Account Information
If you create an account, we collect your full name, email address, and phone number (for email and password signup). If you use Google or Apple Sign In, we receive identifiers and profile information from those providers (such as name and email). We store authentication tokens and session data to keep you signed in. You can delete your account at any time from Profile → Security → Danger Zone in the app.
Device Information
We collect a persistent device identifier, your device platform (iOS or Android), app version, language, currency, and general region or country settings. When you are signed in, we may link this device identifier to your account.
Receipt Images
When you scan a receipt, the image is sent to our servers and processed using Google Gemini AI (Google Cloud Vertex AI) to extract items and prices. We keep the receipt image, the extracted details (such as venue, items, and totals), and the AI's response indefinitely, to improve our scanning accuracy and train our models. This applies whether or not the scan succeeds, and whether you are signed in or using the app as a guest.
Usage and Analytics Data
We collect usage information such as API requests, scan activity, and error events. This may include your device identifier and, when signed in, your account identifier, display name, language, currency, and country. Request-level analytics are retained for approximately 30 days, then deleted. Some records, such as your account's saved name in our device activity logs, may be retained longer as part of standard account activity tracking.
Bills, Groups, and Contact Links
Bill splits are stored primarily on your device. When you sign in, saved groups (including member names and phone numbers you add) sync to our servers. If you used the app as a guest before signing in, completed bills may be uploaded once to merge into your account. We do not upload your entire contacts address book — only contact details you explicitly choose to link.
Contacts Permission
With your permission, you can pick a contact from your address book to link a phone number to a group member. We access only the contact you select.
Push Notifications
If you enable notifications, we register an Expo push token linked to your device identifier (and account, when signed in) so we can send service announcements or reminders you opt into.
Offers and Loyalty
If you browse partner offers or redeem rewards, we record activity tied to your account to operate the program and prevent fraud. Redemption at a partner venue may require a staff PIN; failed PIN attempts and redemption events are logged to prevent fraudulent or duplicate use, and repeated failures can temporarily lock a code or venue.