Data & AI Learning Policy

The learning loop, plainly

Every bank words its messages differently. Spenlio ships knowing many formats, and learns new ones from messages that users with sharing turned on contribute. What it learns benefits everyone with the same bank: once a format is learned, those messages are read on-device for every user — and stop being shared at all.

What's sent — only if you turn sharing on

Only messages from banks and services that Spenlio hasn't learned to read yet, once they're older than your chosen waiting period (1 hour by default, up to 1 year). Because these are whatever couldn't be parsed, they can include a bank's one-time passwords, security codes, or promotional messages — not just transactions. Each carries its text, sender name, and received time, plus technical references (a message id, ordering, content fingerprints, and per-sender message counts) that prevent duplicates and let Spenlio's servers decide what to accept before anything is sent.

The waiting period matters: by the time a one-time password could ever be shared, it has long expired. And senders only become candidates for learning at all once they show a meaningful history of institutional messages on your phone.

What's never sent

• Personal conversations. Any sender that's a phone number is treated as a person and always excluded — no matter what the message contains.
• Anything Spenlio already reads. Learned formats are handled on-device and not shared.
• Your ledger. Merchants, amounts, balances, notes, corrections, category rules, and entered account or card numbers are never uploaded.

How shared messages are used

Shared messages train Spenlio's systems — including AI models — to read your banks and to tell real transactions from codes and promos, keeping those out of your spending. Processing is automated, run by Spenlio and by AI providers under contract with Spenlio — who may use your messages only to do this work for Spenlio, not for their own products or purposes — and may happen outside your country.

The purpose limit is the promise: your messages are used only to improve Spenlio. Never sold, never shared with advertisers or data brokers, never used to advertise to you or profile you. Spenlio keeps only what training and its review need.

Stopping — and what stays

You can stop sharing at any time in Settings → Message sharing. Stopping cancels anything queued and prevents future uploads.

Sharing that has already happened is permanent. Spenlio is a small service and does not offer individual access, correction, or deletion of shared messages — copies already received stay for training and review, and what Spenlio has learned stays part of Spenlio. Shared messages are not used to identify you. Treat sharing as permanent before you turn it on; the consent screen in the app says the same thing.

Consent, versioned

Sharing is enabled only through a consent screen that records the policy version you accepted. If what sharing means ever changes materially, Spenlio re-asks for consent before anything further is shared. Rights that your local law grants you are not limited by this policy.