Privacy Policy
Effective: April 17, 2025
Privacy policies aren't known for being the most entertaining reading material on the World Wide Web; however, they are important— increasingly so in a world driven by data. Here at Spendlia, we love to entertain, but we take your privacy seriously. Being entrusted with your personal information is a privilege and a responsibility that we don't take lightly.
Similar to how feeling in control of your money can bring great peace of mind, the same philosophy applies to your personal information. That's why our intent is to make Spendlia's Privacy Policy as clear and easy to understand as possible. You should read this entire Privacy Policy, but here are our key points:
- Our money comes from you, not ads in our service. As a consumer-focused subscription business, we rely on your subscriptions to offer our Services.
- Generally, we use the information we collect about you to correspond with you, perform our agreements with you, carry out marketing and advertising activities, and perform our day-to-day business activities and operations.
- We do not sell your Financial Data or any other information you provide through the Product (as both terms are defined below); we do perform typical targeted advertising to introduce more people to the many benefits of Spendlia.
- We honor your requests to exercise your privacy rights; just let us know how we can help—whether accessing or deleting your data or otherwise.
- Your Financial Data is private, and we help you keep it that way.
The following sections constitute a legal document and are written accordingly. We've included a table of contents and summaries at the top of most sections to make it easier to understand, but it's critical that you read the entire document.
Overview
This Privacy Policy (the "Policy") describes the data protection practices of Walurs and its affiliates ("Walurs, Spendlia," "we," "us," or "our"). The Policy applies to our websites and applications that link to this Policy, including our tracker apps and products ("Product"), the spendlia.com website, as well as related online and offline services thereto, and any services, transactions, or engagement you might have with us (collectively, the "Services").
We may change this Policy from time to time. We will make the revised Policy accessible through the Services, so you should review it periodically. You can tell if the Policy has changed since the last time you reviewed it by checking the "Last Modified" date at the top. If we make a material change to this Policy, we will provide you with notice in accordance with legal requirements. By continuing to use the Services, you confirm that you have read and understood the latest version of this Policy.
If you have any questions or concerns about this Policy, please contact us at contact@spendlia.com.
Table of Contents
- Collection, Use, and Disclosure of Information
- Data Retention
- Third-Party Applications and Integrations
- Children's Privacy
- Your Rights and Choices
- Information for California Residents
- Transfers
- Data Breach Procedures
- Data Protection Measures
- Contact Us
- Further Reading
1. Collection, Use, and Disclosure of Information
Summary: The information collected as you correspond with us or use the Services is used to contact you, fulfill our agreements with you, and perform routine business activities and operations, including marketing. The following sections detail the types of information collected, how and why we collect, protect, use, and disclose that information, and, for users in the UK and European Economic Area, our legal bases for processing it.
Categories of Information We Collect
We collect information about you, including information that directly or indirectly identifies you, through your use of Spendlia. We do so:
- When you provide the information by filling out forms or otherwise providing information through the Services;
- When you start tracking, we connect to your financial institutions to retrieve financial transaction data on your behalf, or you provide other financial transaction data within the Product (collectively "Financial Data");
- When you use location services to record transactions;
- Automatically (through cookies and similar tools) when you browse our websites and apps or interact with our marketing communications;
- When you attend events or participate in programs;
- When you correspond with us to receive customer support via email or chat.
This includes:
- Information you provide by filling in forms on the Services, such as information provided when registering to use or subscribing to paid aspects of the Services (e.g., email address), requesting further services, entering a contest or promotion we sponsor, completing surveys, or contacting us. When you use an identity provider—such as Google—to log in to our Services, we also receive the email associated with that account. If you use the Services as part of a Plan (as defined below), we may collect information associated with your use of the Plan (e.g., work email address and the date you joined the Plan).
- Your IP address when you interact with the Services. (Note: IP addresses may be considered personal information under certain privacy laws, particularly in jurisdictions like the EEA and UK.)
- Your address (including postal code) for billing purposes.
- Financial account information when you choose to directly link financial accounts to Spendlia, including account balances, transactions, and holdings.
- Your location when you record a transaction via the Services, including general and precise location (in accordance with your device settings and permissions). Precise location, if enabled, helps the Services remember the location where you record a transaction, so we may suggest that payee when you record another transaction near that same location in the future. "General" location information identifies the city and state where your device is located based on its IP address. Spendlia does not use precise or general geolocation information to show you promotions or advertisements based on your location. Precise geolocation information is considered "sensitive personal information" under certain privacy laws, and we process it in accordance with applicable legal requirements. You can disable precise geolocation tracking on your device.
- Your communications with us (including email addresses different from the one used to establish your account) if you contact us.
- Details of transactions you carry out through the Services, such as records of when you purchase a subscription to Spendlia. You may be required to provide billing information before placing an order.
- Customer support information to provide you with support or service offerings, including responding to and resolving your inquiries and requests via email or text-based chat. When you request assistance from our customer support team with importing third-party financial account data, we may review a limited amount of data from your accounts (e.g., account names and recent transactions) solely to facilitate technical implementation of the account aggregation services. When instructed by you, our customer support representative may use that transaction data on your behalf in interactions with third-party financial account providers to facilitate requested account aggregation within our Services.
- Technical and usage information when you use the Services or interact with our marketing communications, including IP address, geographic location of the device, browser type, browser language, date and time of your request, time(s) of your visit(s), error logs and other system activity, online browsing behavior data, and other information that allows us to analyze how the Services are used.
In some cases, we will inform you when we need certain information to provide specific services (e.g., to access your Spendlia account so our support team can troubleshoot an issue). If you choose not to provide such information, we may not be able to deliver the requested services.
Sources of Information
We collect most of the information referred to above directly from you. However, we may also collect information about you from the following third-party sources:
- Bank data vendors, such as open banking service providers and bank aggregation service providers, which provide access to certain information about your financial accounts. Spendlia will obtain your consent before collecting information from these providers.
- Other users of the Services, for instance, through a referral program (e.g., your name or email address may be provided by another user referring you).
- Advertising networks and partners.
- Analytics providers.
- Social media sites.
Cookies, Online Analytics, and Advertising
We may use third-party analytics services (such as Amplitude and Google Analytics) as well as self-hosted data collection services on our Services to collect and analyze usage information through cookies and similar tools (e.g., pages most read, time spent, search terms, and other engagement data). These tools help us engage in auditing, research, or reporting; assist with fraud prevention; and provide certain features to you.
Usage information is collected to compile statistical data to develop new and improved Services and marketing, identify popular features, and provide content that interests you.
If you receive an email from us, we may use analytics tools, such as tracking pixels, to capture data like when you open our message or click on links or banners it contains. This data helps us gauge the effectiveness of our communications and marketing campaigns.
We also partner with third-party advertisers, ad server companies, and ad networks to promote our Services. If you respond to one of our advertisements and visit or register to use our Services, we or our service providers may provide these third-party advertising companies with identifiers from your device or computer (e.g., IP address or device ID) to help us analyze our user acquisition efforts.
The use of cookies or other tracking technologies placed on devices you use to access our Services by non-affiliated third parties is governed by those third parties' privacy policies. For more information about tailored browser advertising and how to control cookies, contact us at contact@spendlia.com.
We may combine information collected through cookies with other information we collect about you.
Legal Bases for Use of Your Information
The laws of some jurisdictions, including the European Economic Area ("EEA") and the United Kingdom ("UK"), require that companies only process your "Personal Data" (as defined in applicable law, such as the EU General Data Protection Regulation) if they have a "legal basis" (or justifiable need) for doing so. To the extent those laws apply, our legal bases for processing Personal Data are:
- To perform our obligations pursuant to a contract (or pending contract) with you. For example, we process your Personal Data to comply with the Spendlia Terms of Service as part of entering into a contract with you and to honor our commitments in any contracts we have with you.
- For our legitimate interests or those of others. For example, we process your Personal Data to operate our business and Services; identify and fix issues with our Services; provide customer service; secure the Services; learn how customers use the Services; perform internal analytics; improve the Services and users' experiences; conduct marketing; provide information about new products, special offers, or other information we think you may find interesting using the email address you provided (in accordance with applicable law); make and receive payments; comply with legal requirements and defend our legal rights; prevent fraud; engage in a business change (e.g., sale, merger); and know the customer to whom we are providing Services.
- To comply with our legal obligations, such as sharing data with tax authorities.
- With your consent. Where we rely on this basis, you may withdraw your consent at any time as described below.
Disclosure of Information
We disclose data to fulfill the purposes for which you provide it, to enforce or apply our Terms of Service (including billing), and as follows:
- Service Providers. These parties help us provide the Services or perform business functions on our behalf, including hosting, technology, and communication providers; security and fraud prevention consultants; and support and customer service vendors.
- Advertising Partners. These parties help us market our Services, including ad networks and other marketing providers.
- Analytics Partners. These parties provide analytics on web traffic or usage of the Services, including companies that track how users found or were referred to the Services and how users interact with them.
- Payment and Subscription Processors, such as Stripe and Recurly, to process and manage your payments for the Services.
- Financial Data Aggregation Services, but only with your consent. By utilizing these services, you acknowledge that the terms of the respective privacy policies of these providers (e.g., MX, Plaid, TrueLayer) apply to your use of their services. With your consent, we or you will transmit your account credentials to these third-party financial data aggregation services, which use them to link, gather, and maintain your account balances, transactions, and holdings to provide the Services.
- A buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about users of the Services is among the assets transferred. We will notify users of such transfers when possible.
- Other users you authorize. For example, when you use Spendlia Friends (a feature that allows group spending management—see contact@spendlia.com for more details), you authorize us to share spending numbers you own and data encompassed within those spendings with your Group Manager and selected Members of your Spendlia Friends group. Friends of your Spendlia Friends may view certain information about you, including spending numbers you own or have access to, your first name, and email address.
We may also disclose your information:
- To comply with any court order, law, or legal process, including responding to government or regulatory requests.
- To enforce or apply our Terms of Service or terms of sale and other agreements, including for billing and collection purposes.
- If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Spendlia, our customers, or others, including exchanging information with other companies and organizations for fraud protection and credit risk reduction.
- To fulfill the purpose for which you provide it.
- For any other purpose disclosed by us when you provide the information.
- With your consent.
Deidentified and Aggregated Data
We may de-identify and aggregate information collected in a way that it cannot reasonably be linked to you or your device. We may use such de-identified or aggregated data for any purpose (e.g., testing our IT systems, research, data analysis, improving the Services, and developing new products and features) and may disclose it to our service providers. When we de-identify and aggregate non-Financial Data, we may also disclose it to any third parties, including advertisers, promotional partners, and others.
2. Data Retention
Generally, we retain your information as necessary to provide the Services, fulfill the transactions you have requested, and for other essential purposes such as complying with legal obligations, resolving disputes, enforcing our agreements, and preventing fraud or enhancing security. In determining retention periods, we consider the nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, how long an account has been inactive, and applicable legal requirements.
More specifically:
- We retain account data for up to 12 months after your subscription or trial expires unless you delete your account as described below. If you delete your account, we remove your data promptly or within a specified timeframe thereafter.
- After deletion, we may retain your email address to confirm the deletion of associated data.
- Notwithstanding the above, we may retain information as long as necessary to comply with legal and regulatory obligations or in connection with legal proceedings.
You can request deletion of your information at any time by following the steps in the "Your Rights and Choices" section below.
3. Third-Party Applications and Integrations
When you choose to use third-party apps (such as OAuth apps based on our API), plug-ins, or websites that integrate with the Services, they may receive your information and content, including personal data, photos, and activity data. Information collected by these third parties is subject to their terms and policies. Spendlia is not responsible for the terms or policies of third parties, so we urge you to review their privacy and security policies before use.
4. Children's Privacy
The Services are not intended for children under 13 years of age (or 16 for those who habitually reside in the European Economic Area or United Kingdom). No one under these ages may provide personal data to the Services. We do not knowingly collect personal information from children under 13. If you are under 13 (or 16 in the EEA or UK), do not use or provide any information on the Services or through its features, register for the Services, make purchases, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received personal data from a child under 13 (or 16), we will delete that information. If you believe we might have information from or about a child under 13 (or 16), please contact us at contact@spendlia.com.
5. Your Rights and Choices
Summary: All users have certain rights, such as controlling marketing communications and mobile device interactions. Depending on your jurisdiction, you may also have the right to make requests regarding your personal information, including accessing, correcting, or deleting it, and opting out of certain uses. These rights are outlined below, including how to exercise them. If there's any conflict between this section and other areas of this Policy, the portion that most protects your personal information will apply. California residents should see our California Privacy Policy for additional disclosures and rights.
Rights Regarding Your Information
Depending on your jurisdiction, you may have the right to:
- Be informed about the categories of personal information we collect or disclose about you, the sources of such information, the business or commercial purpose for collecting it, and the categories of third parties with whom we disclose it.
- Access and/or receive a copy of certain personal information we hold about you.
- Correct or update personal information we hold about you.
- Delete certain personal information we have about you.
- Receive information about financial incentives we offer, if any.
- Not be discriminated against for exercising your rights, as provided in applicable law.
- Opt out of "sales" of your information and "sharing/processing" for targeted advertising, as described below.
Certain information may be exempt from such requests under applicable law (e.g., data required to provide services or comply with legal obligations, such as fraud prevention records). We will take reasonable steps to verify your identity before responding to a request, which may include verifying your name and email address at a minimum, depending on the sensitivity of the information and the type of request.
You may designate an authorized agent to submit requests on your behalf by providing them with signed, written permission or a power of attorney. We may request this documentation and follow up with you to verify your identity before processing the agent's request.
If we deny your request, we will provide information on how to appeal the decision, if applicable, in our communications with you. To exercise your rights or appeal a decision, email us at contact@spendlia.com.
Marketing Communications
You can unsubscribe from our marketing emails via the unsubscribe link provided in them. It may take some time, consistent with legal obligations, to process your request. Even if you opt out of marketing messages, you will continue to receive administrative messages (e.g., order confirmations, policy updates, or transactional communications).
Mobile Devices
We may send push notifications through our applications. You can opt out by changing the settings on your mobile device. If you no longer wish for us or our service providers to collect your precise GPS location information, you can disable location features on your device through its operating system settings. Note that disabling these features may limit your access to some or all Services, content, and/or features.
Notice of Right to Opt Out of Sales and Sharing for Targeted Advertising
As described in our Cookie Policy, we use cookies and similar technologies from third parties to provide tailored ads about our Services and analyze ad performance. We may share identifiers (e.g., a hashed email address) with third-party platforms to display Spendlia ads to interested audiences and limit ad frequency for subscribers.
While these activities are common for promoting services, certain laws categorize them as "selling" personal information or "sharing/processing" it for targeted advertising—even though we do not exchange information for money. We do not "sell" or "share/process" information you provide through the Product, including Financial Data, for targeted advertising. However, our online advertising targeting prospective users may fall under these broad legal definitions.
To opt out of such disclosures (e.g., via cookie and pixel technology) for purposes considered "sales" or "sharing" for targeted advertising, email us at contact@spendlia.com. You may designate an authorized agent to submit such requests with written permission, as noted above. We do not knowingly sell the personal information of minors under 16 without legally required affirmative authorization.
If your device browser has a legally recognized opt-out preference signal enabled, we will honor it in accordance with applicable law.
Notice of Financial Incentives
We may offer opportunities to receive services or benefits, such as money for participating in surveys, signing up for communications, or similar incentives, which may require providing personal information (e.g., registering for an account and answering surveys). These opportunities could be considered financial incentives under applicable law ("Incentive Programs"). Participation is voluntary, and you agree to the terms of each Incentive Program when you join. You may revoke participation at any time, depending on the program's terms.
6. Information for California Residents
In addition to the rights detailed in the "Your Rights and Choices" section, California residents may have additional rights regarding personal information. If you are a California resident, please read our California Privacy Policy, which supplements this Policy.
7. Transfers
Summary: We operate from Canada. Information from users based elsewhere will be transferred, processed, and stored in Canada.
The Services offered by Spendlia are operated from Canada. If you are located outside Canada and choose to use the Services or provide information to us, you acknowledge and understand that your information will be transferred, processed, and stored in Canada, as it is necessary to provide the Services and perform the Terms of Service.
8. Data Breach Procedures
In the event of a data breach that compromises the security of your personal information, we will take prompt action to investigate and mitigate the breach. We will notify affected users and relevant authorities in accordance with applicable laws and regulations. Our notification will include details about the nature of the breach, the types of information affected, steps we are taking to address it, and recommendations for how you can protect yourself.
9. Data Protection Measures
We take the security of your personal information seriously and implement reasonable technical, administrative, and physical measures to protect it from unauthorized access, use, disclosure, or destruction. These measures include encryption, access controls, secure data storage, and regular security assessments. While we strive to protect your information, no system can be completely secure, and we cannot guarantee absolute security. If you have any concerns about the security of your data, please contact us at contact@spendlia.com.
10. Contact Us
If you have any questions, comments, or requests regarding this Privacy Policy, contact us by email at contact@spendlia.com.
11. Further Reading
For more legal reading, see our Terms of Service. If you need further assistance, email contact@spendlia.com.