Is SpentStory safe?
SpentStory never asks for your bank login. You upload a statement PDF from your own device, the expenses are read out of it, and the PDF is processed in memory and deleted straight after. Only the extracted transactions are kept in your account.
What does SpentStory need from you?
Only the PDF statement you choose to upload. There is no bank login, no account linking and no access to your SMS or email. SpentStory never connects to your bank.
What happens to your statement PDF?
The file is processed in memory and deleted immediately after the expenses are extracted. SpentStory does not keep copies of your PDFs.
What does SpentStory store?
- The extracted transactions: date, description, amount and category.
- Your email, display preferences and currency.
- Any cash or split bill expenses you add by hand.
Transactions stay in your account until you delete them or delete your account. Theprivacy policy lists everything in full, including the small amount of data kept after an account is deleted to stop the free plan limits being reset.
How does sign in work?
Sign in is handled by Supabase Auth, with email and password or Google. Your session is kept in a cookie that is limited to the SpentStory site and cannot be read by page scripts, rather than in browser storage.
Can you delete your data?
Yes. You can delete individual statements, or your whole account, from Settings. Deleting your account removes your profile and your expenses.
What about payments and analytics?
Paid plans are not available yet. When they launch, payments will be processed by Safepay, and card details are entered on Safepay's own pages, so SpentStory does not store full card numbers. The marketing site may use Cloudflare Web Analytics, which does not use cross site tracking cookies. The app itself uses only the cookies needed to keep you signed in.
Frequently asked questions
Is SpentStory safe?
SpentStory never asks for your bank login. You upload a statement PDF from your own device, the expenses are read out of it, and only those extracted transactions are stored in your account.
Do you keep my bank statement PDF?
No. The PDF is processed in memory and deleted immediately after the expenses are extracted. SpentStory does not keep copies of your PDFs.
Does SpentStory need my bank login or access to my accounts?
No. There is no bank login and no account linking. The only input is the PDF statement you choose to upload.
Can I delete my data?
Yes. You can delete individual statements or your whole account from Settings. Deleting your account removes your profile and expenses.
Still have a question? Email [email protected]. You can also see how the bank statement analyzer works.