SpendFoxy Privacy Policy

Effective date: 12 November 2026

SpendFoxy is an expense tracker that keeps your data on your iPhone. There is no account, and we run no server that stores your expenses. This policy explains what leaves your phone and what never does.

Who we are

SpendFoxy is developed by Vusal Ismayilov, an individual developer. Vusal Ismayilov is responsible for the data described here (the “controller” under data protection laws such as the GDPR).

Your expenses stay on your phone

Everything you enter is stored only in the app on your device. That includes amounts, currencies, notes, categories, trips, budgets and settings. We can’t see it, and we never receive it.

  • So that the 14-day Pro preview is given only once, the app stores when it started and how much of it has been used (and nothing else) in your iPhone’s keychain and in your own iCloud key-value storage. We can’t see either, and Erase all data doesn’t reset it.
  • Your iPhone includes the app’s data in its own backups (iCloud Backup or a computer backup), under Apple’s privacy terms.
  • When you use Settings › Data › Back up to a file or Export to spreadsheet, the app creates a file and you choose where it goes (Files, iCloud Drive, AirDrop, email). That file contains your spending, so keep it somewhere private.
  • If you switch on Settings › Data › Back up to iCloud, the app also saves a daily backup file to the SpendFoxy folder in your own iCloud Drive. It uses the Apple Account signed in on your iPhone. We have no access to it.

  • Settings › Data › Erase all data deletes everything the app stored on your phone. It does not delete copies kept elsewhere:

    • backup files you exported;
    • the daily backup copies in iCloud Drive → SpendFoxy;
    • your iPhone’s own iCloud or computer backups.

    To remove the iCloud Drive copies, open the Files app, go to iCloud Drive → SpendFoxy and delete the files. Exported files are deleted wherever you saved them.

What leaves your phone

Exchange rates

To convert amounts into your home currency, the app downloads daily exchange-rate files from the open-source currency-api project, served by jsDelivr and Cloudflare. A request contains only a currency code and a date, never your amounts or anything you typed. As with any web request, those services see your device’s IP address. We don’t receive or store it.

Usage statistics (only if you say yes)

Usage statistics are off until you turn them on. On the last step of setting up the app, SpendFoxy asks once whether to share anonymous usage stats. Nothing is sent unless you choose “Share”. If you choose “Don’t share” or skip the question, they stay off and the analytics service is never started. Nothing collected before your answer is stored and sent later. You can turn them on or off at any time in Settings › Share anonymous usage stats.

If you turn them on, the app sends usage events to PostHog, our analytics provider, which stores them on servers in the European Union (Frankfurt, Germany). Events look like “an expense was saved”, “Insights was opened” or “a trip was created”, sometimes with yes/no facts such as whether the expense was in a foreign currency.

  • Events never contain amounts, notes, places or merchants, category or trip names, balances, or anything you typed. The app is built so that such values can’t be put into an event.
  • Events are tied to a random identifier created by the app on your phone (the “analytics ID”). It isn’t linked to your name, email or Apple Account.
  • IP addresses are not stored, location lookup is switched off, and there is no advertising tracking of any kind.
  • Events are kept for 12 months and then deleted.
  • If you switch sharing off, the app stops sending events straight away and creates a new analytics ID. That way any future events can’t be connected to your earlier ones. Erasing your data in the app keeps your choice.

Deleting your analytics data. In Settings, under Share anonymous usage stats, tap Analytics ID and copy your ID and email it to spendfoxysupport@diaryfromtheroad.com with the subject “Delete analytics data”. We’ll delete the events stored under that ID within 30 days and confirm by email. If you have already switched sharing off, the app shows your previous ID once at that moment so you can copy it. Without the ID we can’t find your events, because they aren’t linked to you.

Legal basis (GDPR): your consent, which you can withdraw at any time.

Card payments (optional)

If you set up the automation in Settings › Faster entry › Card payments, the iPhone Shortcuts app passes the amount and merchant of an Apple Pay payment to SpendFoxy on your phone. It’s processed and stored only on your device.

Purchases

SpendFoxy Pro is sold through the App Store.

  • Apple processes your payment and keeps your purchase record under Apple’s own privacy policy. We never see your payment details.
  • RevenueCat checks your purchases so the app can unlock Pro, including when you tap Restore purchases. RevenueCat receives a random app user ID created by the app and the App Store’s information about your purchase (the product, dates, price and currency, and the transaction identifiers). It also receives your device’s locale and currency code. It never receives your expenses or anything you typed.
  • We use this information to give you what you paid for, prevent fraud, and see how many people subscribe. It is kept while you’re a customer and afterwards for as long as we need it for accounting, tax and legal reasons.

Legal basis (GDPR): performance of our contract with you (unlocking what you bought), and our legitimate interest in preventing fraud and understanding sales.

Who we share data with

We share data only with the service providers named above:

  • PostHog: analytics, only if you opted in.
  • RevenueCat: purchase checks.
  • Apple: App Store payments and purchase records.
  • jsDelivr and Cloudflare: exchange-rate downloads, without personal data beyond the IP address that any web request carries.

Each provider is bound by its own terms to protect your data at least as well as described in this policy, and to use it only to provide its service to us. We don’t sell or rent your data. We don’t share it with advertisers or data brokers.

Usage statistics are processed by PostHog in the European Union (Frankfurt, Germany). Purchase checks are processed by RevenueCat, which stores its data on servers in the United States. Apple processes App Store payments under its own privacy policy. Where data leaves your country, it is protected by the appropriate safeguards required by law.

What we don’t do

We don’t sell or share your data for advertising. We don’t show ads, use the advertising identifier, track you across apps or websites, or ask for your name, email or location.

Your rights

Depending on where you live, you may have the right to:

  • ask what data we hold about you;
  • have it corrected or deleted;
  • object to its use;
  • withdraw your consent;
  • receive a copy of it.

Because SpendFoxy has no accounts, we can only find data through the analytics ID (see above) or, for purchases, the details on your App Store receipt. Write to spendfoxysupport@diaryfromtheroad.com. If you are in the EU or UK, you can also complain to your local data protection authority.

Children

SpendFoxy isn’t directed at children under 13 and doesn’t knowingly collect information from them.

Changes

If this policy changes, the new version is published at this address with a new effective date. Material changes will also be mentioned in the app’s release notes.

Contact

Privacy questions and requests: spendfoxysupport@diaryfromtheroad.com. Help with the app: Support.