Privacy Policy for DIW

Account Information

• check_circleName, email address, and password (or Google/Apple sign-in credentials)
• check_circleProfile photo (optional)

Financial & Social Data

• check_circleExpenses you create, including amounts, descriptions, and categories
• check_circleGroups you belong to and members within them
• check_circleFriend connections and invitation links you generate
• check_circleSettlement and balance history
• check_circleReceipt photos you scan and attach to a split. These are visible to the other people on that split, and are deleted when the expense or split is deleted.

Device & Technical Data

• check_circleDevice type and OS version
• check_circlePush notification tokens
• check_circlePasskey/WebAuthn credentials (stored locally on device)

• check_circleAuthenticate your identity and secure your account
• check_circleCalculate and display bill splits and balances
• check_circleSend in-app and push notifications (e.g., expense updates, settlements)
• check_circleResolve group invitations via deep links
• check_circleImprove app performance and fix bugs

• check_circleWith other group members (name, amounts owed/paid)
• check_circleWith third-party auth providers (Google, Apple) solely for sign-in
• check_circleWhen required by law

• check_circleTokens are stored securely using encrypted device storage
• check_circleAll API requests use HTTPS with JWT authorization
• check_circleFinancial data is stored in our database and is never shared with advertisers
• check_circleReceipt photos are stored in a private, encrypted bucket and are never publicly accessible. A scan you do not save is discarded within 24 hours.

You may at any time:

• check_circleUpdate or delete your account
• check_circleRemove yourself from groups
• check_circleRevoke passkey credentials from your device settings

When you attach a receipt photo:

• check_circleIt is stored in our private storage and attached to that one expense.
• check_circleIt is visible to the other people on that group or split, and to no one else.
• check_circleYour phone reads the total from the image to fill in the form. That reading happens on your device — we do not receive the extracted text, and we do not analyse the photo for anything else.
• check_circleWe do not use receipt photos for advertising, for profiling you, or for training machine-learning models, and we never sell them or share them with third parties.
• check_circleDeleting the expense deletes the photo and its thumbnail. Replacing a photo deletes the one it replaced.
• check_circleA photo you scan but never save is discarded automatically within 24 hours.