# Privacy Policy

Privacy · v1.3
Last updated: September 2026

## Our promise

Spenco AI's business model is simple: you pay us for the app — starting with a free first year on our Starter plan. Either way, we never make money from your data. No ad networks, no data brokers, no lending partners, no analytics resold to third parties.

## What we collect

Spenco processes the bank alert emails you forward to us and any statements you choose to upload. We do not access your inbox, your bank credentials, or any account you haven't explicitly shared. We also store the email address you sign up with, and — if you use the mobile app — a device token so we can send the notifications you ask for.

## How we use it

Forwarded emails and any statements you upload are parsed to extract transaction details (merchant, amount, category, date) and power your insights and forecast dashboard. This parsing uses AI: the email or statement content, and the transactions derived from it, are sent to OpenRouter Inc., our AI processing provider. When you add a note to a transaction, that note is sent to the same provider to help re-categorise it. When you use AI chat, your question and the transaction details needed to answer it are sent to the same provider. OpenRouter routes requests to enterprise model endpoints, typically operated by providers such as Anthropic, Amazon Web Services (Bedrock) and Google Cloud (Vertex AI). All requests are made under Zero Data Retention: no provider stores your data after the request completes, and your data is never used to train AI models. These providers are bound by contract to protections equal to those described in this policy. Your email address is used only to send you product updates.

## Your AI choices

Spenco asks for separate, purpose-specific permission before AI processes forwarded emails, recategorises a transaction, processes an uploaded statement, or answers an AI-chat question. The prompt identifies the data sent, names OpenRouter, and explains the purpose before anything is shared. You can decline and continue using features that do not need that processing. In the mobile app, you can pause email processing from Email Forwarding without deleting your forwarding address or sender whitelist, and manage recategorisation and AI-chat permission under Privacy & Security. Withdrawing permission stops new and already queued content before it is sent to the AI provider.

## What we never do

We never sell your data. We never rent it. We never share it with advertisers, lenders, credit bureaus, or data brokers. We don't run ads inside Spenco, and we have no lending or affiliate partnerships that depend on what you spend. We process your data on secure cloud services solely to run the app for you — that's processing on your behalf, never sharing it for anyone else's purposes.

## How Spenco makes money

The Starter plan — transactions, insights & analytics, the basic dashboard, the automated email parser, and limited AI chat — is free for your first year, then a paid annual plan. Pro (forecast dashboard, net worth tracker, spending planner, statement upload, group expenses, and unlimited AI chat) is a paid upgrade. Subscriptions fund the company so your data never has to.

## Storage and security

Data is encrypted in transit and at rest. The files you send us — forwarded emails and any uploaded statements or attachments — are kept for no more than 30 days: we extract the transaction details into your account, then delete the original file. You can export your full transaction history any time, and you can delete your account whenever you like — we remove your data from our systems shortly after you ask.

## App permissions

On mobile, Spenco asks only for what a feature needs: notifications for your alerts, the microphone for voice input (speech is converted to text on your device — the audio never reaches us), and Face ID or biometrics to lock the app. You can decline or revoke any of these in your device settings.

## Contact

Questions about your data? Email tyrisappsupport@gmail.com and we'll get back to you as soon as we can.