Effective July 25, 2026
Spendoff is an expense-tracking app run by Spendoff. This page explains what we collect, who can see it, and what you control. Questions? Email support@spendoff.us.
Your account: an email address, a display name, your timezone, your base currency, and an account ID we generate for you.
What you log: expenses — an amount, a currency, a category, a date, and an optional note. That's the whole list.
Spendoff signs you in with passkeys or one-time email codes and magic links. A passkey is a public-key credential — we never store a password, because there isn't one.
On the web, your session lives in a first-party cookie. In the mobile app, a session token is kept in your device's secure storage (iOS Keychain / Android Keystore).
Battles are shared by design: the battle's name, who's in it, and each player's monthly standings totals are visible to the other players in that battle.
Your expense history is shared with a battle only if you explicitly opt in — and even then, shared history never includes your notes. Notes are never visible to anyone but you.
Notifications are optional. If you turn them on, we store a push token and your device platform so we can deliver reminders and battle notifications, relayed through Expo's push service and Apple or Google. Turning notifications off stops this, and the token is removed when you sign out.
The web app uses PostHog for pageview and feature-usage analytics. Profiles are created only for signed-in users, linked to your account ID, and used only to improve Spendoff. The mobile app contains no analytics SDK at all.
We don't run ads, we don't sell your data, and we don't track you across other sites or apps.
Spendoff runs on Cloudflare, which hosts the application and its databases. We also use an email delivery provider to send sign-in codes and magic links, PostHog for web analytics, and Expo, Apple, and Google to deliver push notifications.
The app also keeps an offline replica of your data on your own device, so it works without a connection.
You can delete your account any time in the app under Profile → Danger zone. That deletes your data from our servers and wipes the local replica on that device. You can also email support@spendoff.us and we'll do it for you.
Spendoff is not directed at children under 13.
If this policy changes, we'll post the update on this page with a new effective date.
Anything unclear, or a request we haven't covered? Email support@spendoff.us.