Privacy Policy

Last updated: March 2025

Paylo (“we”, “our”) is a group expense splitting app. This policy describes what data we collect, how we use it, and your rights.

1. Data we collect

• Account: When you sign up (email, or Google/Apple Sign-In), we store your email, display name, and optionally profile photo. We do not see or store your Google or Apple password.
• Expenses and groups: Group names, expense descriptions, amounts, currencies, splits, and member links. This is needed to provide the app and sync across your devices.
• Location (optional): If you use place-related features, we may use your device location with your permission. You can deny or revoke this in device settings.
• Receipt scanning: If you use the receipt scan feature, images are processed on your device (e.g. with Google ML Kit) to extract text. We do not upload receipt images to our servers; only the extracted text (amount, date, description) may be saved as part of an expense.
• Device and storage: We store auth tokens securely on your device (e.g. in the system keychain) so you stay signed in.

2. How we use your data

We use the data above to run the app: create and sync groups, calculate balances, show settlements, and let you manage expenses. We do not sell your data. We do not use it for advertising or third-party marketing.

3. Third-party services

• Backend: User and expense data are stored and processed using Supabase (hosted infrastructure). See Supabase privacy.
• Sign-in: If you use Google or Apple Sign-In, their privacy policies apply to the sign-in process: Google, Apple.
• Receipt text recognition: Done on-device (e.g. Google ML Kit). No receipt images are sent to our servers.

4. Data retention and deletion

We keep your data while your account is active. You can request deletion of your account and associated data at any time. We will process deletion in line with applicable law.

Request account and data deletion

5. Security

We use industry-standard practices: encrypted connections (HTTPS), secure token storage on device, and access controls on the backend. You are responsible for keeping your device and account access secure.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your data, or to object to or restrict certain processing. To exercise these rights or ask questions, contact us at the email below.

7. Children

Paylo is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have done so, please contact us and we will delete it.

8. Changes

We may update this policy from time to time. We will post the updated version here and, for material changes, we may notify you in the app or by email. Continued use of Paylo after changes means you accept the updated policy.

9. Contact

For privacy questions, data requests, or complaints: