Draft version for the demo. The final text must be reviewed by a lawyer before launch. In case of any difference, the Albanian version prevails.
1.Who we are
The data controller is Spendlivo, a personal initiative of [Author's first and last name], Tirana, Albania. For any privacy question: [email protected].
2.What data we collect
We do not ask for or store bank card data or bank credentials.
3.Why we use it and the legal basis
- To provide the service (accounts, statistics, splitting expenses, reminders): performance of our contract with you.
- For security (two-step verification, fraud prevention, login records): our legitimate interest in protecting accounts.
- For notifications (bills, budgets, activity in spaces): according to the preferences you choose in your Profile.
- To improve the product: only aggregated, anonymous statistics.
- For legal obligations, when the law requires it.
4.Who sees the data
- Space members only see that space's expenses, bills and balances. They don't see your personal finances, budgets or other spaces.
- Spendlivo administrators only see account data (name, email, status) and aggregated statistics. They don't see your amounts, transactions or budgets. Every action they take is logged.
- Service providers (server hosting, sending emails and SMS) process the data only on our instructions and under processing agreements.
- Authorities, only when we are required to by law.
We never sell your data and we don't use it for advertising.
5.How long we keep it
- For as long as your account is active.
- After your account is deleted, personal data is deleted within 30 days. Backups are overwritten within 90 days.
- Shared expenses you added remain in the space so that other members' balances are not broken, but your name is replaced with “Deleted user”.
- Security logs are kept for up to 12 months.
6.How we protect it
- Encrypted connections (HTTPS) and data encrypted at rest.
- Passwords stored with BCrypt, never as readable text.
- Two-step verification (authenticator app or SMS) and limits on login attempts.
- Restricted and logged staff access.
7.Your rights
You have the right to:
- see the data we hold about you;
- correct inaccurate data (your name can be changed in your Profile);
- get a copy of it (Profile → Export transactions);
- ask for the deletion of your account and data;
- object to or restrict processing in certain cases.
Write to [email protected]. We reply within 30 days. If you are not satisfied, you can complain to the Commissioner for the Right to Information and Personal Data Protection (idp.al).
9.Children
Spendlivo is not for people under 16 and we do not knowingly collect their data.
10.Changes to this policy
When we change this policy in a significant way, we notify you by email or in the app before the changes take effect.
Questions? Write to us at [email protected].
Back to the home page
