Spent privacy policy
Spent works on your device. This page explains exactly what it stores, what it sends and what it never collects.
What it uses on your device
When you press Connect, Spent opens the app's orders page and reads your order list using the sign-in you already have. It never sees or stores your password, phone number, email or address. On Zepto a small script keeps the order-list responses the page itself loads so Spent can read them.
Stored in your browser:
- Your orders as read from those sites (dates, amounts, shop or restaurant, item names) and your settings.
This data is kept in Chrome's extension storage on your computer. Settings may also sync across your own devices if you use Chrome sync; that is handled by Google, not by us. Uninstalling the extension removes the local data.
What is sent
Spent can send anonymous usage events to PostHog, a product analytics service, so we can see which features are used and fix what is broken. These events contain: connect, sync and story use, and rough counts such as how many orders were found, never amounts or items. Each event also carries the extension name and version, your browser language, the number of days since install and a random identifier created on your device the first time you install.
The identifier is not linked to your name, email or any account. Like any web request, an event reaches PostHog with your IP address, which PostHog uses to estimate your country and city.
Never collected:
- Orders, amounts, restaurants or items
- Passwords, phone numbers, emails or addresses
- Your account on any shopping site
When you uninstall, Chrome opens a short feedback page on bye.stryvo.tech. The address includes the extension name, its version and that random identifier so an answer can be matched to the install. Answering is optional.
Permissions
| Permission | Why we need it |
|---|---|
| Amazon, Flipkart, Swiggy, Zomato, Zepto and Blinkit | Needed to read your own order history on those sites after you click Connect or Sync. |
storage | Saves your orders and settings in your browser. |
alarms and notifications | The optional monthly reminder to sync. |
| api.lemonsqueezy.com (optional) | Only requested if you activate a Lemon Squeezy licence key, to check that the key is valid. |
Stryvo Pro
Spent has a free plan and an optional paid plan, Stryvo Pro. If you buy it, payment is handled by Razorpay or Lemon Squeezy. We never see your card, UPI or bank details.
- A Razorpay licence key is checked on your device against a public key. Nothing is sent anywhere to check it.
- A Lemon Squeezy licence key is sent to Lemon Squeezy to check that it is valid, together with a device label such as "Chrome Cutoff". Chrome asks your permission first, and it checks again every few days.
- Your licence key is stored in your browser and is never included in the analytics events. Those only note things like that the plans page was opened or that a key was activated.
Third parties
- PostHog receives the anonymous events described above, and nothing else.
- Razorpay and Lemon Squeezy process payments for Stryvo Pro under their own privacy policies. Lemon Squeezy checks licence keys. When you ask
pro.stryvo.techfor a Razorpay key, it checks your payment id with Razorpay and returns the key. It stores nothing. - The sites Spent works on see the same requests your browser would normally make. We never receive them.
We do not sell or rent data, do not use it for advertising, creditworthiness or lending, and do not transfer it to anyone except as described here or if the law requires it. Use of information stays limited to providing and improving Spent's single purpose, in line with the Chrome Web Store User Data Policy.
Your control
- Turn off Share anonymous usage data in Spent's settings. No further events are sent.
- Delete or export your local data from the settings, where the extension offers it, or uninstall to remove it.
- Events already sent carry only a random identifier, so we cannot look you up by name. If you want them deleted anyway, write to support@stryvo.tech.
Children
Spent is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes in a way that matters, the date at the top changes and the extension's store listing is updated. Questions: support@stryvo.tech.