We understand that trusting an app with your financial information is a big deal. That's why security isn't an afterthought at Spendify — it's built into every layer of the product. Here's how we keep your data safe.

All data transmitted between your device and Spendify's servers is protected with TLS (Transport Layer Security) encryption. This means your information is encrypted in transit, making it unreadable to anyone who might try to intercept it.

Your data is also encrypted at rest on our servers, adding another layer of protection even in the unlikely event of unauthorized access.

When you connect a bank account through Plaid, your login credentials go directly to Plaid — Spendify never sees, handles, or stores your bank username or password. We only receive the financial data (transactions, balances) needed to help you manage your money.

If you connect accounts via Apple FinanceKit on iOS, the data flows directly from your device. No bank credentials are involved at all.

Push notifications are designed with your privacy in mind. We never include sensitive details — like dollar amounts, account names, or merchant names — in notification previews that appear on your lock screen. You'll see a general alert, and the details are only visible once you open the app and are securely authenticated.

Spendify uses email verification codes instead of passwords. Each code is single-use and expires quickly, which eliminates the risks associated with weak, reused, or stolen passwords. You can also enable biometric unlock (Face ID, Touch ID, or fingerprint) for fast, secure access.

We follow the principle of collecting only the data we need to provide our service. Your financial data is used to show you your spending, budgets, and insights — nothing more. We don't sell your data to third parties.

Security is an ongoing effort. We regularly review and update our security practices to stay ahead of emerging threats and ensure your data remains protected.