Privacy Policy

1. Information we collect

We collect only the data needed to provide the service:

• Account data: your email address, name, and (optionally) a profile image.
• Authentication data: your password is never stored in plain text — only a cryptographic hash (scrypt). If you sign in with Google, we store the OAuth identifiers and tokens Google returns so we can keep you signed in.
• Expense and group data you create: group names and descriptions, expense amounts, currency, descriptions, notes, places, categories, how each expense is split, and settlements between members.
• Group membership: which groups you belong to and your role in each.
• Invitations: when you invite someone to a group, we store the email address you provide — even if that person does not yet have a Settleo account — until the invitation is accepted, revoked, or expires.
• Receipt images: if you attach a receipt to an expense (a paid feature), we store that image and its metadata.
• Subscription data: your plan and its status. We do not collect or store payment card details (see “Third parties” below).
• Technical data: IP address, browser/device user agent, session tokens, and operational logs used to keep the service secure and working.

2. How we use your data

• To provide and operate Settleo — authenticate you, calculate balances and splits, and show your groups and activity.
• To send transactional emails: email verification, password reset, and group invitations.
• To keep the service secure, prevent abuse, and troubleshoot problems.
• To comply with legal obligations.

3. Third parties and subprocessors

We share data only with the service providers needed to run Settleo. Each processes data on our behalf:

• Google — to let you sign in with your Google account (OAuth).
• Neon — managed PostgreSQL database hosting where your account and app data are stored.
• Cloudflare — application hosting (Workers), receipt image storage (R2), and operational logging.
• Resend — delivery of transactional emails (verification, password reset, invitations).

4. What we do not do

• We do not sell your personal data.
• We do not use third-party advertising or analytics SDKs.
• We do not currently process payments. If we launch paid plans, a third-party payment processor will handle the transaction and we will never store your full card details. This policy will be updated before that happens.

5. International data transfers

Our providers may process and store data in countries other than yours. When they do, they are bound by contractual and technical safeguards to protect your data.

6. Data retention

We keep your personal data while your account is active. Invitations are kept until they are accepted, revoked, or expire. When you delete your account, we delete or anonymize your personal data as described below.

7. Security

All traffic between your device and Settleo is encrypted in transit using HTTPS/TLS. Passwords are stored only as scrypt hashes, never in plain text. We restrict internal access to personal data.

8. Your rights and account deletion

You can request access to, correction of, or deletion of your personal data at any time by emailing play@settleo.app. To delete your account and the personal data associated with it, send a request from your account email to play@settleo.app; we will process it within 30 days.

9. Children

Settleo is intended for adults. It is not directed to, and we do not knowingly collect data from, anyone under 18 years of age.

10. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top reflects the latest version. We will notify you of material changes through the app or by email.

11. Contact

Questions about this policy or your data? Contact us at play@settleo.app.