Privacy Policy
Effective date: June 18, 2026
1. Information we collect
We collect only the information needed to provide the service.
| Category | Items |
|---|---|
| Account | When you sign in with a social provider (Kakao, Google, or Apple): a provider-supplied identifier, display name, email, and basic profile. You may also use the app as a guest. |
| Your content | Group and member names, expenses (title, amount, currency, date, memo, category), settlements, split ratios, and attached images (e.g., receipts). |
| Device & technical | Device identifier, push notification token (FCM/APNs), platform (iOS/Android), app version, and language setting. |
| Logs | Access and request logs for operation and error diagnostics. |
We do not collect payment card details, precise location, or your contacts, and we do not use advertising tracking identifiers.
2. How we use information
- To provide core features such as groups, expenses, and settlement.
- To authenticate and identify you.
- To send push notifications such as new expenses and settlement requests.
- To convert foreign-currency expenses to your base currency.
- To operate, improve, and troubleshoot the service.
Legal basis for processing: We process personal data on the following legal bases.
- Performance of a contract — providing core features (groups, expenses, settlement) and authenticating your account
- Your consent — e.g., sending push notifications
- Legitimate interests — keeping the service secure, preventing abuse, diagnosing errors, and improving the service (balanced against your rights)
- Legal obligation — where applicable law requires retention
3. Third parties & processors
We do not sell your personal information. We rely on the trusted providers below to operate the service, and each provider is required to protect your personal information to the same or equal standard as described in this policy.
| Provider | Purpose |
|---|---|
| Kakao · Google · Apple | Social login authentication |
| Google Firebase Cloud Messaging / Apple APNs | Push notification delivery |
| Cloudflare (R2 포함) | Server hosting and storage of attached images |
| Neon | Database hosting |
| Exchange-rate API | Currency conversion (no personal data sent) |
We may disclose information only where required by applicable law (e.g., a valid legal request).
International transfers: Some of the providers above (e.g., Google Firebase, Apple, Cloudflare, Neon) may process data outside the Republic of Korea or the European Economic Area (EEA). Where this happens, we rely on appropriate safeguards recognized by applicable law — such as Standard Contractual Clauses (SCCs) — to keep your data protected to the same standard as described in this policy.
4. Retention & deletion
We retain personal information while you use the service and delete it without undue delay when you delete your account, except where law requires longer retention. Expenses shared in a group may remain while the group/data exists, to preserve settlement accuracy for other members.
5. Your rights
- Access and correct your information.
- Delete your account and data from in-app settings (guide).
- Withdraw push-notification consent in device settings.
- Request restriction of processing.
- Request data portability — a structured, machine-readable copy of your data.
- Object to processing based on our legitimate interests.
- Lodge a complaint with a supervisory authority — Korea: PIPC, KISA report center (118), Personal Information Dispute Mediation Committee; EEA: your local data protection authority (e.g., CNIL in France).
6. Security
Data is encrypted in transit (HTTPS), and authentication tokens are stored in the device's secure storage. We apply reasonable safeguards, but no method of transmission over the internet is completely secure.
7. Children's privacy
The service is not directed to children under 14 (or the minimum age in your country), and we do not knowingly collect their information.
8. Changes to this policy
We may update this policy and will post changes here with a new effective date.
9. Contact & data protection
Privacy questions and data-protection contact: [email protected]