Privacy Policy

Account Information:

• Email address (required for authentication)
• Display name
• Profile picture (optional)
• PayPal email (optional, for payment processing)

Expense Data:

• Expense descriptions and amounts
• Transaction dates and times
• Payment status and settlement records
• Expense categories and notes

Group Data:

• Group names and descriptions
• Group member information
• Shared expense records
• Group balances and settlements

Individual Debt Records:

• One-on-one debt tracking between users
• Payment history and settlements
• Debt descriptions and amounts

Device Information:

• Device type and operating system (for app functionality)
• App version information
• Push notification tokens (if you enable notifications)

Cloud Storage:

• Your data is stored securely on Supabase servers (PostgreSQL database)
• All data transmissions are encrypted using HTTPS/TLS
• Database access is protected by Row Level Security (RLS) policies
• Only you and authorized group members can access your expense data

Local Storage:

• Some data is cached locally on your device using AsyncStorage
• Local data enables offline functionality and faster app performance
• Local data is automatically synchronized when you're online
• You can clear local data by logging out or uninstalling the app

Security Measures:

• Password-based authentication with secure password hashing
• Session-based access control with automatic timeout
• Regular security audits and updates
• Protection against SQL injection and other common vulnerabilities

Supabase:

• Provides authentication and database services
• Stores your account and expense data
• Subject to Supabase's privacy policy and security practices
• Learn more: supabase.com/privacy

PayPal:

• Enables payment processing between users
• We only share your PayPal email (if provided) to facilitate payments
• Payment transactions are processed directly by PayPal
• Subject to PayPal's privacy policy and terms of service
• Learn more: paypal.com/privacy

With Group Members:

• When you join a group, your name and profile picture are visible to other members
• Group expenses and splits are visible to all group members
• Group balances and settlement information are shared within the group

With Friends:

• When you add a friend, they can see your name and profile picture
• Individual debts are only visible to you and the friend involved

For Payment Processing:

• Your PayPal email is shared only when you initiate or receive a payment
• Payment information is processed securely through PayPal

Right to Access:

• You can view all your data within the app at any time
• Request a copy of your data by contacting us

Right to Rectification:

• Update your profile information in the app settings
• Edit or correct expense records you've created

Right to Deletion:

• Delete your account and all associated data from the app settings
• Request complete data deletion by contacting us
• Note: Shared expense records in groups may remain visible to other members

Right to Data Portability:

• Request an export of your data in a machine-readable format
• Transfer your data to another service (where technically feasible)

Right to Object:

• Opt out of notifications in the app settings
• Object to any processing of your data

Active Accounts:

• Your data is retained while your account is active
• You can access and manage your data at any time

Account Deletion:

• When you delete your account, your personal data is permanently removed
• Deletion is processed immediately and cannot be undone
• Some data may be retained for legal or security purposes (e.g., fraud prevention)
• Shared expense records in groups may remain visible to other members after deletion

Inactive Accounts:

• We do not automatically delete inactive accounts
• Your data remains accessible when you return to the app
• You can delete your account at any time if you no longer wish to use TallyCrew