Privacy policy
Effective 1 October 2026 · plain language first, full text below
Your expenses, groups and account details. That's the whole list.
Sell data, show ads, or read your contacts without asking first.
1. What we store
Expenses, splits, payments and comments you enter; your name, phone or email; and which groups you belong to. Everything lives on your device first and syncs encrypted to our servers so your other devices and your group can see it.
2. What we don’t do
We do not sell or share personal data. There are no advertising identifiers in the app. Contacts are never uploaded unless you invite someone, and then only that one number.
3. No-app members
A no-app member is a name and an optional phone number that the group tracks. If that person later joins with the same number, they claim their history and control it from then on.
4. Receipts and images
Receipt text recognition runs on your device. Images you attach are stored encrypted and are visible only to that group’s members.
5. Your controls
Export everything as CSV or PDF at any time. Delete your account from settings and your data is gone from our servers within 30 days. Groups keep the shared history you contributed to, as the other members’ records.
6. Security
Data is encrypted in transit and at rest. Access to production is limited to staff who need it, every lookup is logged, and the internal console is built so that it cannot render an amount, a description, a member name, a receipt or a comment at all.