Privacy policy
How SettlerSpend uses data in the mobile apps and on this information website.
Controller and contact
The controller is Marek Jánošík (mm4fStudio). Contact mm4fstudio+settlerspend@gmail.com about privacy and data requests.
Account and content
We process account identifiers, profile name, email and linked sign-in methods. Features may store households, members, expenses, income, accounts, shares, payments, dates, tasks, contacts, recipes, meals, timetables and rewards. Only enter information you are entitled to share.
Purposes and legal grounds
Account access, synchronization and collaboration provide the service under its terms. Security and operational records protect accounts and service reliability on the basis of legitimate interests. Legal obligations are fulfilled where applicable. You control optional device permissions.
Device and cloud
Mobile apps use a local database. Enabling cloud sync sends changed records to the backend; disabling sync does not erase previously uploaded records. Sign-in and some account actions require internet. Receipt recognition runs on the device and its photo is not uploaded to our server. Saved receipt text items can be synchronized.
Sharing and the app family
Authorized members see records according to access permissions. A private budget limits visibility, but a household owner can delete the entire household. SettlerSpend and NomadSpend share sign-in identity and profile name while functioning independently. You explicitly initiate trip-summary transfers.
Children
An adult manages the child's tasks, virtual rewards and access. Where browser access is enabled, the child enters a short-lived code from the adult's app and waits for the adult to confirm the browser. Child access is limited to the child's tasks and rewards, without household finances. The adult can revoke access.
Service providers
Railway provides hosting and database infrastructure; Resend delivers sign-in emails. Apple or Google policies also apply when you choose their sign-in methods. Infrastructure providers may process technical connection information, including outside the EEA. Contact us for applicable supplier and transfer information.
Retention and deletion
Records are retained while the service is used. Household or budget deletion first revokes access; internal records may remain until physical cleanup. SettlerSpend account deletion has a separate confirmed process and does not delete an active NomadSpend account. Shared history can remain for others after personal links are removed. Security and legal obligations may affect retention. You can also request deletion by email.
Technical data and this website
Public information pages use no cookies or advertising/analytics trackers. Child browser access uses a necessary HttpOnly session cookie (up to 90 days), local appearance and goal preferences, and tab storage for an unfinished action so it can be retried safely. Codes are not saved in browser storage or URLs. Sign out on shared computers. The service records important changes and last app activity; hosting may retain access and security logs.
Your rights
Where applicable, you can request access, correction, erasure, restriction and portability, or object to processing. We may verify your identity. You may complain to the Slovak Office for Personal Data Protection or your competent supervisory authority. Updates to this policy will appear here.
Updated 19 September 2026