Privacy Policy

In one line: XP Spendly does not collect your financial data. It stays on your device.

1. Who this policy is from

This policy explains how the XP Spendly — Expense Tracker iPhone application (“the app”) and this website handle information. The app is published by Mobry Network Technology, S.A. de C.V. (“we”, “the developer”), a company incorporated in the United Mexican States. You can reach us at bluoliud@mobry-network.cyou.

2. What we do not collect

We do not collect your financial data. The amounts you enter, the categories you assign, the notes you write, your budget, your currency and your settings never leave your device, and the developer has no technical means of seeing them.

We do not ask for your name, your email address, your phone number or your contacts. There is no account system, so there is no profile to build.

3. What is received, and why

The app uses Firebase Remote Config (Google LLC) for a single purpose: to determine which version of the interface to present in your country. For that purpose the service receives:

• an installation identifier generated by Firebase, which is not linked to your identity and is reset if you delete and reinstall the app;
• your approximate country, derived from the network address of the request.

That is the entire extent of it. No advertising, no behavioural analytics, and no tracking of you across other apps or websites. Google’s handling of this data is described at firebase.google.com/support/privacy.

4. Where your records are stored

Your expenses, categories, notes and settings are stored on your device, inside the app. If you have iPhone backups enabled — to iCloud or to a computer — they are included in that backup. Such backups are governed by Apple’s terms and are not accessible to the developer.

5. Sharing with third parties

Your expenses are shared with no one. The only third-party service in the app is Firebase Remote Config, described above, and it never receives your financial data. The app contains no advertising networks, no behavioural analytics and no cross-app trackers. We do not sell, rent or trade any information, because we do not hold any to sell.

6. When data leaves your device

Only when you ask it to. Exporting a CSV file or creating a backup lets you choose where the file goes — Files, iCloud Drive, email, a messenger, another app. What happens to it after that is governed by the service you picked, not by us.

7. The web version

In some countries the app opens the web interface of our service instead of its built-in screens. Pages you open there are subject to the privacy policy of that website. You can switch back to the built-in app at any time in Settings → Web version, and the web screen always offers a way back.

8. Permissions

• Notifications — requested only if you turn on the daily reminder. The notification is created and delivered entirely on your device and is never transmitted.
• Face ID / Touch ID — requested only if you turn on the app lock. Authentication is performed by iOS; the app receives a yes-or-no answer and never has access to your biometric data.

Both are optional, and the app is fully functional with both switched off.

9. This website

This page is a static site. It sets no cookies of its own, runs no analytics, and asks you for nothing. Fonts are loaded from Google Fonts, which receives the standard request information (including your IP address) needed to serve them.

10. Deleting your data

Settings → Delete all data erases your expenses, categories and settings permanently. Deleting the app from your device also removes every record it held. Because nothing was stored on a server, there is no further copy to request the deletion of.

11. Children

XP Spendly is not directed at children and collects no personal data about anyone, including children under 13.

12. Your rights

Data-protection laws such as the GDPR and the CCPA give you rights of access, correction, deletion and portability. In practice, the app satisfies them directly and immediately: your data is already in your possession, editable at any time, exportable as CSV or JSON, and deletable in a single action.

As a company incorporated in Mexico, we are also subject to the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), which grants you ARCO rights — access, rectification, cancellation and opposition — over your personal data, along with the right to withdraw consent. Because your financial records never reach us, these rights are exercised directly inside the app: every record can be viewed, corrected, exported or erased by you at any moment, without asking anyone.

For the installation identifier described in section 3 — the only data any service receives — or for any request we can still help with, write to bluoliud@mobry-network.cyou. We answer within 20 business days.

13. Changes to this policy

If this policy changes, the effective date at the top of this section will be updated and the current version will always be published on this page. Material changes will also be noted in the app’s release notes.

14. Contact

Questions about privacy: bluoliud@mobry-network.cyou.