS; the app refuses to send to a non-HTTPS endpoint.
- Your API key is stored in the device's Keychain and is sent only to the provider endpoint you configured, in the request's authorization header. The key is not configured for iCloud Keychain sync by the app.
- We (the developer) do not receive, proxy, store, or log the images, OCR text, API key, or extracted fields on any server.
If you never enable or use this feature, no receipt data, image, or text leaves your device through it.
No tracking, no analytics, no ads
Spendlytics contains no third-party analytics, advertising, attribution, or crash-reporting SDKs (for example: no Firebase, Google Analytics, Sentry, Crashlytics, Amplitude, Mixpanel, AppsFlyer, Segment, or similar). The app does not track you across other apps or websites, does not build an advertising profile, and shows no ads. We do not collect a device identifier for tracking.
In-app diagnostic logs
For troubleshooting the receipt-import flow, the app may write diagnostic log lines on your device (for example, the detected receipt source type, such as "receipt" or "alipay"). These logs stay on your device and are not transmitted to us automatically.
Purchases
The premium tier is sold via Apple's In-App Purchase. Purchase and subscription processing is handled by Apple (StoreKit) under Apple's privacy policy. We do not receive your payment details.
Data retention and deletion
Because your ledger data is stored only on your device:
- It is retained for as long as you keep the app installed (or until you delete individual records inside the app).
- You can delete it at any time by deleting records in the app or by deleting the app, which removes its locally stored data from the device.
- Data you sent to a third-party AI provider is retained and deleted according to that provider's policies, not ours.
Children's privacy (rated 4+)
Spendlytics is rated 4+ and contains no objectionable content. The app does not knowingly collect personal information from children, and it does not include advertising or cross-app tracking. Note that the optional premium AI feature requires an adult to provide a third-party API key and sends data to a third-party service; it is not intended to be set up by children.
Changes to this policy
If this policy changes, we will update the "Last updated" date above and publish the revised version at the same location.
Contact
For privacy questions, contact hi@julineshang.win. Spendlytics is operated as an individual project by the developer reachable at that address.
Spendlytics 隐私政策
太长不看。 Spendlytics 把你的账本保存在你自己的设备上,没有 Spendlytics 账号、也没有我们的服务器 —— 我们不接收、不存储、不同步你的记录。 唯一会让数据离开设备的情形,是你主动使用可选的「自带密钥」AI 小票识别, 它会把小票图片(或设备本地 OCR 文本)直接发送到你自己配置的第三方 AI 服务商。无分析、无广告、无追踪。
概述
Spendlytics 是一款个人记账 App,设计上将你的财务数据保存在你自己的设备上。本 App 没有 Spendlytics 账号、无需注册,也没有我们的服务器 —— 我们不运营任何接收、存储或同步你记录的后端。以下描述与当前已发布版本中 App 的实际行为一致。
保存在你设备上的数据
你的全部账本数据 —— 交易、金额、商家、备注、分类、账户、周期记账规则 —— 都仅保存在你的设备本地,使用 Apple 的设备端 SwiftData / Core Data 存储。
- 我们不会把这些数据上传到任何由我们控制的服务器。
- 本 App 发布版本默认关闭云同步(iCloud / CloudKit);App 不会把你的账本同步到设备之外。
- 我们无法读取、访问或恢复你的账本数据。它保存在你的设备上(以及你自己的设备 / iCloud 备份中,这部分受 Apple 的政策约束,而非我们的政策)。
相机与相册
App 可能会请求访问你的相机和相册。仅当你主动选择扫描或导入小票、用于可选的高级 AI 识别功能时才会用到。App 内的权限弹窗说明为:
- 相机:"高级功能:拍摄小票以自动识别金额和商家。"
- 相册:"高级功能:从相册中选择小票以自动识别金额和商家。"
图片仅用于提取账单字段(金额、商家、日期、分类、备注)。如果你不使用小票扫描功能,App 不需要也不会使用这些权限。
高级 AI 小票识别(第三方处理)
高级版"AI 识别"功能采用自带密钥(BYOK,Bring Your Own Key)模式:只有在你自行配置 AI 服务商并填入你自己的 API 密钥后才能使用。本 App 不包含由我们提供的内置云端 AI 服务。
当你使用该功能时,App 会从你的设备直接将数据发送到你所配置的第三方 AI 服务商接口 —— 而不是发给我们。根据 App 的识别模式:
- 图片模式(默认): 把你选择的小票或截图图片发送到你配置的服务商。
- OCR 文本模式(回退): 改为发送在你设备本地用 Apple Vision 框架从图片中识别出的文本,而不是图片本身。
两种情况下,唯一用途都是提取结构化账单字段(金额、商家、日期、建议分类、可选备注,以及来源类型提示)。提取出的字段会返回到你的设备并保存到本地账本。
- 数据发往哪个服务商由你选择。内置的服务商预设包括 OpenAI、Anthropic、DeepSeek、Moonshot、Together,以及可填写自有接口地址的 Custom(自定义)选项。你所选服务商如何处理你发送的数据,受其自身的隐私政策和条款约束。
- 所有 AI 请求均通过 HTTPS 发送;App 会拒绝向非 HTTPS 接口发送数据。
- 你的 API 密钥保存在设备的钥匙串(Keychain)中,仅在请求的授权头里发送给你配置的服务商接口。App 未将该密钥配置为 iCloud 钥匙串同步。
- 我们(开发者)不会在任何服务器上接收、代理、存储或记录这些图片、OCR 文本、API 密钥或提取出的字段。
如果你从未启用或使用该功能,就不会有任何小票数据、图片或文本经由它离开你的设备。
无追踪、无分析、无广告
Spendlytics 不包含任何第三方分析、广告、归因或崩溃上报 SDK(例如:没有 Firebase、Google Analytics、Sentry、Crashlytics、Amplitude、Mixpanel、AppsFlyer、Segment 等)。本 App 不会跨其他 App 或网站追踪你,不会构建广告画像,也不展示广告。我们不会为追踪目的收集设备标识符。
App 内诊断日志
为排查小票导入流程的问题,App 可能会在你的设备上写入诊断日志(例如识别到的小票来源类型,如 "receipt" 或 "alipay")。这些日志保留在你的设备上,不会自动传输给我们。
购买
高级版通过 Apple 的 App 内购买出售。购买和订阅的处理由 Apple(StoreKit)完成,受 Apple 的隐私政策约束。我们不会收到你的支付信息。
数据保留与删除
由于你的账本数据仅保存在你的设备上:
- 只要你保留 App 安装(或直到你在 App 内删除单条记录),数据就会一直保留。
- 你可以随时通过在 App 内删除记录、或删除 App 来清除数据;删除 App 会移除其在设备上本地保存的数据。
- 你发送给第三方 AI 服务商的数据,按该服务商的政策保留和删除,而非我们的政策。
儿童隐私(分级 4+)
Spendlytics 分级为 4+,不含不当内容。本 App 不会在知情的情况下收集儿童的个人信息,也不包含广告或跨 App 追踪。请注意:可选的高级 AI 功能需要由成年人提供第三方 API 密钥,并会将数据发送给第三方服务,不适合由儿童自行设置。
政策变更
若本政策发生变更,我们将更新上方的"最后更新"日期,并在相同位置发布修订版本。
联系方式
隐私相关问题,请联系 hi@julineshang.win。Spendlytics 由该邮箱可联系到的开发者以个人项目形式运营。