Privacy Policy

1. Information you give us

Expenddy is an expense-splitting service, so most of what we hold is information you typed in yourself:

• Account details— your name, and an email address and/or phone number. Your password is stored only as a salted hash (bcrypt); we never see or store the password itself. If you sign in with Google, we receive your Google account's name, email address and profile photo URL.
• Profile — an optional profile photo, and your country and currency preference.
• Financial records you create — groups and their members, expenses (description, amount, currency, category, date, receipt image), how each expense is split, settlements between members, your 1:1 friend ledger entries, and your personal spending and income records. This is your data about your own money; we do not connect to your bank and we never see your account or card numbers.
• Contact details you enter for other people— when you add someone to a group or a ledger by name, email or phone. Only add details you are entitled to share, and see “People you add” below.
• Messages you send us — anything you email to support.

2. Information collected automatically

• Device and app information — the app version and (on mobile) the over-the-air update version, recorded alongside significant actions so we can diagnose problems and enforce minimum supported versions.
• Audit records — an append-only log of money- and membership-affecting actions (who added, edited, deleted or settled what, and when). This exists so a disputed balance can be explained, and it is retained for as long as the related records exist.
• Approximate region at sign-up — we make a best-effort lookup of the country your request comes from, using third-party IP geolocation services (ipapi.co and api.country.is), purely to preselect the right country and currency. We store the resulting country and currency, not your IP address.
• Push notification tokens — if you enable notifications in the mobile app.
• Server logs — standard technical logs generated in the course of running the service.

The Expenddy website does not use advertising or analytics cookies. See our Cookie Policy for the full list of what is stored in your browser.

3. Why we use it

We use your information to:

• Provide the service — create your account, keep groups and balances correct, and show you what you owe and are owed.
• Verify your email address at sign-up and let you reset a forgotten password.
• Send you service messages: group invitations, notifications about expenses and settlements you're involved in, and (if you leave it on) a monthly spending summary email.
• Keep the service secure, prevent fraudulent or abusive sign-ups, and investigate problems.
• Meet our legal obligations.

Where the law requires a lawful basis (for example under the UK/EU GDPR), we rely on performance of our contract with you for providing the service, our legitimate interests in keeping it secure and working correctly, your consent where we ask for it (such as push notifications), and legal obligation where one applies.

4. People you add

Expenddy only works if the people you split with can see the split. When you add someone to a group or record an expense involving them, the other members of that group can see your name, your profile photo, and the expenses, shares and settlements you are part of. Your email address and phone number are not shown to other members.

If you invite someone who is not yet on Expenddy, we use the email address or phone number you provide to send that one invitation, and we hold it against the pending invitation so it can be matched to their account if they sign up. If they never accept, the invitation expires.

5. Who we share it with

We do not sell your personal information. We share it only with service providers who process it on our behalf, under contract, and only for the purposes above:

• Cloud hosting and managed database providers, which host the application and store its data.
• Cloudinary and Amazon Web Services (S3), for storing images you upload such as profile photos and receipts.
• Google Firebase Cloud Messaging, for delivering push notifications to mobile devices.
• Google Sign-In, if you choose to sign in with your Google account.
• Our email delivery provider, for verification codes, password resets, invitations and summary emails.
• IP geolocation providers (ipapi.co, api.country.is), for the region lookup described above.

We may also disclose information where we are legally required to, or to establish, exercise or defend legal claims. If the service is ever transferred to another owner, your information may transfer with it, and this policy will continue to apply until you are told otherwise.

6. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

7. How long we keep it

We keep your account and its records for as long as your account exists. Financial records shared with other people — expenses, splits and settlements in a group — are part of those other people's records too, so deleting your account does not erase them from the group's history; they remain, disassociated from your account where we can do so without corrupting the group's balances. Audit records are retained for as long as the transactions they describe. Email verification codes and password reset tokens are short-lived and expire automatically.

8. Your choices and rights

• Access and correction — you can view and edit your name, email, phone and currency in Settings at any time.
• Export— any group's full ledger can be exported to CSV from that group's settings.
• Deletion — see Delete your account for how to request deletion and what happens to shared records.
• Notifications — every category of push notification, and the monthly summary email, can be switched off in Settings. Summary emails also carry an unsubscribe link. Service messages such as password resets cannot be switched off while you have an account.
• Statutory rights — depending on where you live, you may have rights to access, correct, delete, restrict or object to our processing, to data portability, and to lodge a complaint with your data protection authority. Email us to exercise any of them.

9. Security

Passwords are hashed with bcrypt and never stored in readable form. Access to the API requires a signed token that expires. Traffic is encrypted in transit. No service can promise perfect security, but we take reasonable technical and organisational measures to protect your information, and we will tell you and the relevant regulator about a breach where the law requires it.

10. Children

Expenddy is not intended for children under 13 (or the minimum age in your country, if higher), and we do not knowingly collect their information. If you believe a child has given us personal information, email us and we will delete it.

11. Changes to this policy

We will update this page when our practices change, and update the “last updated” date above. Material changes will be announced in the app or by email.

12. Contact us

Detsol, operator of Expenddy — email hello@expenddy.com.