Google Play Verified Policy • 2026 Standard

Privacy Policy

Application Name: Spenvora — Money & Budget Planner

Package ID (Application ID): com.spenvora.moneyplanner

Developer / Legal Entity: YOUNG EYYE PHOTOGRAPHY, LLC

Effective Date: November 2, 2026 | Last Updated: November 2, 2026

1. Nature of the Application & Financial Scope Disclaimer

Spenvora is designed and provided strictly as an intentional, manual personal bookkeeping, budgeting, and money-management tool. We believe in intentional financial awareness where users maintain full control over their figures.

2. Categories of Information We Collect

We believe in strict data minimization. We collect only what is strictly necessary to authenticate your account and securely synchronize your bookkeeping records across your devices.

A. Information You Voluntarily Provide

• Account Credentials: When you register an account, we collect your email address and an optional display name. Your password is never stored in readable text; it is cryptographically hashed using the memory-hard Argon2id algorithm before reaching our database.
• User-Entered Bookkeeping Records: Manually recorded financial data including wallet labels (e.g., "Cash", "Checking", "Savings"), manual income and expense entries, numerical transaction amounts, transaction dates and times, user-selected categories, optional notes/memos, and custom monthly budget pace limits.
• Direct Communications: If you contact our support team at savannahheatherly2001@gmail.com or submit an external account deletion request, we retain the email correspondence and request details solely to fulfill your inquiry.

B. Automatically Collected Technical Metadata

• Security & Abuse Prevention Metadata: When your device connects to our cloud API, our servers temporarily process your Internet Protocol (IP) address solely for brute-force rate-limiting and DDoS mitigation.
• Session Diagnostics: Basic device operating system type (Android/iOS), app version number, and request correlation IDs used to manage active login sessions and verify synchronization consistency.

C. Information We Do NOT Collect

Sensitive Category	Our Policy
Bank account & routing numbers	Never Collected. We have no access to your banking accounts.
Credit/debit card numbers & CVV	Never Collected. We do not process payments or store card numbers.
Government IDs (SSN, Passport, Driver's License)	Never Collected. We do not require identity verification documents.
Precise GPS location	Never Collected. We do not track or store your geographical location.
Contacts, SMS, Photos & Camera	Never Collected. Spenvora does not request access to device media or contacts.
Biometric authentication data	Never Collected. Device-level biometrics (Fingerprint/Face Unlock) remain strictly on your device hardware.

3. Google Play Console Data Safety Declarations (1-to-1 Audit Table)

To assist Google Play reviewers and provide absolute transparency to users, the table below maps directly to our declarations in the Google Play Console Data Safety section:

Google Play Category	Specific Data Field	Collected or Shared?	Purpose & Security Measures
Personal info	Email address, Name (optional)	Collected (Never shared)	Account management & authentication. Encrypted in transit (TLS 1.3). User can request deletion.
Financial info	User-entered transactions, budgets, wallets & goals	Collected (Never shared)	App functionality & cross-device sync. Encrypted in transit (TLS 1.3) and at rest (AES-256). User can request deletion.
App info & performance	Diagnostics & sync errors	Collected (Never shared)	Reliability & data consistency verification.
Device or other IDs	Device identifiers, IP address, Session tokens	Collected (Never shared)	Anti-abuse, rate-limiting & brute-force prevention. Ephemeral security processing.
Data Sharing	All personal & financial records	NONE	Zero data shared with third-party advertisers, data brokers, or marketing networks.

4. How We Use Your Information (Purposes of Processing)

We process your personal and financial information exclusively for the following legitimate purposes:

• Core Service Delivery: Storing your entries in local device storage (SQLite) and providing secure bidirectional synchronization with our cloud server database (Neon PostgreSQL) so your financial records remain available when you switch or reinstall devices.
• Account Authentication & Security: Generating JSON Web Tokens (JWT) to authenticate your access and prevent unauthorized third parties from accessing your records.
• System Resilience & Threat Defense: Enforcing rate-limits (IP-based) to safeguard our infrastructure from denial-of-service, automated credential stuffing, and bot abuse.
• Customer Support & Legal Compliance: Responding to user support inquiries and processing deletion requests.

5. Strict Zero-Sale & Advertising Policy

6. Third-Party Service Providers (Infrastructure Only)

To operate our secure cloud synchronization, we partner with trusted, SOC 2-compliant cloud infrastructure providers under strict confidentiality agreements:

• Hosting & Serverless Compute: Vercel Inc. (San Francisco, CA, USA) — hosts our stateless backend API functions with TLS 1.3 encryption.
• Cloud Database Storage: Neon Inc. (Menlo Park, CA, USA) — hosts our managed PostgreSQL cloud database with automated encryption at rest and isolated branch security.

These infrastructure providers process data strictly on our instructions to maintain server operations and are legally prohibited from using your data for any independent purpose.

7. Data Security Measures

We deploy rigorous technical and organizational safeguards to protect your records:

• Encryption in Transit: All data transmitted between the Spenvora mobile app and our cloud backend is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS). Plaintext HTTP connections are strictly rejected.
• Encryption at Rest: Cloud databases and server storage are encrypted at rest using industry-standard AES-256.
• Cryptographic Password Hashing: We utilize Argon2id with unique salt values to ensure that your passwords cannot be derived even in the event of an infrastructure breach.
• Local Storage Protection: On-device SQLite databases and authentication tokens are secured via Android EncryptedSharedPreferences and iOS Keychain services.

8. Data Retention & Permanent Deletion (Google Play 2026 Compliant)

We retain your personal information and financial records only for as long as your account remains active.

In full compliance with Google Play 2026 Developer Policies, GDPR, and CCPA, you have the absolute right to permanently delete your account and all associated data at any time through two pathways:

Pathway 1: In-App Deletion (Immediate)

1. Open the Spenvora application on your mobile device.
2. Navigate to Settings & Privacy → Security & Session → Delete Account.
3. Enter your current password to verify your identity and confirm deletion.
4. Your account, profile, wallets, categories, transactions, budgets, goals, and active sessions are immediately and irreversibly deleted from our cloud database.

Pathway 2: External Web Deletion (For Uninstalled Users)

If you have uninstalled the application or cannot access your mobile device, you can submit an account deletion request online via our public portal:

Go to External Account Deletion Portal

Upon receiving your request and verifying account ownership, all associated personal and financial cloud records will be permanently purged within thirty (30) calendar days.

9. Your Legal Rights (GDPR & US State Privacy Laws)

Depending on your jurisdiction (including the European Economic Area, United Kingdom, and US states such as California, Colorado, Virginia, and Florida), you possess the following privacy rights:

• Right to Access / Know: The right to confirm whether we process your data and receive a readable copy of your records.
• Right to Rectification: The right to correct inaccurate or incomplete financial entries directly within the App.
• Right to Erasure: The right to request the permanent deletion of your account and personal records.
• Right to Restrict / Object: The right to limit or object to our processing under applicable statutory provisions.
• Non-Discrimination: We will never deny services, charge different prices, or alter service quality for exercising your privacy rights.

To exercise any of these statutory rights, please email us at savannahheatherly2001@gmail.com.

10. Children's Privacy (COPPA & Global Standards)

Spenvora is directed toward general audiences aged 18 and older. The App is not designed for, marketed to, or intended for use by children under the age of 13 (or 16 where required by local law). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately, and we will delete such data promptly.

11. Changes to This Privacy Policy

We may revise this Privacy Policy periodically to reflect enhancements to our service, technological advancements, or changes in legal and regulatory requirements. When revisions occur, we will update the "Effective Date" at the top of this document. Continued use of Spenvora following notice of changes constitutes your acknowledgment and acceptance of the updated terms.

12. Contact & Legal Entity Information

If you have questions, comments, or concerns regarding this Privacy Policy or our data handling practices, please contact our designated privacy team: