What Sparsy is
Sparsy is a household ledger: you record your accounts, income, expenses, transfers and budgets, and can share accounts with people in your household. It does not connect to banks and never moves money.
What we collect
- Your account: name, email address, a profile picture if you add one, your language, theme and primary currency. Passwords are stored only as a salted hash.
- What you enter: accounts, transactions, notes, categories, budgets, repeats, exchange rates, invitations and who recorded or changed each entry.
- Signing in with Google or Apple: the account identifier the provider gives Sparsy, your email address, whether the provider has verified it, and your name. Sparsy asks only for the basic openid, email and profile permissions.
- Security records: sign-in sessions, single-use reset links and email codes (stored only as hashes), and for 15 minutes the email and network address of failed sign-in attempts, to slow down guessing.
- Notifications: if you turn them on, the push subscription your browser gives Sparsy.
How we use it
Only to run Sparsy for you: to sign you in, show and calculate your books, share the accounts you choose to share, send the emails you ask for (sign-in codes and reset links) and the reminders you turn on, and keep the service secure. Sparsy has no advertising and does not sell or rent your information. It counts page visits with Vercel Web Analytics, which sets no cookies and does not identify you, to see which pages are used.
Information from Google
Information Sparsy receives from Google is used only to sign you in and to create or find your Sparsy account. It is not used for advertising, not shared with others except as needed to run the service described here, and not used to train any model. Sparsy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who can see your information
- People you share an account with see that account, its transactions and notes, and the names, emails and pictures of everyone on it. Accounts you do not share stay private to you.
- Service providers that run Sparsy for us and process data only on our instructions: hosting and visit counts (Vercel), the database (Turso), email delivery (Resend), error reports (Sentry, which receives technical details of a failure, not your books) and your browser's push service for notifications.
- Authorities, if the law requires it.
Cookies and storage on your device
Sparsy uses only cookies it needs: one that keeps you signed in (30 days), one each for your language and theme, and a short-lived one during a Google or Apple sign-in. Your browser also keeps a copy of your books for offline use, unsent changes, and small preferences such as dismissed reminders; salaries typed into the shared account calculator stay only on that device.
How long we keep it
Your account and books are kept until you delete your account. Deleting it removes your accounts, entries, categories, settings, picture and sign-ins at once; entries you recorded on accounts shared with others stay in their books, credited to a deleted user with no name, email or picture, so their balances do not change. Sessions end after 30 days, reset links after an hour, codes after 15 minutes, and failed sign-in records after 15 minutes.
Your choices and rights
You can change your name, email, picture and password in Settings, edit or remove anything you entered, and delete your account under Settings → Account. To get a copy of your information, or for help deleting it, contact us by email at ser.op.te@gmail.com. Depending on where you live you may have further rights, such as to object to or restrict processing, or to complain to a data protection authority.
Security
Connections are encrypted, passwords and tokens are stored as hashes, and sign-in attempts are rate limited. No system is perfectly secure, so use a password you do not use elsewhere.
Children
Sparsy is not meant for children under 16, and we do not knowingly collect their information.
Changes
If this policy changes, the date above changes with it. Significant changes are announced in the app.
Contact
Questions about this policy go to Sergio Oporto, by email at ser.op.te@gmail.com.