Privacy Policy
1. Introduction
Spenderlog is provided by DVJ Insights ApS (CVR 38453041), hereinafter referred to as "DVJ Insights".
DVJ Insights values your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you have regarding your personal data.
By using Spenderlog, you acknowledge that your personal data will be processed as described in this Privacy Policy.
2. Data Controller
DVJ Insights ApS
Ørestads Boulevard 73
2300 Copenhagen
Denmark
DVJ Insights is the data controller responsible for the processing of your personal data. Only authorised employees have access to personal data where necessary to:
-
provide the Spenderlog services;
-
assist users;
-
maintain and improve the application;
-
comply with legal obligations.
3. What personal data we collect
Depending on how you use Spenderlog, we may process the following categories of personal data.
Account information
We process information such as:
-
name
-
email address
-
username
-
password
-
telephone number (where applicable)
This information is required to create and manage your account.
Profile information
You may choose to provide profile information, including:
-
household composition
-
housing type
-
income category
-
education
-
employment status
-
region
-
year of birth
-
gender
This information allows Spenderlog to personalise your experience and provide relevant comparisons with similar households.
Purchase information
We process purchase-related information, including:
-
digital receipts
-
product information
-
transaction information
-
spending patterns
This information may be:
-
uploaded by you;
-
retrieved from retailer accounts that you choose to connect;
-
or, where you have explicitly authorised us, requested directly from retailers on your behalf using available technical methods.
Purchase information is processed solely to provide and improve your purchase overview and related features within Spenderlog.
Technical information
We also collect technical information including:
-
device information;
-
operating system;
-
app version;
-
cookies and similar technologies;
-
IP address;
-
log files;
-
usage statistics.
This information helps us maintain, secure and improve our services.
4. Why we process your personal data
We process profile information necessary to provide the Spenderlog service and its comparison functionality, including:
-
provide your personal purchase overview;
-
retrieve and organise purchase information;
-
improve data quality and completeness;
-
provide spending insights;
-
generate nutritional insights;
-
calculate sustainability indicators such as CO₂ footprint;
-
compare spending with similar households;
-
improve and develop Spenderlog;
-
provide customer support;
-
comply with legal obligations.
5. Legal basis for processing
DVJ Insights processes personal data on different legal bases depending on the processing activity. These include:
Performance of our agreement
Most processing is necessary to provide the Spenderlog services you request when creating an account.
Processing of account information, profile information and technical information described in section 3 is necessary to provide the Spenderlog services you request when creating an account and is based on the performance of our agreement with you (Article 6(1)(b) GDPR).
Explicit consent
Where you choose to enable the direct retailer connection functionality through a separate authorisation step in the application (see section 6), you give your explicit consent for Spenderlog to request and retrieve your purchase history directly from the retailer or retailers specifically identified to you at the time of the authorisation, on your behalf (Article 6(1)(a) GDPR).
During initial onboarding, one authorisation may apply to multiple retailers, provided that each retailer covered by the authorisation is clearly identified before the consent is given. If you connect an additional retailer at a later stage, a separate authorisation will be requested for that retailer.
The authorisation may be withdrawn at any time through the application.
Legal obligations
Where required, we process personal data to comply with applicable laws.
6. Authorisation to retrieve purchase information
When you enable the relevant functionality during onboarding or within the application, you authorise Spenderlog to act on your behalf when requesting purchase history and related purchase information from the retailer or retailers specifically identified to you at the time of the authorisation.
During initial onboarding, one authorisation may cover multiple retailers, provided that each retailer is clearly identified before the authorisation is given. If you connect an additional retailer at a later stage, a separate authorisation will be requested for that retailer.
The authorisation is solely intended to provide and improve your purchase overview and related services within Spenderlog and may be withdrawn at any time through the application settings.
Where technically possible, secure retailer integrations are preferred over repeated credential-based access.
7. Your rights
You have the right to:
-
access your personal data;
-
correct inaccurate information;
-
restrict processing;
-
object to processing where applicable;
-
withdraw your consent;
-
receive your data in a structured, commonly used and machine-readable format (data portability).
You may exercise these rights by contacting mail@spenderlog.com
8. Withdrawal of consent
Where processing is based on your consent, you may withdraw that consent at any time.
You may withdraw your authorisation for Spenderlog to retrieve purchase information from any retailer for which you have provided authorisation through the application.
Withdrawal does not affect processing that took place before your withdrawal.
9. Sharing of personal data
We do not sell your personal data. Personal information such as your name, email address and contact details is never disclosed to retailers, manufacturers or other commercial parties for marketing purposes.
Where you have explicitly authorised us, Spenderlog will request your purchase history from the retailer or retailers covered by that authorisation on your behalf. The information exchanged for this purpose is limited to what is strictly necessary to identify you to the retailer and to receive the relevant transaction data.
We may share anonymised or aggregated information with third parties. Such information can never be used to identify you personally.
10. Data processors
DVJ Insights uses carefully selected data processors who process personal data on our behalf.
All processing takes place under appropriate data processing agreements and security measures in accordance with applicable data protection legislation.
11. Security
DVJ Insights applies appropriate technical and organisational measures to protect your personal data. Where Spenderlog stores or otherwise has access to your login credentials for a connected retailer, such credentials are subject to a particularly high level of security, given the sensitivity of holding third-party account passwords. These include, where appropriate:
-
encryption;
-
access controls;
-
monitoring;
-
logging;
-
regular security reviews.
DVJ Insights is ISO 27001 certified and continuously works to maintain a high level of information security.
12. Retention
We retain your personal data only for as long as necessary to provide the Spenderlog services or comply with legal obligations. As a general guide: account information is retained for as long as your account is active and up to 12 months thereafter; purchase information and profile information are retained for as long as your account is active, unless you withdraw your authorisation or consent earlier; technical information such as log files is generally retained for up to 12 months; and questionnaire contact preferences are retained until you withdraw your consent.
If you delete your account, your personal data will be deleted unless retention is required by law or for legitimate documentation purposes.
13. Contact
If you have questions regarding this Privacy Policy or wish to exercise your rights, please contact:
You also have the right to lodge a complaint with the Data Protection Authority in your country of residence.
September 2026