How SmartSpend AI handles your data

Last updated September 29, 2026

This website does not create user accounts. If you use the project enquiry form, the details you provide and any optional image are stored in a private enquiry inbox that only we can access, and we are notified by email so we can respond to your request. The inbox is hosted on Amazon Web Services in the United States. They are not published on this website and are deleted automatically after a limited time. If you contact us by phone or email instead, your information is handled through those services and used to respond to your request.

If you join the waitlist, your name and email address are kept in the same private inbox and used only to tell you when SmartSpend AI is available. They are not shared or published.

The SmartSpend AI app

SmartSpend AI is in private testing. This section describes how the app handles your data today, and it will be updated before a public launch. The paragraphs above cover this website: the waitlist and the contact form.

What the app collects

• Your account details: your email address, and your name if you sign in with Google.
• The statements and receipts you choose to upload: PDF bank and credit card statements, and photos of receipts.
• What is read from them: transactions, balances, merchant names, categories, recurring charges, and the goals and settings you set.
• Whether you have a subscription, if you subscribe. Payments are handled by Stripe.
• It does not collect your online-banking username or password, and it never connects to your bank.

Who else handles your data

These providers process data on behalf of SmartSpend AI so that the app can run:

• Amazon Web Services (AWS) hosts the app's sign-in, database, file storage, servers and system logs, in the United States (Oregon).
• Google's Gemini AI service reads every statement and receipt you upload: the PDF or photo is sent to Google for that purpose. Merchant names, so spending can be sorted, and computed summary figures, so a plain-English summary can be written, are also sent to Google. Google's use of data sent to its Gemini API is governed by its Gemini API terms. If you sign in with Google, Google handles that sign-in too.
• Stripe processes subscription payments.

Where your data goes

The app's servers and storage are in the United States, and Google processes data sent to its AI service on its own systems. Your information is therefore handled outside Canada, and courts and authorities in those countries can access it under their laws.

How long it is kept

• The uploaded PDF or photo: the copy in our storage is deleted once it has been read, and in any case within a day.
• What was read from it (transactions, balances, merchants and so on): kept in your account until you ask for it to be deleted.
• System logs: the servers keep technical logs, which can include details read from statements, so that the service can be operated and fixed.
• Google and AWS keep the data they receive according to their own terms and policies.

Who can see your data

Other users of the app cannot see your data: each person can reach only their own records. The person who runs SmartSpend AI has administrator access to the AWS account, so can technically read the stored data and the system logs. AWS and Google also have technical access to data on their own systems, under their own terms.

Your choices

You choose which statements to upload, and you can stop at any time. To ask what is held about you, or to have it corrected or deleted, email weyermannx@gmail.com.