Privacy policy
Last updated: 27 September 2026
Evenlo helps groups of people share costs. This policy explains what information the Evenlo app and website collect, why, who we share it with, and the choices you have. We don't sell your data, we don't show ads, and we don't use tracking or advertising SDKs.
Who we are
Evenlo is the data controller for the information described here. You can contact us about privacy at hello@evenlo.app.
What we collect
| Information | Why |
|---|---|
| Account: email address, password (stored hashed by our authentication provider), display name, default currency | To create your account, sign you in, and show your name to people in your groups. |
| Group content: groups, the names of people you add, expenses (descriptions, amounts, currencies, dates, categories, notes), splits, payments you record, comments, repeating expenses | This is the core of the service, and it's shared with the other members of each group. |
| Receipt photos you scan or attach | Scanned photos are sent to our AI provider to read the items. If you choose to attach a photo to an expense, it's stored privately and visible only to members of that group. |
| Payment details you choose to add (IBAN, or a Revolut, PayPal.me or Monzo.me username) | Shown to members of your groups so they can pay you back. They're optional. |
| Device push token | To send notifications you've allowed, such as a new expense, a payment or a comment. You can turn these off in the app or in your phone's settings. |
| Purchase status (whether you have Pro or a Trip Pass, and when it expires) | To unlock paid features. We never see your card details; payments are handled by Apple or Google. |
| Usage counters (number of receipt scans this month) | To apply the free plan's scan limit. |
| Crash and error reports (what went wrong, the app version, your phone model and operating system, and an anonymous account ID) | To find and fix bugs. Reports never include your email, IP address, or the contents of your groups. |
We don't collect your location, contacts or advertising identifiers, and we don't use third-party analytics or advertising trackers.
People you add to a group
You can add friends to a group by name before they join. We store only the name you type. When they join with the invite link, they can link that name to their own account.
Who we share it with
We use a small number of service providers ("processors") who handle data only on our behalf:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and server functions | EU (Ireland) |
| Anthropic | Reading receipt photos when you use receipt scanning. Images are used only to return the items, aren't used to train models, and are deleted by Anthropic within 30 days. | United States |
| Expo (650 Industries) | Delivering push notifications | United States |
| RevenueCat | Managing Pro and Trip Pass purchases | United States |
| Sentry (Functional Software) | Crash and error reports | EU (Germany) |
| Apple / Google | Processing in-app payments under their own privacy policies | Global |
Exchange rates come from a public rates service. We only request rates between currencies, and no personal information is sent.
Where data is transferred outside the EU, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards. We'll disclose information if the law requires it.
Legal bases (GDPR)
We process your information to provide the service you signed up for (contract), to keep it secure and prevent abuse (legitimate interests), with your consent for push notifications and camera or photo access, and to meet legal obligations such as keeping payment records.
How long we keep it
We keep your information while you have an account. Receipt photos are deleted when you remove them or their expense. When you delete your account, your login, email and profile, including payment details and push tokens, are deleted straight away. To keep other members' balances correct, expenses you were part of remain in their groups under the name you used there, no longer linked to you. Backups are overwritten within 30 days.
Your rights
You can access, correct, export or delete your information. Most of this you can do yourself in the app: edit your profile in Settings, export a group to CSV, or use Settings → Delete account. For anything else, email hello@evenlo.app. If you're in the EU or UK, you also have the right to object to or restrict processing, and to complain to your data protection authority. In Ireland that's the Data Protection Commission (dataprotection.ie).
Security
Data is encrypted in transit and at rest. Access is restricted per group by database-level security rules, and receipt photos are stored privately.
Children
Evenlo isn't directed at children under 16, and we don't knowingly collect their information.
Changes
If we make significant changes, we'll update this page and the date above, and tell you in the app where appropriate.