Security
Security and privacy at Spendika
HTTPS
Spendika is served only over HTTPS, so data is encrypted in transit between your device, the website and the mobile apps.
Sign-in and two-factor authentication
Account areas require you to sign in. You can turn on two-factor authentication with an authenticator app, and the iPhone and Android apps can be locked with Face ID, a fingerprint or your device screen lock.
Receipt handling
Receipt images are stored on Spendika servers and are only served to the signed-in account that uploaded them.
Data export
You can export your expenses as CSV and PDF reports at any time.
Data deletion
You can delete your account yourself in Settings on the website or in the mobile apps. This permanently removes your expenses, receipts, budgets, goals and other records.
Bank accounts
Spendika does not currently claim live bank-account connection or open-banking aggregation. Users enter or import data themselves.
Security reports
Report suspected issues through the contact page with enough detail to reproduce the concern.