Your expense data: the groups, members, categories, records, photos, budgets and tags you create. They are synced to our server and only members of the same group can see them.
Account: an anonymous account ID created the first time you open the app. If you choose Sign in with Apple, we receive the account identifier Apple provides (no email address or password).
Push notifications: your device's push token and interface language, used to tell you about new records in your groups in your language.
Feedback: what you choose to send us, an optional way to contact you, and the app and system version.
Receipt and e-invoice reading: QR codes and receipt text are read on your phone; photos are not uploaded for this.
Subscriptions (Pro): payments are handled by Apple / Google. We check your subscription status through RevenueCat and never receive your payment details.
Ads (free version): provided by Google AdMob, which may use your device's advertising identifier, approximate location and ad interaction data to show and measure ads. On iPhone you are asked first whether to allow tracking; everything works if you don't. Pro subscribers see no ads.
Storage and security
Data is stored on Cloudflare's servers, encrypted in transit (HTTPS) and at rest. We never sell your data.
Deleting your data
In the app, go to Settings › Account & sync › Delete account to delete your account and cloud data. Groups where you are the only member are deleted together with their records and photos.