Draft for review. Check every section before this page is published; it is not legal advice.
Your data
Privacy
What xSpenso keeps about you, where it goes, and how to see or delete it.
Last updated 5 November 2026
Who runs xSpenso
xSpenso is a personal budgeting app for iPhone, run by Elston Julius in the United Kingdom as a private project. It is not sold, has no adverts and is not a business. Elston Julius decides how your data is used and is the person to ask about it: info@xspenso.com.
What is kept on the xSpenso server
- Your sign-in: your name, email address, username and password (stored scrambled), kept by xSpenso's own sign-in service. If you use Sign in with Apple, Apple tells it your name and email address (or a private relay address, if you choose to hide yours).
- Your budget: accounts, balances, transactions, bills, income, pay, loans, savings goals, notes and settings you enter.
- Statements you upload: the transactions and the statement's details, which usually show your name, address and account numbers.
- Settings and your character: your app settings and My Character pictures, so they are the same on every device you sign in on.
- Connected banks: only if you connect one, the accounts you chose to share, the last four digits of their numbers, and their balances and transactions, plus your Synci sign-in, kept encrypted. Never your bank password: you sign in at your bank, not in xSpenso.
- AI keys you add: kept encrypted on the server and used only for the features you choose.
- Card details: only if you turn on Save Cards to the Server in Settings, encrypted. The security code is never saved.
Each person's budget is kept in its own separate database; other people using xSpenso cannot see it.
What stays on your iPhone
- Card details and pictures stay on your iPhone unless you turn on Save Cards to the Server. They are not included in iPhone backups.
- Sign in with Apple: your Apple identity is kept in your iPhone's keychain only and is never sent to the server.
- Face ID or your passcode is checked by iOS; xSpenso never sees it.
- Your location: if you allow it, your approximate location (to about 1 km) is used on your iPhone to show the weather and is not stored by xSpenso.
- Jules (Help) answers from the app's own guide, or with Apple Intelligence on your iPhone. Nothing you ask Jules is sent anywhere.
Why it is used
Only to run your budget for you: showing your money, reading your statements, sorting spending into categories, reminding you about bills and answering your questions. It is used because you asked for this service and it cannot work without it. It is never sold, shared for marketing or used to make decisions about you.
Where it is kept
On a server in the United Kingdom, with backups on a storage drive at the same address. Your connection reaches it through Cloudflare, which protects the service and handles the secure connection; Cloudflare does not keep your budget.
Who else sees some of it
Some features need an outside service. Only what that feature needs is sent, and never your password.
| Service | What it gets | Why |
|---|---|---|
| Synci (Norway), which reads UK banks through GoCardless (France) | Only if you connect a bank: you sign in to your own Synci account and choose the accounts to share; Synci then provides their details, balances and transactions to xSpenso | Read-only access to banks you choose, with your consent. No payment can be made through xSpenso |
| The AI company you choose in Settings (for example OpenAI or OpenCode in the USA, or Inception) | For statements you upload: the statement text, with your name and address removed first. For budget questions: the figures needed to answer. For card pictures and My Character: only what you agree to in the request | Reading statements, sorting transactions, answering budget questions and making pictures |
| Open-Meteo (Switzerland) | Your approximate location (to about 1 km), sent from your iPhone, only if you allow location | The weather on the Next Bill widget |
| icon.horse and Simple Icons | Your internet address and the name of the company whose logo is shown | Company logos next to transactions |
| Cloudflare (USA) | Your internet address and the traffic between your iPhone and the server | Protecting the service and the secure connection |
Data sent to services in the USA is handled under their own terms as well as data protection law, so it carries some extra risk. You can avoid AI services by adding transactions by hand instead of uploading statements.
No tracking
xSpenso has no analytics, adverts or tracking, and does not track you across other apps or websites. Notifications on your lock screen never show your figures.
How long it is kept
Until you delete it or ask for your account to be removed. You can clear your data at any time in Settings → Your data → Clear Data. A recovery copy is kept for 30 days in case it was a mistake, and backups hold it for up to 30 days; after that it is gone.
A bank connection lasts until the consent you gave ends (your bank sets the length, at most 180 days) or until you disconnect it. You can also remove xSpenso from your Synci account at any time. Transactions already imported stay in your budget until you delete them.
Your rights
Under UK data protection law you can ask to see your data, get a copy, have it corrected or deleted, or object to how it is used. Email info@xspenso.com and you will get an answer within one month. If you are unhappy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk.
Age
xSpenso is meant for adults. Connecting a bank requires you to be old enough to hold the account yourself.
Changes
If this policy changes, the new version is posted here with a new date, and the app tells you about anything important.