Privacy Policy

In the current version of SpendClear, purchase-check information is processed locally in your browser during normal operation. Bacenik may receive your email address and technical information reasonably necessary to operate and secure the service.

Complete Privacy Policy

Effective date: May 19, 2026. Last updated: June 11, 2026.

1. Introduction

Bacenik LLC ("Bacenik," "we," "us," or "our") operates Bacenik products, applications, websites, APIs, and related services (collectively, the "Services"). This Privacy Policy describes how information may be collected, used, stored, disclosed, and otherwise processed when you access or use the Services.

This policy is intended to reflect our operational practices as of the date listed above. Your rights and our obligations may vary based on applicable law, your location, and product configuration.

Product-specific terms. Individual Services may process information differently. The SpendClear Product Schedule (Section 19) applies to the SpendClear web app in the current version and controls for SpendClear where it describes that product.

For purposes of the EU/UK GDPR and similar laws, Bacenik LLC is the data controller for personal data processed under this policy, unless we state otherwise in a separate agreement.

Contact: Privacy & data requests · General inquiries — both reach info@bacenik.com.

2. Local-first architecture

Where supported by product configuration, portions of the Services use a local-first design. Certain content—settings, notes, prompts, guardrails, histories, or configuration—may remain on your device rather than centrally stored by Bacenik.

Even with local-first design, information may still be processed or transmitted when you use cloud-connected features, including for example:

• hosting and content delivery;
• authentication (where accounts exist);
• temporary processing needed to provide the service;
• diagnostic and error logs;
• synchronization (where enabled);
• support communications;
• analytics (where enabled);
• security monitoring and abuse prevention;
• payment processing (where applicable);
• infrastructure routing and disaster recovery (where applicable).

You should assume information submitted to cloud-connected functionality may transit through third-party infrastructure providers.

3. Categories of information we may process

Depending on the Service and your choices, we may process:

A. Account and identity information (where accounts are offered)

• name, email address, organization name;
• account identifiers, authentication credentials (hashed or tokenized where applicable);
• subscription or license status.

B. Device and technical information

• browser type, operating system, IP address, device identifiers;
• error logs, diagnostic events, session metadata, performance telemetry (where enabled).

C. Usage information

• feature interactions, preferences, settings, usage patterns (where analytics are enabled);
• export requests and support interactions.

D. User-provided content

• prompts, notes, uploaded files, feedback, support messages, configuration or workflow data.

Do not submit export-controlled, classified, protected health, or other highly sensitive regulated information through consumer Services unless we have agreed in writing that the Service supports it.

4. AI and third-party processing

Certain Services may use third-party AI or infrastructure providers.

Where supported by provider terms and configuration, Bacenik may configure providers to:

• limit retention of submitted content;
• opt out of model-training use of customer content (where offered);
• reduce unnecessary human review and restrict logging beyond operational needs.

Provider practices vary by vendor, region, tier, and configuration. Bacenik does not guarantee that a third party will never retain, inspect, or process information beyond our intended configuration.

SpendClear (current version): AI features are not enabled for purchase-check information in the current SpendClear build. See Section 19.

5. How we use information

We may use information to:

• provide, operate, and maintain the Services;
• authenticate users and manage accounts (where applicable);
• improve reliability, performance, and security;
• detect abuse, fraud, or security incidents;
• respond to support and privacy requests;
• comply with law and enforce our terms;
• process payments and subscriptions (where applicable);
• develop and improve product functionality using aggregated or de-identified insights where permitted.

We do not sell personal information for monetary compensation. We do not use personal information for cross-context behavioral advertising as defined under applicable California law.

Legal bases (EEA/UK): Where GDPR applies, we rely on contract performance, legitimate interests (e.g., security and operation), consent where required, and legal obligation.

6. Cookies, local storage, and similar technologies

Depending on configuration, we and providers may use cookies, local storage, session identifiers, analytics, or telemetry to deliver, secure, remember preferences, understand usage (where enabled), and diagnose issues. You may control some settings in your browser or device.

7. Data retention

We retain information only as long as reasonably necessary for operational, legal, security, or support purposes.

On-device data remains until you delete it, clear site data, or uninstall—unless a Service syncs to the cloud.

8. Data security

We use reasonable administrative, technical, and organizational measures designed to protect information, which may include encryption in transit (TLS), access controls, monitoring, and vendor requirements. No method of storage or transmission is completely secure; we do not guarantee absolute security or uninterrupted operation.

9. International transfers

Information may be processed in the United States and other countries where we or providers operate. Where required, we use appropriate safeguards for transfers from the EEA/UK (such as standard contractual clauses).

10. California privacy rights (CCPA/CPRA)

California residents may have rights to access, delete, correct, and obtain a portable copy of personal information, and to limit certain uses, subject to exceptions. We do not sell personal information for monetary compensation or knowingly share it for cross-context behavioral advertising as defined under applicable California law.

Submit requests to info@bacenik.com. We may verify your request before responding.

11. GDPR and international rights

Depending on applicable law, you may have rights to access, correct, delete, object to or restrict processing, portability, withdraw consent, and complain to a supervisory authority. Contact info@bacenik.com. Information stored only on your device may require in-product export or clear controls.

12. Children's privacy

The Services are not directed to children under 16, or the higher minimum age required in your jurisdiction. We do not knowingly collect children's information in violation of applicable law. Contact info@bacenik.com if you believe a child has provided information to us.

13. Export, access, and deletion

Where supported, you may export data in-product, request access or deletion of information we hold, or clear local data in settings. Some information cannot be deleted immediately due to legal obligations, backups, fraud prevention, or security investigations.

14. Companies that help us operate the service

We use third-party service providers that process information on our behalf to help provide, operate, secure, support, and improve the Services. Providers may change over time.

Depending on the Service and configuration, categories of service providers may include:

• Hosting and content delivery providers — to deliver websites, applications, and related content.
• Cloud infrastructure and database providers — to operate server-side systems, authentication records, storage, routing, backups, and reliability functions.
• Authentication and email delivery providers — to support sign-in, account access, transactional emails, and security notices.
• Security, diagnostics, and monitoring providers — to detect abuse, diagnose errors, maintain availability, investigate incidents, and protect the Services.
• Exchange-rate data providers — to provide display currency conversion where enabled.
• Payment processors — to process subscriptions or purchases where payment features are enabled.
• Analytics providers — to measure usage and improve the Services where analytics are enabled.
• AI providers — to support AI features where separately enabled for applicable Services.
• Support and communication providers — to process support messages, privacy requests, and operational communications.
• Professional advisers and compliance providers — to support legal, accounting, tax, audit, insurance, risk management, and compliance functions.

We require service providers to process information only as permitted by contract or applicable law. Some providers may process technical information, such as IP address, device information, browser information, request metadata, logs, and similar operational data, to deliver and secure the Services.

SpendClear (current version): See Section 19 for product-specific processing. When you choose a display currency different from your home currency, SpendClear may request reference exchange rates using currency codes. Purchase amounts are not sent for exchange-rate lookups during normal operation.

15. Professional guidance disclaimer

Service outputs are informational unless we agree otherwise in writing. The Services do not provide legal, medical, financial, tax, investment, or compliance certification advice. You remain responsible for your decisions and for obtaining professional advice where appropriate. See the Financial disclaimer.

16. Policy changes

We may update this policy. We will change the Last updated date and, where appropriate, provide in-app or website notice for material changes.

17. Contact

Privacy requests and data-subject rights: info@bacenik.com
General product questions: info@bacenik.com

Both addresses currently route to the same operational inbox. Please include "Privacy request — SpendClear" in the subject line for privacy requests so we can respond promptly.

18. Important limitation

This policy is an operational disclosure and does not create contractual guarantees or security warranties beyond those required by law. Additional terms may apply to enterprise, regulated-industry, or separately contracted deployments.

19. Product schedule — SpendClear (current version)

This schedule applies to the SpendClear web application in the current version. It supplements Sections 1–18 and controls for SpendClear where stated. Future versions may introduce additional features described in updated privacy disclosures before deployment.

19.0 Defined terms

Normal operation. Normal operation means ordinary product use, excluding support submissions, bug reports, user-initiated exports, security incidents, misuse, legal requests, or technical diagnostics.

19.1 What SpendClear is

SpendClear provides educational, rule-based purchase-clarity signals from information you enter. It is not a bank, lender, broker-dealer, investment adviser, credit-repair organization, consumer reporting agency, or money-transmitter. See the Financial disclaimer.

19.2 Current version configuration

19.3 Information in your browser environment

In the current version, the following are stored locally within your browser environment (local or session storage) and are not stored on Bacenik servers during normal operation:

• financial guardrails (income, obligations, optional savings);
• purchase check inputs, results, and timestamps;
• period ledger (money already spent this pay period);
• Category Intake records and in-progress intake sessions;
• savings clarity reflections you attest to (including optional dollar totals);
• Financial Context snapshots and provider connection metadata (when Premium access is enabled);
• appearance, display, and feature settings;
• optional private notes and in-app clarity feedback you save;
• reminder preference (local only);
• Smart Scan trial preference (local only, if you enable it);
• trust diagnostics (session counters and violation types only—no amounts—stored locally for optional export).
• Debt Exit Nigeria (Premium Nigeria): debt map, stability snapshots, active plan, weekly check-ins, recovery notes, and graduation state — see Section 19.6.1.

Your controls: Settings → Export my data, Export trust diagnostics, and Clear all local data. Export my data includes a versioned manifest and the categories listed above (operational caches such as FX or tax lookup caches are disclosed in the manifest but not included in the main bundle). Clear all local data removes every documented SpendClear key on this device, including Financial Context cache and trust diagnostics. See the plain-English Your Data Rights guide and this section for the current user-facing summary of SpendClear data rights.

19.4 Hosting, display FX, email, and authentication

When you load SpendClear from our deployment, hosting and infrastructure providers may process technical data, such as IP address, user agent, request metadata, and similar operational information, to deliver and secure the site.

When you sign in with email, Bacenik's authentication, email delivery, and infrastructure providers may process information needed to deliver sign-in messages, maintain authenticated sessions, and store authentication records.

Bacenik does not receive your purchase-check amounts or guardrail numbers during normal operation. If you email us at info@bacenik.com, we process your message and email address to respond. Certain technical logs, support submissions, or user-initiated exports may contain information voluntarily provided by you.

If you set a display currency different from your home currency, the app may fetch reference exchange rates through Bacenik-controlled service routes or third-party exchange-rate services. Requests include currency pair codes and standard request metadata, not your entered amounts. Rates may be cached briefly on your device for offline display; stale rates may be labeled in the UI. Scenario scores use your home-currency inputs.

If you enable Smart Scan (trial) or use Category Intake (preview), the app may request camera access to read a barcode and/or price tag. Processing uses the browser's barcode APIs (where available) and on-device OCR technology. Camera frames are processed locally in your browser and are not intentionally uploaded to Bacenik by SpendClear or stored by Bacenik during normal operation. Bacenik does not use Smart Scan images or camera frames to identify users. Camera permission is controlled by your browser or device and may be revoked through device or browser settings. Detected amounts and item names are suggestions only — you confirm or edit before a check or basket line is added; scoring is unchanged. With Premium access, an optional trip tax rate you select is applied in your browser environment to your basket subtotal (not a server tax lookup; not your receipt).

19.5 Cookies, session technologies, and storage

SpendClear uses local storage for purchase-check functionality. For authenticated use, we use required session technologies, including cookies and httpOnly session identifiers, to keep you signed in and secure the service. These technologies are required for sign-in and cannot be turned off while using authenticated features. They are separate from purchase-check information stored locally in your browser environment. The current version does not use advertising cookies or third-party analytics platforms. Essential hosting and security logs may still be generated as described in Section 19.4.

19.6 Retention (SpendClear current version)

19.6.1 Debt Exit Nigeria (Premium Nigeria module)

SpendClear Debt Exit Nigeria is an optional Premium Nigeria module. It helps you map obligations, estimate safe repayment room, and choose a next planning step. It is not a lender, payment processor, or debt settlement service.

Stored on your device: debt map entries (balances, due dates, minimums, labels you enter), stability snapshots (income and essential costs you enter), active plan and weekly check-in responses, recovery mode notes, and graduation state. These use the documented Debt Exit storage keys and are included in Export my data and removed by Clear all local data.

Not sent to Bacenik during normal operation: debt balances, income figures, repayment amounts, or bank credentials. Debt worksheet content remains on your device unless you export it or voluntarily include it in support correspondence.

Account and billing: Premium Nigeria subscription status (email-linked account) is stored server-side for authentication and entitlement, consistent with Section 19.2. This does not include your debt map content in the current version.

Debt Exit provides organizational clarity and tradeoff explanation. It is not financial, legal, or tax advice. You choose whether and how to act.

19.7 Your rights

Data stored in your browser environment: use in-app Export and Clear. Other requests: info@bacenik.com.

19.8 Related documents

Terms of Service · Financial disclaimer

© 2026 Bacenik LLC. All rights reserved.