← Back

Privacy Policy

Last updated: September 5, 2026

This Privacy Policy explains how SPENDMINT, LLC (“SpendMint,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects your personal information when you use the SpendMint website at spendmint.io, mobile web application, progressive web app, and related services (collectively, the “Service”). Please read it carefully. If you do not agree with our practices, do not use the Service.

1. Information we collect

We collect the following categories of information:

  • Account information: email address, authentication provider details, profile name, and password (hashed).
  • Financial account information: account balances, transaction history, account identifiers (masked where possible), and account metadata retrieved through our bank-connection provider, Plaid Inc.
  • Shopping and receipt data: scanned barcodes, photographed receipts and the line items we extract from them, cart contents, store and ZIP selections, and SNAP/EBT eligibility classifications.
  • User-created content: budgets, categories, meal plans, pantry items, household size, allergy profiles, notes, goals, and other data you enter.
  • Device and usage information: IP address, browser type, device type, operating system, app interactions, feature usage, crash reports, and performance logs.
  • Cookies and similar technologies: identifiers used to maintain sessions, remember preferences, and analyze usage. See our Cookie Policy for details.
  • Communications: emails, support requests, and survey responses.

2. How we collect your information

  • Directly from you: when you create an account, connect accounts, scan items, photograph receipts, enter budgets, or contact support.
  • Automatically: through cookies, local storage, log files, and analytics tools as you interact with the Service.
  • From third parties: our bank-connection provider Plaid Inc., authentication providers (such as Google), and product-data providers (Open Food Facts and Barcode Lookup) with your authorization or as part of fulfilling your scans.

3. How we use your information

We use your information to:

  • Provide, operate, and maintain the Service.
  • Display balances, transactions, budgets, net worth, meal plans, and spending insights.
  • Classify purchases for SNAP/EBT splits, surface coupons and brand-funded swap credits, and build your meal plans and shopping carts.
  • Send notifications, alerts, and reminders (including push notifications if enabled).
  • Process subscriptions, payments, and billing.
  • Detect and prevent fraud, abuse, and security incidents.
  • Debug errors, monitor reliability, and improve performance.
  • Communicate with you about your account, updates, and support requests.
  • Comply with legal obligations and enforce our terms.

4. Banking and financial data handling

Because SpendMint helps you manage money, we treat your financial data with heightened care:

  • No bank passwords stored: We do not collect or store your bank login credentials. Authentication with your financial institution happens through Plaid’s secure interface.
  • Token-based access: When you link an account, Plaid returns an access token that we store encrypted at rest and use to retrieve updated data. Tokens are accessible only to authenticated server functions.
  • Scope and consent: We request only the account access scopes necessary for the current feature set. You can revoke access or disconnect accounts at any time from Settings.
  • Use limitations: We use financial data solely to provide the Service to you. We do not sell transaction histories or account balances to third parties and we do not use them for behavioral advertising outside the Service.
  • Retention: Financial data is retained while your account is active and deleted within 30 days of an account-deletion request, unless a longer period is required by law.
  • Provider terms: Your use of bank-connection services is also governed by Plaid’s Privacy Policy and End User Privacy Policy.

5. Receipts, scans, and AI processing

When you photograph a receipt or scan a barcode, the image or barcode is processed to extract product and pricing information. Receipt images are analyzed by an AI model routed through our AI gateway (currently Google Gemini); providers receive the minimum data needed to answer the request and are contractually prohibited from training their foundation models on your personal data. See our AI Recommendation Disclosure.

6. How we share your information

We do not sell your personal information. We may share information with:

  • Service providers: hosting, database, analytics, payment processing (Stripe), email delivery, bank-connection (Plaid), and AI providers who process data on our behalf under written agreements.
  • Brands and retailers, in aggregate only: when a brand-funded credit or coupon is redeemed, the sponsoring brand receives confirmation of redemption tied to the offer — not your identity, account balances, or transaction history.
  • Legal and safety: regulators, law enforcement, or other parties when required by law, court order, or to protect our rights, users, or the public.
  • Business transfers: a successor or buyer in connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.
  • With your consent: any other sharing that you explicitly authorize.

7. Cookies and tracking technologies

We use cookies and similar technologies to authenticate users, remember preferences, understand usage, and improve the Service. You can control cookies through our consent banner and your browser settings; see our Cookie Policy. Disabling essential cookies may prevent parts of the Service from working.

8. Data security

We implement administrative, technical, and physical safeguards designed to protect your information, including HTTPS for data in transit, encrypted storage, access controls, and row-level security policies that isolate each user’s data. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

9. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we initiate deletion of your data within 30 days, subject to legal hold or backup retention periods. Aggregated or de-identified data may be retained for analytics.

10. Your privacy rights

Depending on where you live, you may have rights such as access, correction, deletion, portability, restriction of processing, and the right to object to certain uses. To exercise these rights, contact us at ok2abella@gmail.com or use the controls in the Privacy Center.

Business address: 8 The Green, Suite B, Dover, Delaware 19901, USA.

California and other US state residents: Under the California Consumer Privacy Act and similar state laws, you have the right to know, delete, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise these rights, contact ok2abella@gmail.com.

EEA and UK residents: Our legal bases for processing are performance of a contract, legitimate interest, and consent. You may lodge a complaint with your local supervisory authority.

11. International data transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. Where required by law, we rely on standard contractual clauses or equivalent transfer mechanisms for such transfers.

12. Children’s privacy

The Service is not intended for children under 13 years of age, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.

13. Third-party links and services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing them with information.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date and, where appropriate, notified in-app or by email. Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

15. Contact

Privacy questions: ok2abella@gmail.com. Security or Plaid-related concerns: see our Security & Responsible Disclosure page (monitored at security@spendmint.app).

Business address: 8 The Green, Suite B, Dover, Delaware 19901, USA.

Information Security Contact