Privacy Policy

1. Information we collect

We collect information you provide directly and information we receive when we connect to financial institutions through an account connection provider.

• Account and contact information: such as your name, email address, phone number, and support communications.
• Transaction data: such as transaction dates, amounts, merchant or transaction names, and related metadata used for categorization.
• Categorization data: categories, rules, tags, and any corrections you provide.
• Cash Flow and AI Analysis data: Cash Flow settings, forecasts, planned events, and the transaction text, amounts, dates, categories, and calculated summaries included when you explicitly request optional AI Analysis.
• Subscription data: plan, purchase status, renewal state, expiration, and non-payment identifiers used to verify entitlement. Payment providers process payment credentials; TagMySpend does not receive full card details from Google Play.
• Session and device data: session identifiers, IP address, browser user agent, connection diagnostics, and device notification tokens when notification features are enabled. Android session cookies are encrypted using the device keystore.

2. How we use information

We use information to:

• Provide and operate TagMySpend features (transaction syncing and categorization).
• Maintain and improve categorization accuracy using deterministic rules and optional AI features you enable.
• Generate optional AI Analysis only when you request it.
• Verify subscription purchases, maintain entitlements, prevent fraud, and provide account support.
• Send transactional notifications related to your account (including SMS if you opt in).
• Provide customer support, respond to requests, and communicate important updates.
• Protect against fraud, abuse, and security incidents.

3. Optional AI Analysis

AI Analysis is off by default. When you enable or request it, TagMySpend sends the transaction and Cash Flow context needed for that request to OpenAI, acting as our AI service provider. This may include merchant or description text, amount, date, category, and calculated financial summaries. Do not include secrets or bank credentials in notes. You can use TagMySpend without enabling AI Analysis.

4. Account connections

TagMySpend uses a third-party account connection provider to connect to your financial institutions. When you link an account, you authenticate directly with the provider and your institution. We do not receive or store your bank login credentials.

Access tokens (when used) are treated as secrets and stored securely. Tokens may be encrypted and access-restricted so only the services that need them can use them.

TagMySpend is not affiliated with any financial institution or third-party account connection provider.

5. SMS alerts

If you opt in, TagMySpend may send you transactional SMS related to transaction categorization and account notifications. Message frequency varies. Msg & data rates may apply.

You can opt out at any time by replying STOP. For help, reply HELP.

For program details and examples, see our SMS Program Disclosure.

6. Service providers and sharing

We disclose information only as needed to service providers that operate TagMySpend, including hosting and database providers, the financial-account connection provider, OpenAI for optional AI requests, communications providers, and payment platforms such as Google Play, PayPal, and Authorize.net. These providers process data for the relevant service. We may also disclose information if required by law or to protect TagMySpend and our users. TagMySpend does not sell personal data or use transaction data for third-party advertising.

7. Data security and retention

We use encryption in transit, access controls, encrypted financial-connection tokens, hashed session and purchase identifiers, and other administrative and technical safeguards designed to protect information. No method of transmission or storage is completely secure.

We retain information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

8. Account deletion and your choices

You can permanently delete your account from Profile in the Android app or on the Web. Deletion removes profile data, linked Account access, transactions, rules, settings, sessions, device tokens, and entitlement records. We may retain a non-identifying deletion completion record and records required by law. Subscription cancellation is handled separately by the payment provider.

Instructions are available on our Account Deletion page.

9. Contact us

Questions about this Privacy Policy? Contact us at info@tagmyspend.com.