Effective September 15, 2026
We process your account email, display name, group memberships, budgets, expenses, contributions, reactions, notifications, device push token, subscription status, receipt images you choose to upload, and limited device or advertising data used to deliver ads to Free accounts.
This information is used to authenticate you, synchronize group records, provide Premium features, send requested notifications and reports, prevent abuse, and maintain the service.
If you choose Google or Apple sign-in, the provider and Supabase process your sign-in identifiers, email address, available profile name, and authentication tokens to create or access your account. Apple may provide a private relay email address. We do not receive your Google or Apple password or request access to Gmail or Google Drive. You can continue using email and password instead.
Financial records are shared with members of the relevant group. Service providers such as Supabase, Expo, RevenueCat, Google Play, Apple, and Google Mobile Ads process limited data needed to provide hosting, notifications, authentication, purchases, and ads for Free accounts.
Receipt images are private to authorized group members. Archived groups are protected for 24 months and scheduled for permanent removal after 36 months. A host can permanently delete a dismantled group immediately after confirming the action. Security logs and backups may expire on a separate operational schedule.
You can correct records you are allowed to manage, leave a group, manage store subscriptions, remove receipts you control, and request account deletion in Settings. Shared financial history may remain in a group as Former member so other members keep an accurate ledger.