Security
Security and privacy at Spendika
HTTPS
The live Spendika website is intended to be served over HTTPS so data is protected in transit.
Authentication
Account areas require authenticated access. Users should keep passwords secure and use trusted devices.
Receipt handling
Receipt images are stored under backend-controlled receipt storage and served through receipt file routes.
Data export
Expense export routes exist for CSV and PDF reporting.
Data deletion
Users can request help through the contact page. Product-level self-service deletion should remain a future improvement unless fully implemented.
Bank accounts
Spendika does not currently claim live bank-account connection or open-banking aggregation. Users enter or import data themselves.
Security reports
Report suspected issues through the contact page with enough detail to reproduce the concern.