How Spentlo handles your information

Last updated: May 31, 2026

This Privacy Policy explains how Spentlo collects, uses, stores, and discloses personal information when you use the Spentlo website and app. It is written for Australian users and is intended to align with the Australian Privacy Principles.

PurposeWe use your information to run your household finance workspace, forecasts, security, support, and account features. ControlYou can update profile details, manage household access, export records, and request account deletion from the app. SecurityPasswords are hashed, sessions are protected, and sensitive stored data is designed to be encrypted server-side.

1. Information We Collect

We collect information you provide directly, information created while using the app, and technical information needed to keep the service secure.

Account details such as name, email address, phone number, birthday, gender, job title, password hash, email verification status, two-step verification settings, and session information.
Household details such as household members, roles, invites, linked people, and access settings.
Financial data you enter, including income, expenses, accounts, assets, investments, loans, offset accounts, goals, recurring bills, uploaded CSV data, business or payee names, attachments, notes, and forecast settings.
Bank linking data if you choose to use automatic setup. This may include consent status, connected accounts, transactions, balances, and provider metadata supplied through the bank data provider. We do not ask for or store your online banking password.
Feedback and support information, including comments, ratings, screenshots, attachments, and whether you consent to follow-up.
Technical information such as device, browser, approximate request time, IP address, failed login attempts, security events, diagnostics, and cookies or local storage needed for sessions and preferences.

2. How We Use Information

We use personal information to:

create and secure user accounts;
provide household finance tracking, dashboards, forecasts, goals, income views, expense views, asset and loan calculations, bank linking, and account settings;
verify email ownership, support two-step verification, detect suspicious activity, and prevent misuse;
respond to feedback, bug reports, and support requests;
send product updates if you have chosen to receive them;
maintain backups, audit logs, billing records, and operational records;
meet legal, regulatory, and security obligations.

3. Financial Insights and Automation

Spentlo uses your data to calculate forecasts, savings rates, goal capacity, loan projections, interest estimates, and dashboard insights. These outputs are informational only and are not financial, tax, legal, or investment advice. You should check figures against your bank, lender, accountant, or adviser before relying on them.

4. Bank Linking

Bank linking is optional. If enabled, Spentlo may use a third-party bank data provider, such as Fiskil, to help you connect Australian bank accounts and import account or transaction data. You control whether to start the consent flow. The provider may also collect and process information under its own privacy terms.

5. AI Features

Spentlo may provide AI-style insights generated from a reduced household summary. If an external AI provider is connected in the future, the app should avoid sending unnecessary personal information and should not send bank login credentials. This policy should be updated before any external AI provider is used for live personal data.

6. How We Store and Protect Information

We use technical and organisational safeguards designed to protect personal information, including HTTPS in production, password hashing, session controls, email verification, optional two-step verification, role-based household access, server-side encryption for sensitive stored data where configured, and restricted admin access.

No internet service can guarantee complete security. You should use a strong unique password, enable two-step verification, and keep your device secure.

7. Disclosure to Others

We do not sell your personal information. We may disclose information to:

service providers that host, store, secure, monitor, email, message, or operate the app;
bank data providers if you choose to connect bank accounts;
payment providers if paid plans are enabled;
members of your household according to the access and role settings you choose;
professional advisers, insurers, or authorities where reasonably necessary;
another party with your consent or where required by law.

8. Overseas Disclosure

Some service providers may store or process information in Australia or overseas, including countries where cloud, email, analytics, payment, or support providers operate. We aim to use reputable providers with appropriate security controls.

9. Cookies and Local Storage

Spentlo uses cookies and browser storage for sign-in sessions, saved preferences, theme settings, local app state, and security. Disabling cookies or local storage may stop parts of the app from working.

10. Access, Correction, and Deletion

You can update many account details in Account Settings. Email addresses are locked for sign-in integrity, but you can contact us if your email needs to be changed. A workspace reset clears the finance data attached to an eligible account and restarts setup while keeping its login and security details. You can also request full account deletion from the app. Some records may be retained for backups, fraud prevention, security, legal, or accounting reasons.

11. Children

Spentlo is intended for users aged 18 or older. Users under 18 should not create an account.

12. Complaints and Contact

If you have a privacy question, correction request, or complaint, contact us at privacy@spentlo.com. We will aim to respond within a reasonable period. If you are not satisfied with the response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

13. Changes to This Policy

We may update this policy as Spentlo changes. The latest version will be shown on this page with the updated date.