Legal
Privacy Policy
Last updated: October 26, 2026
SpotterMoney is a cash-flow planner. It works with numbers you type in yourself. It never asks for your bank login, it shows no ads, and it does not sell or share your data with anyone for marketing.
The short version.
- We keep the accounts, balances and movements you enter so the app can show them to you on any device. Only you can read them.
- You sign in with Google or Apple. We get your email address and an account identifier from them, never a password.
- When the app crashes, we receive a technical error report. It never contains your amounts or account names.
- You can export everything or delete your account, with all its data, from inside the app at any time.
Who we are
SpotterMoney is made by AtSeaCode, the trade name of Maximiliano Filsinger, based in Argentina. AtSeaCode is the controller of the personal data described here. You can reach us at contact@atseacode.dev.
What we collect, and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Sign-in details from Google or Apple: email address, a provider account ID and, if the provider sends it, your name. With Apple you can choose to hide your email; then we only see a relay address. | To create your account and let you sign in. | Performance of a contract |
| What you enter: account names, currencies and balances; income and expenses with their amounts, dates and how often they repeat; your settings, such as base currency, cushion and projection horizon. | To calculate your projection and your Safe to Spend figure, and to sync them between your devices. | Performance of a contract |
| Crash reports: error message and stack trace, app version, device model and operating system. Reports never contain your amounts, account names or other text you entered: the app does not put them into error messages, and it strips numbers and user details from every report before sending it. Our error-reporting provider receives your IP address as part of the connection and may derive an approximate location (country and city) from it. | To find and fix bugs. | Legitimate interest in a working, secure app |
We do not use analytics or advertising SDKs, we do not track you across other apps or websites, and we do not build profiles of you. SpotterMoney does not connect to your bank and does not process payments.
Exchange rates
To convert accounts held in different currencies, our server downloads public exchange rates once a day from open.er-api.com. Nothing about you is sent in that request. Your phone never contacts that service directly.
On your device
The app keeps a copy of your most recent data on your phone so it can show it without a connection; this copy expires after 24 hours. Your sign-in session is kept in the device's secure storage (Keychain on iOS, Keystore on Android). Signing out or deleting your account removes both.
Who processes your data for us
We use a small number of providers. Each one handles data only on our instructions and under a data processing agreement.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and the server functions that fetch exchange rates and revoke Sign in with Apple | United States (Ohio) |
| Sentry | Crash reports | United States |
| Google, Apple | Sign-in, when you choose them | Under their own privacy policies |
| Cloudflare | Hosting this website | Global network |
International transfers
Our providers store data in the United States. When personal data of people in the European Economic Area, the United Kingdom or Switzerland is transferred there, the transfer relies on the European Commission's Standard Contractual Clauses included in each provider's data processing agreement.
How long we keep it
- Your account and everything you entered: until you delete your account. Deletion removes it from our database at once. Copies in our database provider's backups are overwritten as those backups rotate, within 30 days at most.
- Crash reports: up to 90 days.
Your rights
Wherever you live, you can:
- Access and take your data: Settings → Your data → Export my data gives you a JSON file with everything you entered.
- Correct it: edit any account, movement or setting in the app.
- Delete it: Settings → Delete account removes your account and all its data. See how to delete your account, including without the app.
- Object or restrict: write to us and we will answer within 30 days.
If you are in the EEA, the UK or Switzerland, you may also complain to your local data protection authority. In Argentina, the authority is the Agencia de Acceso a la Información Pública (AAIP), which enforces Law 25,326 on personal data protection.
Security
All traffic is encrypted in transit. The database only returns rows that belong to the signed-in user, enforced by the database itself rather than by the app. Sign-in uses one-time codes (PKCE and nonces), so there are no passwords for us to store or lose.
Children
SpotterMoney is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.
Changes
If we change this policy, we will update the date at the top. If a change affects how we use data you already gave us, we will tell you in the app before it takes effect.