Privacy policy

The smallest amount of data, on purpose.

Last updated: May 25, 2026

The short version

SpendPace exists to answer one question: what's safe to spend before payday? To answer it we need to know what you take home, what you've already committed to (bills, set-asides), and what you've spent. That's it.

We don't connect to your bank. We don't run analytics or behavioural tracking. We don't sell or share your data with advertisers. We don't build a profile of you.

What we collect

Sign-in identity

  • Your email address — used for the magic-link sign-in.
  • If you sign in with Apple or Google, that provider tells us your email and an anonymous user ID. We do not receive any other information from them.
  • An internal user ID our authentication system (Supabase) assigns when you create the account.

Money information you enter into the app

  • Your pay amount, pay frequency, and next payday.
  • Bills, savings, and other recurring set-asides you choose to track (name, amount, due date, frequency, optional colour).
  • Expenses you manually log (amount, category, optional note, date).
  • Your spending categories and any per-category limits you set.

Settings

  • Currency, notification preferences, and whether you have the Face ID app lock enabled.

Server access logs

  • Like any service on the internet, our infrastructure provider records standard access logs — IP address, timestamp, and the kind of request — to detect abuse and keep the service running. We don't combine these logs with your money information to build a profile.

What we don't collect

  • We don't connect to your bank — we have no access to your real transactions.
  • We don't run analytics, behavioural tracking, or session replay tools.
  • We don't run a crash reporter that sends your data off-device.
  • We don't track your location.
  • We don't access your contacts, photos, microphone, camera, or any other app on your phone.
  • We don't sell or share your financial information with anyone.
  • We don't build an advertising profile of you.

How your data is stored

Your account and the data you enter are stored in Supabase, our authentication and database provider. The connection is encrypted in transit (HTTPS) and at rest. Supabase keeps standard backups for disaster recovery.

We use Row Level Security so that even at the database level no other account could read your rows. The app also caches your data locally on your device so it's available offline; that cache is cleared when you sign out.

Who we share data with

The minimum required to make the app function:

  • Supabase — our authentication and database provider. They host your account and data on our behalf.
  • Apple or Google — only if you chose Sign in with Apple or Sign in with Google. Those providers see that you signed in to SpendPace. They do not see your financial data.
  • Apple App Store — handles subscription billing. We never see your payment details; Apple does.

We do not share data with advertisers, data brokers, or analytics companies.

Your rights

You can:

  • Export your data at any time — Settings → Export. You'll get a JSON file with everything we have for your account, ready to keep or move elsewhere.
  • Delete your account and all associated data — Settings → Delete account. The deletion is permanent and we have no way to recover it after.

Minors

SpendPace is intended for users 13 and older. If you believe a child under 13 has created an account, contact us and we will delete it.

Changes to this policy

If we change this policy in a way that affects how your data is collected or shared, we'll email registered users and surface a notice in the app. The latest version always lives at spendpace.ca/privacy.html.

Contact

Have Faith Inc. · Canada
hello@spendpace.ca