Spend Lens

Effective Date: August 2026

Spend Lens is a personal budgeting app that connects to your bank account(s) so you can see your own spending in one place. This policy explains exactly what happens to your data, because with a finance app, that matters more than most.

1. Everything stays on your device

Every transaction, category, budget figure, and piece of spending advice Spend Lens generates is stored exclusively in local storage on your own device. We do not operate a database, we do not have user accounts, and we never see, collect, or transmit your transaction data to any server of ours.

2. The one exception: connecting your bank

Spend Lens uses Plaid, a regulated financial data network, to securely connect to your bank account(s). When you connect a bank:

• You authenticate directly with your bank via Plaid's secure Link flow - Spend Lens never sees or stores your online banking credentials.
• A minimal server-side relay is required because Plaid's API requires a confidential secret key on every request (not just the initial connection) - this key can never live inside a shipped app, so the relay signs and forwards each Plaid API call (the connection handshake, and each subsequent fetch of your accounts and transactions) on Spend Lens's behalf. The relay is stateless: it does not store, log, or retain any of your transaction or account data after forwarding a request - it exists purely to attach the secret key Plaid requires.
• Once fetched via that relay, your transaction data is stored only locally on your device, as described in section 1.

3. PIN & Face ID

Spend Lens requires a PIN (and optionally Face ID/Touch ID, where supported) to open the app, given the sensitivity of financial data. Your PIN is stored as a salted cryptographic hash in your device's secure hardware-backed storage (Keychain on iOS) - never in plain text, and never leaves your device.

4. No advertising, no tracking

Spend Lens does not display third-party ads and does not integrate any advertising or analytics SDKs. No advertising identifiers are collected.

5. Your Rights & Choices

You can disconnect a bank account at any time from within the app, which removes its stored access token from your device. Deleting the app removes all locally stored data. To fully revoke Spend Lens's access to your bank data, you can also remove the connection directly via your bank's own security/connected-apps settings, or through Plaid's own account portal.

6. Children's Privacy

Spend Lens is a personal finance tool intended for adult use and does not knowingly collect data from children.

7. Contact Us

If you have any questions about this Privacy Policy, please reach out to us:

📧 hello@daryl.in