Privacy policy
Last updated August 14, 2026
What Eatspend is
Eatspend analyzes the food spending in your transaction history and gives you spending insight, a taste profile, and restaurant recommendations. That is the whole product, and this policy covers exactly that.
What we collect
Your email address (from Google sign-in), and transaction data from accounts you connect: amounts, dates, merchant names, categories, and coarse merchant locations. We derive food-specific data from it: which transactions are food, which restaurants they map to, and your spending patterns. Your browser also stores an anonymous product-analytics identifier. We do not attach it to your email or account.
What we never collect
Your bank credentials. Connections go through Plaid; you sign in at your bank, and Plaid gives us read-only access tokens. Those tokens are stored encrypted and are never shown to you, us, or anyone else in plain form outside the systems that use them.
Who we share with
Plaid (to connect your accounts, under their own privacy policy), Google (we look up restaurants to identify where you ate; place details and photos shown in the product come from Google), Stripe (to process paid subscriptions), and PostHog (anonymous product analytics: which path you visited, event names, and a few enumerated properties such as which screen you were on, never transaction amounts, merchant names, or account identifiers). Query strings are stripped. We do not record your screen, capture clicks, or attach analytics to your email. We also send a narrow, enumerated set of structured features to OpenRouter so a language model can phrase a recommendation or help match a merchant name to a restaurant. Those calls never include amounts, dates, account identifiers, or raw transaction rows. We do not sell your data. We do not run ads. Restaurants cannot pay for placement. Your raw transactions are never sent to analytics or AI providers.
Deletion
You can disconnect an account or delete your Eatspend account at any time, yourself, from the product. Deletion is real: your transactions, the analysis derived from them, and the bank connection tokens are removed, and we tell Plaid to revoke access.
Contact
Questions about this policy: privacy@eatspend.com.