Privacy Policy

Introduction

Your privacy is important to us. It is expenseSettle's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, email address, and phone number), your devices, payment details, and information about how you use our website or service.

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

Information We Collect

Information we collect falls into one of two categories: "voluntarily provided" information and "automatically collected" information.

"Voluntarily provided" information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.

"Automatically collected" information refers to any information automatically sent by your devices in the course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device's Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit.

Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Device Data

When you visit our website or interact with our services, we may automatically collect data about your device, such as:

• Device type
• Operating system
• Unique device identifiers
• Device settings
• Mobile network information

Data we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Personal Information

We may ask for personal information when you use our service, which may include one or more of the following:

• Name
• Email address
• Phone number
• Payment information (for premium features)
• Bill information (to support bill splitting functionality)
• Profile information and preferences

Collection and Use of Information

We may collect personal information from you when you do any of the following on our website:

• Register for an account
• Create or join expense groups
• Upload or share bill information for splitting expenses
• Add other users to expense splits
• Subscribe to premium features
• Contact us via email or support channels
• Participate in surveys or feedback

Lawful Bases for Processing

We rely on the following legal bases to process your personal data:

• Contractual necessity: To provide you with our platform's core features, including expense tracking and bill splitting functionality
• Legitimate interests: To improve our services, maintain security, prevent fraud, and optimize user experience
• Legal compliance: To comply with applicable laws and regulations
• Consent: For marketing communications and optional features

We may collect, hold, use, and disclose information for the following purposes:

• To provide you with our platform's core features and services (contractual necessity)
• To facilitate expense tracking and bill splitting calculations (contractual necessity)
• To enable you to customize or personalize your experience (legitimate interest)
• To contact and communicate with you about service updates and changes (legitimate interest)
• To send you marketing and promotional communications with your explicit consent (consent)
• To comply with our legal obligations and resolve disputes (legal obligation)
• For security and fraud prevention, and to ensure our services are safe and secure (legitimate interest)
• For technical assessment and to operate and improve our platform (legitimate interest)
• To process payments and manage subscriptions (contractual necessity)

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

We employ industry-standard security measures including:

• Secure socket layer (SSL) technology for data in transit
• Encrypted storage for sensitive data at rest
• Password hashing and secure authentication practices
• Regular security assessments and updates
• Access controls and role-based permissions for internal systems
• Regular security patches and vulnerability management

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security.

You are responsible for maintaining the confidentiality of your account credentials and passwords. Ensure the security of your own information within the bounds of our services by keeping your passwords secure and confidential.

Data Breach Notification

In the event we become aware of a data breach that may affect your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Provide information on what data was compromised
• Outline steps we are taking to address the breach
• Offer guidance on what users can do to protect themselves
• Report to relevant authorities as required by applicable laws

Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

• Account information: Retained for as long as your account remains active. After account deletion, certain information may be kept for up to 90 days for technical and backup purposes.
• Bill and expense information: Retained for as long as needed to provide expense splitting functionality and maintain transaction history.
• Communication data: Support inquiries and related communications are kept for 2 years.
• Payment information: Processed securely by our payment providers and not stored long-term on our systems.
• Log and usage data: Retained for 30-90 days for security and performance monitoring.

Bill Information and OCR Processing

As a bill-splitting application, we process bill information including:

• Bill images and receipts that you upload
• Extracted bill data (totals, item descriptions, dates)
• Expense categories and allocations
• Sharing status and splitting information between users

Important note: We do not store actual financial transaction data or process payments directly. Our application only facilitates the calculation and division of expenses.

Bill images are processed using automated OCR (Optical Character Recognition) technology to extract relevant information. This processing is performed by trusted third-party providers to accurately extract expense details from your uploaded receipts.

Uploaded bill images are stored securely and deleted once processing is complete, unless you choose to keep them for reference. You can delete bill information at any time from your account.

Sharing Bill Information with Other Users

When you add other users to a bill or expense split:

• We collect basic contact information (email, name) of people you add to split bills
• We will notify these individuals about the expense allocation
• We obtain your confirmation that you have permission to share this information
• Third parties added to bills can see only the relevant expense information, not unnecessary personal data

By using our bill-splitting functionality, you confirm that you have obtained permission from any third party whose information you provide. These individuals can contact us at [email protected] to request information about their data or to have it removed.

Third-Party Service Providers

We may share your data with third parties that perform services for us or on our behalf, including:

• Payment processing: Stripe, PayPal (for processing subscription and payment features)
• Cloud services and hosting: For infrastructure, database, and application hosting
• Analytics services: To understand how visitors use our site and improve our services
• Email services: For sending notifications, updates, and communications
• OCR providers: For automated processing and extraction of bill information

All third-party providers are required to maintain the confidentiality of your data and are contractually obligated not to disclose or use it for any other purpose. We ensure all providers comply with data protection regulations relevant to their services and are GDPR compliant where applicable.

International Data Transfers

Your information, including personal data, may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

If you are located in the European Economic Area (EEA) or the United Kingdom, we ensure that your data is protected when transferred outside these regions. We implement the following safeguards:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with third-party providers
• Compliance with applicable data protection regulations
• Storage of EU data within EU regions where possible

By using our service, you consent to the transfer of such information to other regions, always in accordance with this Privacy Policy.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

GDPR Rights (EU/UK Residents)

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data in a structured format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent for processing at any time

CCPA Rights (California Residents)

• Right to know: Request information about personal information collected
• Right to delete: Request deletion of personal information
• Right to opt-out: Opt-out of the sale of personal information
• Right to non-discrimination: Not be discriminated against for exercising your rights

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. To verify your identity, we may request specific information from you. There is no charge for making a request, though we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Children's Privacy

We do not aim any of our products or services directly at children under the age of 13, and we do not knowingly collect personal information about children under 13. If we discover that we have collected personal information from a child under 13, we will promptly delete it. If you believe we have collected information from a child under 13, please contact us at [email protected].

Use of Cookies

We use "cookies" to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on preferences you have specified.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the website to function properly (authentication, security)
• Functional cookies: Remember your preferences and settings
• Analytical/performance cookies: Collect anonymous information about how visitors use our site
• Targeting cookies: Record your visits to our website and pages you visit

When you first visit our site, we will request your consent for non-essential cookies. You can manage your cookie preferences at any time through your browser settings or by contacting us.

Changes to This Privacy Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.

If the changes are significant, we will notify you via email or through an in-app notification. We will also keep prior versions of this Privacy Policy in an archive for your review.

Changes will not apply retroactively and will become effective 30 days after posting, except for changes addressing new legal requirements or functions, which will be effective immediately.

Contact Us

For any questions or concerns regarding your privacy, data access requests, or to exercise your rights under applicable data protection laws, you may contact us using the following details:

---

This Privacy Policy is effective as of February 10, 2026. Your continued use of our service following the posting of revised Privacy Policy means that you accept and agree to the changes.