Privacy Policy

Spood (“Spood”, “we”, “us”, or “our”) is a personal envelope-budgeting app for iOS, operated by indie developer Erik Hindr. This Privacy Policy explains what information we collect, how we use it, where it is stored, and the choices you have.

By creating an account or using Spood, you agree to this Privacy Policy. If you do not agree, please do not use the app.

We do not sell your personal data.

Depending on how you use Spood, we may collect the following categories of information:

• Account information: email address and authentication details associated with Sign in with Apple or email/password sign-in (handled through our auth provider).
• Budget and finance data you enter: envelopes/categories, expenses, income, subscriptions, savings goals, budget periods, notes, and related amounts or dates.
• Apple Pay / Wallet logging data you choose to capture in Spood (for example purchase amounts and merchant-related details needed to log an expense). Spood does not process Apple Pay payments on your behalf.
• Preferences: currency, budget period settings, onboarding status, and similar app settings.
• Promo or referral codes you redeem, and related entitlement status.
• Technical information needed to operate the service: device/app identifiers used for authentication and sync, and basic server logs generated while providing the service.

Most information comes directly from you when you create an account, enter budget data, or use optional features such as Apple Pay expense logging.

Authentication may involve Apple (Sign in with Apple) or our backend provider. Purchases and subscriptions are processed by Apple through the App Store; we receive entitlement status needed to unlock paid features, not your full payment card details.

We use your information to:

• Provide, sync, and maintain your budget across your signed-in devices.
• Authenticate your account and keep the service secure.
• Apply promotional or referral access when eligible.
• Operate subscriptions and Pro entitlements purchased through the App Store.
• Improve reliability and the product experience (for example fixing bugs and understanding feature usage at a high level).
• Respond to support requests and communicate about the service when needed.

Where data-protection laws such as the GDPR apply, we typically process personal data to perform our contract with you (providing the app and sync), based on our legitimate interests in securing and improving the service, and/or with your consent where required (for example optional features you choose to use). You may withdraw consent where processing is consent-based, without affecting prior lawful processing.

We share data only as needed to run Spood:

• Apple: Sign in with Apple, App Store purchases/subscriptions, and device platform services under Apple’s terms and privacy policy.
• Supabase: cloud authentication and database hosting used to sync your account and budget data. When you are signed in, data is stored with Supabase infrastructure (configured for EU hosting). Access is restricted with row-level security so users can generally only read and write their own records.
• Service providers that help us operate infrastructure, only under appropriate confidentiality and security obligations.
• Legal or safety disclosures if required by law, or to protect users, the service, or our rights.

Budget data may be stored on your device and, when you sign in, synced to our cloud backend. Data in transit is protected with encryption (HTTPS/TLS).

No method of transmission or storage is perfectly secure. We take reasonable technical and organizational measures appropriate to an indie consumer app, including authentication and access controls, but we cannot guarantee absolute security.

If data is processed outside your country, we rely on appropriate safeguards where required by applicable law (for example standard contractual mechanisms offered by providers).

We keep your account and budget data while your account is active and as needed to provide the service. You can delete your account from Settings or Account in the app; this removes your profile and associated budget data from our servers, subject to short-term backups or legal retention if applicable.

Local data remaining on a device after deletion may need to be removed by uninstalling the app or clearing device storage.

Depending on where you live, you may have rights to access, correct, update, export, restrict, object to, or delete personal data, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us at privacy@spood.app. We may need to verify your request before responding.

Spood is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact privacy@spood.app and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. For material changes, we may provide additional notice in the app or by other reasonable means. Continued use after the effective date means you accept the updated policy.

Questions about this Privacy Policy or your data: privacy@spood.app

Spood is operated by Erik Hindr. Website: https://spood.app