GSpend

Privacy

GSpend stores the information needed to run shared spending groups: your email address and display name, memberships, participants, expense records, settlement records, saved receiving/payment instructions, and GSpend notification history.

Why this data is used

• To let you sign in and recover access across devices.
• To keep shared spending groups synchronised between members.
• To calculate shares, balances and settlement instructions.
• To show payment-receiving details only when another signed-in member currently owes you money.
• To preserve an accurate shared financial history for the people in a spending group.

Who can see what

Members of a spending group can see that group's participants, expenses and settlement information. Saved payment-receiving details are not generally visible to the group; GSpend only exposes them to an authenticated person who currently has a settlement payment due to you.

Service providers

GSpend currently uses Supabase for authentication, database and server-side notification services and Vercel to host the web app. Exchange-rate requests are made to the Frankfurter currency-rate service when a current conversion is requested. Device push delivery is routed through the push service used by your browser/operating system. If email notifications are enabled, outbound notification emails may be delivered through Resend.

Account deletion

You can request deletion from Account settings. Your login, profile and saved payment methods are removed. Shared financial records may remain with your account link removed so other members' historical balances remain correct. If you own a spending group with other account members, transfer ownership before deleting your account.

Notifications: If you enable push notifications, GSpend stores a device push-subscription endpoint and browser-generated encryption keys so the push service can deliver alerts to that device. If you enable email notifications, selected GSpend activity may be sent to the email address on your account through our outbound email provider. You can control delivery by activity and channel in GSpend settings.

Terms of use

Use GSpend only for lawful shared-expense tracking. Members are responsible for checking amounts, currencies, exchange rates, participants and settlement instructions before acting on them.

• GSpend does not guarantee that an entered expense or exchange rate is correct.
• Marking a payment “sent” is a statement by the payer; a settlement is treated as confirmed only when the receiver confirms receipt.
• GSpend does not process payments, hold funds, verify bank transfers or resolve disputes between members.
• Do not enter card numbers, PINs, passwords or other secrets into payment instructions.
• Exchange-rate information is provided for convenience and may differ from a bank/card/provider rate.

Group owners can manage access and transfer ownership. Removing access does not erase shared historical records.

Security

GSpend is designed to minimise the amount of sensitive information it needs. It does not store debit or credit card numbers.

• Sign-in uses Supabase authentication and secure email sign-in links.
• Database Row Level Security restricts access to shared group data.
• Payment-receiving details are protected behind authenticated settlement checks rather than being broadcast to every group member.
• The live app is served over HTTPS.
• Account access and settlement-participant status are treated separately so historical records can remain intact when access is removed.

You should still protect access to your email account and device, check settlement details before paying, and avoid storing unnecessary sensitive information in free-text fields.

Cookies & local storage

GSpend does not currently use advertising or analytics cookies. The app uses browser/device storage required for core operation, including keeping your Supabase authentication session available between visits and caching app files for the installable Progressive Web App experience.

Because this storage is required to provide sign-in and installed-app functionality, there is no non-essential cookie-consent banner in the current version. If optional analytics, advertising or other non-essential tracking is added later, this notice and consent behaviour should be updated.

You can clear GSpend's local browser data through your browser/site settings, but doing so may sign you out or remove offline cached files.

Support

For a problem with a specific spending group, contact that group's owner first. During the current private-launch stage, technical support is provided through the person who supplied your GSpend access/invitation.

Before a wider public launch, add the final operator legal identity and a dedicated public support/privacy contact address here.